<div dir="ltr"><div>Those unsupported ssl version messages should be in "info" level instead of "crit", just like other SSL related errors.</div><div>Applying below patch should make your error log cleaner:</div><div><br></div><div><a href="https://nginx.googlesource.com/nginx/+/6853c9c868504432ffadb8a7ca58ce8e50a83450%5E%21/">https://nginx.googlesource.com/nginx/+/6853c9c868504432ffadb8a7ca58ce8e50a83450%5E%21/</a><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Sat, Jul 7, 2018 at 8:38 AM, shiz <span dir="ltr"><<a href="mailto:nginx-forum@forum.nginx.org" target="_blank">nginx-forum@forum.nginx.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
<br>
I see those messages in my error logs daily.<br>
<br>
```<br>
2018/07/07 08:01:32 [crit] 31935#31935: *342781 SSL_do_handshake() failed<br>
(SSL: error:14209102:SSL<br>
routines:tls_early_post_<wbr>process_client_hello:<wbr>unsupported protocol) while SSL<br>
handshaking, client: 173.208.91.177, server: <a href="http://0.0.0.0:443" rel="noreferrer" target="_blank">0.0.0.0:443</a><br>
2018/07/07 08:06:24 [crit] 31939#31939: *343099 SSL_do_handshake() failed<br>
(SSL: error:1420918C:SSL<br>
routines:tls_early_post_<wbr>process_client_hello:version too low) while SSL<br>
handshaking, client: 141.212.122.16, server: <a href="http://0.0.0.0:443" rel="noreferrer" target="_blank">0.0.0.0:443</a><br>
```<br>
<br>
Is there a way to increase verbosity, i.e. which protocol is unsupported? <br>
which version is too low?<br>
<br>
Nginx 1.15.1, supporting TLSv1.2, TLSv1.3 draft 23, OpenSSL-1.1.1-pre2<br>
<br>
Not sure if it could be done within nginx, maybe OpenSSL source has to be<br>
edited?<br>
<br>
Posted at Nginx Forum: <a href="https://forum.nginx.org/read.php?2,280446,280446#msg-280446" rel="noreferrer" target="_blank">https://forum.nginx.org/read.<wbr>php?2,280446,280446#msg-280446</a><br>
<br>
______________________________<wbr>_________________<br>
nginx mailing list<br>
<a href="mailto:nginx@nginx.org">nginx@nginx.org</a><br>
<a href="http://mailman.nginx.org/mailman/listinfo/nginx" rel="noreferrer" target="_blank">http://mailman.nginx.org/<wbr>mailman/listinfo/nginx</a><br>
</blockquote></div><br></div>