Disable SSL3 handshake errors

Maxim Dounin mdounin at mdounin.ru
Mon Oct 13 10:01:46 UTC 2014


Hello!

On Sat, Oct 11, 2014 at 03:49:22PM +0200, Lorenzo Raffio wrote:

> I disabled SSL3 in ssl_protocols (ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ).
> So PCs with old browsers (example: IE on WinXP) fail to do the handshake
> and I have my nginx logs full of these errors
> ​​
> :
> 
> SSL_do_handshake() failed (SSL: error:1408A10B:SSL
> routines:SSL3_GET_CLIENT_HELLO:wrong version number) while SSL handshaking
> 
> ​Since this is wanted, is there a way to disable these logs (just for SSL3
> failed handshakes)?

You can configure logging level using the error_log directive, see 
http://nginx.org/r/error_log.

-- 
Maxim Dounin
http://nginx.org/



More information about the nginx mailing list