Log error on SSL handshake failure - don't fail silently

Kong · Sep 6, 2019 · 813893b · 813893b
1 parent 0250046
commit 813893b
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/lib/resty/healthcheck.lua b/lib/resty/healthcheck.lua
@@ -756,10 +756,11 @@ function checker:run_single_check(ip, port, hostname)
 
   if self.checks.active.type == "https" then
     local session
-    session = sock:sslhandshake(nil, hostname,
+    session, err = sock:sslhandshake(nil, hostname,
                                      self.checks.active.https_verify_certificate)
     if not session then
       sock:close()
+      self:log(ERR, "failed SSL handshake with '", hostname, " (", ip, ":", port, ")': ", err)
       return self:report_tcp_failure(ip, port, hostname, "connect", "active")
     end
   end