diff options
| author | Dmitry Belyavskiy <beldmit@gmail.com> | 2020-05-05 15:20:42 +0200 |
|---|---|---|
| committer | Dmitry Belyavskiy <beldmit@gmail.com> | 2020-05-19 18:04:11 +0200 |
| commit | 09b90e0ed7915809fcd4ee1e250d881b77d06d45 (patch) | |
| tree | 897a351d8f49b6f575bf54bba4dd486b00ad31f7 /doc/man3/SSL_shutdown.pod | |
| parent | Use {module,install}-mac, not -checksum (diff) | |
| download | openssl-09b90e0ed7915809fcd4ee1e250d881b77d06d45.tar.xz openssl-09b90e0ed7915809fcd4ee1e250d881b77d06d45.zip | |
Introducing option SSL_OP_IGNORE_UNEXPECTED_EOF
Partially fixes #11209.
Before OpenSSL 3.0 in case when peer does not send close_notify,
the behaviour was to set SSL_ERROR_SYSCALL error with errno 0.
This behaviour has changed. The SSL_OP_IGNORE_UNEXPECTED_EOF restores
the old behaviour for compatibility's sake.
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/11735)
Diffstat (limited to 'doc/man3/SSL_shutdown.pod')
| -rw-r--r-- | doc/man3/SSL_shutdown.pod | 8 |
1 files changed, 5 insertions, 3 deletions
diff --git a/doc/man3/SSL_shutdown.pod b/doc/man3/SSL_shutdown.pod index 25191130ae..34469bae37 100644 --- a/doc/man3/SSL_shutdown.pod +++ b/doc/man3/SSL_shutdown.pod @@ -83,8 +83,10 @@ message, otherwise an unexpected EOF will be reported. There are implementations that do not send the required close_notify alert. If there is a need to communicate with such an implementation, and it's clear that all data has been received, do not wait for the peer's close_notify alert. -Waiting for the close_notify alert when the peer just closes the connection will -result in an error being generated. +Waiting for the close_notify alert when the peer just closes the connection +will result in an error being generated. +The error can be ignored using the B<SSL_OP_IGNORE_UNEXPECTED_EOF>. +For more information see L<SSL_CTX_set_options(3)>. =head2 First to close the connection @@ -159,7 +161,7 @@ It can also occur when not all data was read using SSL_read(). L<SSL_get_error(3)>, L<SSL_connect(3)>, L<SSL_accept(3)>, L<SSL_set_shutdown(3)>, -L<SSL_CTX_set_quiet_shutdown(3)>, +L<SSL_CTX_set_quiet_shutdown(3)>, L<SSL_CTX_set_options(3)> L<SSL_clear(3)>, L<SSL_free(3)>, L<ssl(7)>, L<bio(7)> |