[PATCH] Clarify 495 response message

Georg Pfuetzenreuter georg at syscid.com
Thu Apr 28 11:37:28 UTC 2022


Hello!

The current message "The SSL certificate error" feels cut off and is 
ambiguous.
I suggest the following change, which clarifies the 495 response whilst 
keeping it flexible enough to be used for different client certificate 
errors.

Best,
Georg

# HG changeset patch
# User Georg Pfuetzenreuter <mail at georg-pfuetzenreuter.net>
# Date 1651145208 -7200
#      Thu Apr 28 13:26:48 2022 +0200
# Node ID 9c2491a6c4615647768a13280eaa1e22b20fc36d
# Parent  a736a7a613ea6e182ff86fbadcb98bb0f8891c0b
Clarify 495 response

Adjust HTTP 495 response message shown to an end user to make more sense.

diff -r a736a7a613ea -r 9c2491a6c461 src/http/ngx_http_special_response.c
--- a/src/http/ngx_http_special_response.c      Tue Feb 08 17:35:27 2022 
+0300
+++ b/src/http/ngx_http_special_response.c      Thu Apr 28 13:26:48 2022 
+0200
@@ -253,11 +253,11 @@

  static char ngx_http_error_495_page[] =
  "<html>" CRLF
-"<head><title>400 The SSL certificate error</title></head>"
+"<head><title>400 SSL client certificate error</title></head>"
  CRLF
  "<body>" CRLF
  "<center><h1>400 Bad Request</h1></center>" CRLF
-"<center>The SSL certificate error</center>" CRLF
+"<center>SSL client certificate error</center>" CRLF
  ;
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_0x3DAFF26C3E79E588.asc
Type: application/pgp-keys
Size: 660 bytes
Desc: OpenPGP public key
URL: <http://mailman.nginx.org/pipermail/nginx-devel/attachments/20220428/8cb8cd98/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature
Type: application/pgp-signature
Size: 236 bytes
Desc: OpenPGP digital signature
URL: <http://mailman.nginx.org/pipermail/nginx-devel/attachments/20220428/8cb8cd98/attachment-0001.bin>


More information about the nginx-devel mailing list