changeset 9404:bc8c07956f34

QUIC: logging level of handshake errors. Various errors reported by SSL_do_handshake() are now logged at the "info" or "crit" level, akin to handshakes on regular TCP connections.
author Sergey Kandaurov <pluknet@nginx.com>
date Tue, 06 May 2025 15:09:28 +0400
parents 46342a9e2972
children b6668b7ba8e6
files src/event/ngx_event_openssl.c src/event/ngx_event_openssl.h src/event/quic/ngx_event_quic_ssl.c
diffstat 3 files changed, 4 insertions(+), 4 deletions(-) [+]
line wrap: on
line diff
--- a/src/event/ngx_event_openssl.c	Tue May 06 15:17:44 2025 +0400
+++ b/src/event/ngx_event_openssl.c	Tue May 06 15:09:28 2025 +0400
@@ -45,8 +45,6 @@
     size_t size);
 static void ngx_ssl_read_handler(ngx_event_t *rev);
 static void ngx_ssl_shutdown_handler(ngx_event_t *ev);
-static void ngx_ssl_connection_error(ngx_connection_t *c, int sslerr,
-    ngx_err_t err, char *text);
 static void ngx_ssl_clear_error(ngx_log_t *log);
 
 static ngx_int_t ngx_ssl_session_id_context(ngx_ssl_t *ssl,
@@ -3301,7 +3299,7 @@
 }
 
 
-static void
+void
 ngx_ssl_connection_error(ngx_connection_t *c, int sslerr, ngx_err_t err,
     char *text)
 {
--- a/src/event/ngx_event_openssl.h	Tue May 06 15:17:44 2025 +0400
+++ b/src/event/ngx_event_openssl.h	Tue May 06 15:09:28 2025 +0400
@@ -361,6 +361,8 @@
     off_t limit);
 void ngx_ssl_free_buffer(ngx_connection_t *c);
 ngx_int_t ngx_ssl_shutdown(ngx_connection_t *c);
+void ngx_ssl_connection_error(ngx_connection_t *c, int sslerr, ngx_err_t err,
+    char *text);
 void ngx_cdecl ngx_ssl_error(ngx_uint_t level, ngx_log_t *log, ngx_err_t err,
     char *fmt, ...);
 void ngx_ssl_cleanup_ctx(void *data);
--- a/src/event/quic/ngx_event_quic_ssl.c	Tue May 06 15:17:44 2025 +0400
+++ b/src/event/quic/ngx_event_quic_ssl.c	Tue May 06 15:09:28 2025 +0400
@@ -427,7 +427,7 @@
                 return NGX_ERROR;
             }
 
-            ngx_ssl_error(NGX_LOG_ERR, c->log, 0, "SSL_do_handshake() failed");
+            ngx_ssl_connection_error(c, sslerr, 0, "SSL_do_handshake() failed");
             return NGX_ERROR;
         }
     }