Klaus Demo nginx / 1ef5184
SSL: logging levels of "unsupported protocol", "version too low". Starting with OpenSSL 1.1.0, SSL_R_UNSUPPORTED_PROTOCOL instead of SSL_R_UNKNOWN_PROTOCOL is reported when a protocol is disabled via an SSL_OP_NO_* option. Additionally, SSL_R_VERSION_TOO_LOW is reported when using MinProtocol or when seclevel checks (as set by @SECLEVEL=n in the cipher string) rejects a protocol, and this is what happens with SSLv3 and @SECLEVEL=1, which is the default. There is also the SSL_R_VERSION_TOO_HIGH error code, but it looks like it is not possible to trigger it. Maxim Dounin 3 years ago
1 changed file(s) with 4 addition(s) and 0 deletion(s). Raw diff Collapse all Expand all
20792079 || n == SSL_R_UNEXPECTED_RECORD /* 245 */
20802080 || n == SSL_R_UNKNOWN_ALERT_TYPE /* 246 */
20812081 || n == SSL_R_UNKNOWN_PROTOCOL /* 252 */
2082 || n == SSL_R_UNSUPPORTED_PROTOCOL /* 258 */
20822083 || n == SSL_R_WRONG_VERSION_NUMBER /* 267 */
20832084 || n == SSL_R_DECRYPTION_FAILED_OR_BAD_RECORD_MAC /* 281 */
20842085 #ifdef SSL_R_RENEGOTIATE_EXT_TOO_LONG
20942095 #endif
20952096 #ifdef SSL_R_INAPPROPRIATE_FALLBACK
20962097 || n == SSL_R_INAPPROPRIATE_FALLBACK /* 373 */
2098 #endif
2099 #ifdef SSL_R_VERSION_TOO_LOW
2100 || n == SSL_R_VERSION_TOO_LOW /* 396 */
20972101 #endif
20982102 || n == 1000 /* SSL_R_SSLV3_ALERT_CLOSE_NOTIFY */
20992103 #ifdef SSL_R_SSLV3_ALERT_UNEXPECTED_MESSAGE