SSL crit errors

Denis F. Latypoff denis at gostats.ru
Sat Nov 22 14:24:16 MSK 2008


Hello Igor,

Tuesday, November 18, 2008, 10:01:19 PM, you wrote:

> On Tue, Nov 18, 2008 at 08:44:32PM +0600, Denis F. Latypoff wrote:

>> Hello nginx-ru,
>> 
>> nginx-0.7.19:
>> 
>> 2008/11/02 05:42:52 [crit] 26785#0: *49529527 SSL_do_handshake()
>> failed (SSL: error:1409442F:SSL routines:SSL3_READ_BYTES:tlsv1 alert
>> insufficient security) while SSL handshaking, client: 118.68.86.139,
>> server: ssl.gostats.com
>> 
>> 2008/11/03 01:38:09 [crit] 6414#0: *55629861 SSL_do_handshake() failed
>> (SSL: error:14094442:SSL routines:SSL3_READ_BYTES:tlsv1 alert user
>> cancelled) while SSL handshaking, client: 202.93.36.60, server:
>> ssl.gostats.com
>> 
>> 2008/11/13 11:34:51 [crit] 18224#0: *37773867 SSL_do_handshake()
>> failed (SSL: error:1408A0B6:SSL routines:SSL3_GET_CLIENT_HELLO:no
>> ciphers passed) while SSL handshaking, client: 93.177.158.76, server:
>> ssl.gostats.com
>> 
>> 2008/11/18 04:29:29 [crit] 12383#0: *73540274 SSL_do_handshake()
>> failed (SSL: error:1409441B:SSL routines:SSL3_READ_BYTES:tlsv1 alert
>> decrypt error) while SSL handshaking, client: 81.71.139.103, server:
>> ssl.gostats.com
>> 
>> это действительно crit?

> Нет, в следующей версии они будут переведены на уровень error или info,
> в зависимости от ситуации.

еще (0.7.22):

2008/11/22 01:21:04 [crit] 8087#0: *6660651 SSL_do_handshake() failed
(SSL: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown
protocol) while SSL handshaking, client: 222.253.61.23, server:
ssl.gostats.com


-- 
Best regards,
 Denis                            mailto:denis at gostats.ru






More information about the nginx-ru mailing list