mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-11-23 20:01:23 +01:00
Code Issues Projects Releases Wiki Activity

MINOR: quic: Add a function to dump SSL stack errors

Browse Source 
This has been very helpful to fix SSL related issues.
This commit is contained in:
Frédéric Lécaille 2021-09-28 09:04:12 +02:00 committed by Amaury Denoyelle
parent 57e6e9eef8
commit 6f0fadb5a7
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
src/xprt_quic.c
View File

@ -1562,6 +1562,26 @@ static inline int qc_parse_ack_frm(struct quic_frame *frm, struct ssl_sock_ctx *
return 0; return 0;
} }
/* This function gives the detail of the SSL error. It is used only
* if the debug mode and the verbose mode are activated. It dump all
* the SSL error until the stack was empty.
*/
static forceinline void qc_ssl_dump_errors(struct connection *conn)
{
if (unlikely(global.mode & MODE_DEBUG)) {
while (1) {
unsigned long ret;
ret = ERR_get_error();
if (!ret)
return;
fprintf(stderr, "conn. @%p OpenSSL error[0x%lx] %s: %s\n", conn, ret,
ERR_func_error_string(ret), ERR_reason_error_string(ret));
}
}
}
/* Provide CRYPTO data to the TLS stack found at <data> with <len> as length /* Provide CRYPTO data to the TLS stack found at <data> with <len> as length
* from <qel> encryption level with <ctx> as QUIC connection context. * from <qel> encryption level with <ctx> as QUIC connection context.
* Remaining parameter are there for debugging purposes. * Remaining parameter are there for debugging purposes.