From d9280438a5d9aa1e56592b30ffd80bc0b5831469 Mon Sep 17 00:00:00 2001
From: Fabian Keil <fk@fabiankeil.de>
Date: Wed, 26 Aug 2020 21:31:05 +0200
Subject: [PATCH] ssl_send_certificate_error(): Emit CLF and CRUNCH messages
Sponsored by: Robert Klemme
---
ssl_common.c | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/ssl_common.c b/ssl_common.c
index b81ead63..ea16bece 100644
--- a/ssl_common.c
+++ b/ssl_common.c
@@ -323,6 +323,7 @@ extern void ssl_send_certificate_error(struct client_state *csp)
size_t message_len = 0;
int ret = 0;
struct certs_chain *cert = NULL;
+ const size_t head_length = 63;
/* Header of message with certificate information */
const char message_begin[] =
@@ -409,6 +410,12 @@ extern void ssl_send_certificate_error(struct client_state *csp)
ssl_send_data(ssl_attr, (const unsigned char *)message, strlen(message));
free_certificate_chain(csp);
+
+ log_error(LOG_LEVEL_CRUNCH, "Certificate error: %s: https://%s%s",
+ reason, csp->http->hostport, csp->http->path);
+ log_error(LOG_LEVEL_CLF, "%s - - [%T] \"%s https://%s%s %s\" 200 %u",
+ csp->ip_addr_str, csp->http->gpc, csp->http->hostport, csp->http->path,
+ csp->http->version, message_len-head_length);
}
--
2.49.0