Re: [PATCH] Detail SSL handshake failures

From: Alex Rousskov <rousskov_at_measurement-factory.com>
Date: Mon, 07 Nov 2011 18:03:22 -0700

On 11/07/2011 02:02 PM, Tsantilas Christos wrote:
> If there is not any objection I will commit this patch to trunk...

Please do. While you are at it, please consider changing
SslErrorDetailDefaultStr, the default error description, from

"SSL certificate validation error (%err_name): %ssl_subject" to
"SSL handshake error (%err_name)"

because that default is now used for more than just validation errors
and because most handshake errors that are not validation errors will
lack %ssl_subject.

Thank you,

Alex.

> On 11/02/2011 12:24 PM, Tsantilas Christos wrote:
>> This patch allows Squid to provide details for the %D macro on the
>> secure connect failed error page when an SSL handshake with the origin
>> server fails.
>> The default %D text is "Handshake with SSL server failed: XYZ" where
>> XYZ is the corresponding error string/description returned by OpenSSL
>> if there is any.
>>
>> This is a Measurement Factory project.
Received on Tue Nov 08 2011 - 01:03:37 MST

This archive was generated by hypermail 2.2.0 : Tue Nov 08 2011 - 12:00:11 MST