OpenVPN/openvpn
1
0
Fork 0
mirror of https://github.com/OpenVPN/openvpn.git synced 2025-05-09 13:41:06 +08:00
Code Issues Packages Projects Releases Wiki Activity

Log SSL alerts more prominently

Browse Source 
When we receive an SSL alert from a server we currently only log a
very cryptic OpenSSL error message:

   OpenSSL: error:0A00042E:SSL routines::tlsv1 alert protocol version:SSL alert number 70

This also enables logging the much more readable SSL error message:

   Received fatal SSL alert: protocol version

which previously needed --verb 8 to be displayed (now verb 3). Also rework the
message to be better readable.

Change-Id: I6bdab3028c9bd679c31d4177a746a3ea505dcbbf
Signed-off-by: Arne Schwabe <arne@rfc2549.org>
Acked-by: Frank Lichtenheld <frank@lichtenheld.com>
Message-Id: <20231121103930.15175-1-frank@lichtenheld.com>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg27523.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
This commit is contained in:
Arne Schwabe 2023-11-21 11:39:30 +01:00 committed by Gert Doering
parent 57172d8409
commit a1cb1b47b1
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/openvpn/ssl_openssl.c
View File

@ -196,8 +196,8 @@ info_callback(INFO_CALLBACK_SSL_CONST SSL *s, int where, int ret)
} }
else if (where & SSL_CB_ALERT) else if (where & SSL_CB_ALERT)
{ {
dmsg(D_HANDSHAKE_VERBOSE, "SSL alert (%s): %s: %s", dmsg(D_TLS_DEBUG_LOW, "%s %s SSL alert: %s",
where & SSL_CB_READ ? "read" : "write", where & SSL_CB_READ ? "Received" : "Sent",
SSL_alert_type_string_long(ret), SSL_alert_type_string_long(ret),
SSL_alert_desc_string_long(ret)); SSL_alert_desc_string_long(ret));
} }