diff options
| author |   jsing <jsing@openbsd.org> | 2015-07-15 17:29:11 +0000 |
|---|---|---|
| committer | jsing <jsing@openbsd.org> | 2015-07-15 17:29:11 +0000 |
| commit | c48221845fb39b804b9732e988422dd033881c19 (patch) | |
| tree | 6304e01b3dd75e64aed2ea9de2ed841c25ee97c9 | |
| parent | Unbreak configurations that have a non-TLS listen statement followed by a (diff) | |
| download | wireguard-openbsd-c48221845fb39b804b9732e988422dd033881c19.tar.xz wireguard-openbsd-c48221845fb39b804b9732e988422dd033881c19.zip | |
Close connections that fail to complete a TLS handshake.
Based on a diff from Jack Burton <jack at saosce dot com dot au>.
ok reyk@
| -rw-r--r-- | usr.sbin/httpd/server.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/usr.sbin/httpd/server.c b/usr.sbin/httpd/server.c index 5973cb72a9e..4a0ac4b6593 100644 --- a/usr.sbin/httpd/server.c +++ b/usr.sbin/httpd/server.c @@ -1,4 +1,4 @@ -/* $OpenBSD: server.c,v 1.67 2015/07/15 17:11:14 jsing Exp $ */ +/* $OpenBSD: server.c,v 1.68 2015/07/15 17:29:11 jsing Exp $ */ /* * Copyright (c) 2006 - 2015 Reyk Floeter <reyk@openbsd.org> @@ -970,6 +970,7 @@ server_accept_tls(int fd, short event, void *arg) } else if (ret != 0) { log_warnx("%s: TLS accept failed - %s", __func__, tls_error(srv->srv_tls_ctx)); + server_close(clt, "TLS accept failed"); return; } |