From: W.C.A. Wijngaards <wouter@nlnetlabs.nl>
Date: Wed, 11 May 2022 15:10:42 +0000 (+0200)
Subject: - Fix #673: DNS over TLS: error: SSL_handshake syscall: No route to
X-Git-Tag: release-1.16.0rc1~10
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=f0d91950adc6f713290f05ca54f78ab735f5bb5f;p=thirdparty%2Funbound.git

- Fix #673: DNS over TLS: error: SSL_handshake syscall: No route to
  host.
---

diff --git a/doc/Changelog b/doc/Changelog
index 9cc1d134a..15f448fd5 100644
--- a/doc/Changelog
+++ b/doc/Changelog
@@ -1,3 +1,7 @@
+11 May 2022: Wouter
+	- Fix #673: DNS over TLS: error: SSL_handshake syscall: No route to
+	  host.
+
 10 May 2022: George
 	- Fix Python build in non-source directory; based on patch by
 	  Michael Tokarev.
diff --git a/util/netevent.c b/util/netevent.c
index f6fb8c242..4cbf3573e 100644
--- a/util/netevent.c
+++ b/util/netevent.c
@@ -1277,6 +1277,12 @@ ssl_handshake(struct comm_point* c)
 			if(errno == ECONNRESET && verbosity < 2)
 				return 0; /* silence reset by peer */
 #endif
+			if(!tcp_connect_errno_needs_log(
+				(struct sockaddr*)&c->repinfo.addr,
+				c->repinfo.addrlen))
+				return 0; /* silence connect failures that
+				show up because after connect this is the
+				first system call that accesses the socket */
 			if(errno != 0)
 				log_err("SSL_handshake syscall: %s",
 					strerror(errno));