]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Log SSL alerts more prominently
authorArne Schwabe <arne@rfc2549.org>
Tue, 21 Nov 2023 10:39:30 +0000 (11:39 +0100)
committerGert Doering <gert@greenie.muc.de>
Tue, 21 Nov 2023 21:17:16 +0000 (22:17 +0100)
commita1cb1b47b138b9f654cd0bca5de6d08dbca61888
tree1cc209472ae08e880e4f2af8a2d263af40cc4751
parent57172d84096cc03e4a5a0658b9abb15d4173859d
Log SSL alerts more prominently

When we receive an SSL alert from a server we currently only log a
very cryptic OpenSSL error message:

   OpenSSL: error:0A00042E:SSL routines::tlsv1 alert protocol version:SSL alert number 70

This also enables logging the much more readable SSL error message:

   Received fatal SSL alert: protocol version

which previously needed --verb 8 to be displayed (now verb 3). Also rework the
message to be better readable.

Change-Id: I6bdab3028c9bd679c31d4177a746a3ea505dcbbf
Signed-off-by: Arne Schwabe <arne@rfc2549.org>
Acked-by: Frank Lichtenheld <frank@lichtenheld.com>
Message-Id: <20231121103930.15175-1-frank@lichtenheld.com>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg27523.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
src/openvpn/ssl_openssl.c