]> git.ipfire.org Git - thirdparty/pdns.git/commit
dnsdist: Ignore unclean TLS session shutdown 12237/head
authorRemi Gacogne <remi.gacogne@powerdns.com>
Fri, 25 Nov 2022 17:34:17 +0000 (18:34 +0100)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Fri, 25 Nov 2022 17:34:17 +0000 (18:34 +0100)
commit099749046c03c1c2ee8d7c83e0fb7f3a66f7c75e
treedce4547a55b769bbcde228b7821002577bb724f4
parentd600c4717ec3f4e56e3cd611a11aa7b8ecb2e02e
dnsdist: Ignore unclean TLS session shutdown

OpenSSL 3.0 "helpfully" treats an unclean TLS session shutdown as an
error, flooding our logs and killing TLS session resumption. We do
not care about a possible "truncation attack" since we already know
how many bytes we are supposed to get, so we can ignore this.
pdns/libssl.cc
pdns/tcpiohandler.cc