Skip to content

Commit

Permalink
fix(pkey) clear error stack when verification fails (#121)
Browse files Browse the repository at this point in the history
Otherwise, Nginx will print such an alert log message when establishing
a new ssl connection.

`ignoring stale global SSL error (SSL: error:04091068:rsa routines:int_rsa_verify:bad signature)`

[FTI-5324](https://konghq.atlassian.net/browse/FTI-5324)
  • Loading branch information
catbro666 authored Aug 23, 2023
1 parent 4871f49 commit 6e58b28
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion lib/resty/openssl/pkey.lua
Original file line number Diff line number Diff line change
Expand Up @@ -868,7 +868,7 @@ function _M:verify(signature, digest, md_alg, padding, opts)
end

if code == 0 then
return false, nil
return false, format_error("pkey:verify")
elseif code == 1 then
return true, nil
end
Expand Down

0 comments on commit 6e58b28

Please sign in to comment.