Opened 6 years ago
#1716 new defect
http2 ssl verify certificate failed should close tcp connection
Reported by: | Owned by: | ||
---|---|---|---|
Priority: | minor | Milestone: | |
Component: | other | Version: | 1.15.x |
Keywords: | http2 ssl verify certificate | Cc: | |
uname -a: | Linux ubuntu 4.4.0-31-generic #50-Ubuntu SMP Wed Jul 13 00:07:12 UTC 2016 x86_64 | ||
nginx -V: |
nginx version: nginx/1.15.8
built by gcc 5.4.0 20160609 (Ubuntu 5.4.0-6ubuntu1~16.04.11) built with OpenSSL 1.0.2g 1 Mar 2016 TLS SNI support enabled configure arguments: --with-http_v2_module --with-http_ssl_module --with-debug |
Description
when http2 ssl verify certificate failed, nginx send err response with 400 instead of closeing connection in the ngx_http_process_request function. client can send request continuously when all requests in this connection will recv a err response.
on the contrary, http1.1 with keepalive will close connection when verify certificate failed.
Note:
See TracTickets
for help on using tickets.