diff options
| author | Sergey Kandaurov <pluknet@nginx.com> | 2023-02-23 16:26:38 +0400 |
|---|---|---|
| committer | Sergey Kandaurov <pluknet@nginx.com> | 2023-02-23 16:26:38 +0400 |
| commit | 76adb919138225b24280bc477ff468fd13cc9e62 (patch) | |
| tree | 45150ccd792321b4cbced973ebfac2ebf5bf1569 | |
| parent | d9610b40a658a6331fc61cb41d7d255f9566cd2e (diff) | |
| download | nginx-76adb919138225b24280bc477ff468fd13cc9e62.tar.gz nginx-76adb919138225b24280bc477ff468fd13cc9e62.zip | |
QUIC: improved ssl_reject_handshake error logging.
The check follows the ngx_ssl_handshake() change in 59e1c73fe02b.
| -rw-r--r-- | src/event/quic/ngx_event_quic_ssl.c | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/src/event/quic/ngx_event_quic_ssl.c b/src/event/quic/ngx_event_quic_ssl.c index 2df38b386..f23260d24 100644 --- a/src/event/quic/ngx_event_quic_ssl.c +++ b/src/event/quic/ngx_event_quic_ssl.c @@ -423,6 +423,14 @@ ngx_quic_crypto_input(ngx_connection_t *c, ngx_chain_t *data) sslerr); if (sslerr != SSL_ERROR_WANT_READ) { + + if (c->ssl->handshake_rejected) { + ngx_connection_error(c, 0, "handshake rejected"); + ERR_clear_error(); + + return NGX_ERROR; + } + ngx_ssl_error(NGX_LOG_ERR, c->log, 0, "SSL_do_handshake() failed"); return NGX_ERROR; } |