Silently ignoring a stale global SSL error left after disabled renegotiation.
diff --git a/src/event/ngx_event_openssl.c b/src/event/ngx_event_openssl.c index 9f64ea2..8293690 100644 --- a/src/event/ngx_event_openssl.c +++ b/src/event/ngx_event_openssl.c
@@ -863,6 +863,13 @@ ngx_log_error(NGX_LOG_NOTICE, c->log, 0, "SSL renegotiation disabled"); + while (ERR_peek_error()) { + ngx_ssl_error(NGX_LOG_DEBUG, c->log, 0, + "ignoring stale global SSL error"); + } + + ERR_clear_error(); + c->ssl->no_wait_shutdown = 1; c->ssl->no_send_shutdown = 1;