]> git.ipfire.org Git - thirdparty/haproxy.git/commit
MINOR: connection: add a new error code for SSL with heartbeat
authorWilly Tarreau <w@1wt.eu>
Fri, 25 Apr 2014 16:54:29 +0000 (18:54 +0200)
committerWilly Tarreau <w@1wt.eu>
Fri, 25 Apr 2014 16:56:57 +0000 (18:56 +0200)
commitb3966377d88b28d731590e02e82dae0b867b711c
tree3b4e2553dc2e04146afa5da1473e68dbfd08e82d
parent73025dd7e24b18bdd36c6c11d2e077419bd9748d
MINOR: connection: add a new error code for SSL with heartbeat

Users have seen a huge increase in the rate of SSL handshake failures
starting from 2014/04/08 with the release of the Heartbleed OpenSSL
vulnerability (CVE-2014-0160). Haproxy can detect that a heartbeat
was received in the incoming handshake, and such heartbeats are not
supposed to be common, so let's log a different message when a
handshake error happens after a heartbeat is detected.

This patch only adds the new message and the new code.
include/proto/connection.h
include/types/connection.h