Disable SSL3 handshake errors

addis_a · October 11, 2014, 3:50pm

I disabled SSL3 in ssl_protocols (ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
).
So PCs with old browsers (example: IE on WinXP) fail to do the handshake
and I have my nginx logs full of these errors

:

SSL_do_handshake() failed (SSL: error:1408A10B:SSL
routines:SSL3_GET_CLIENT_HELLO:wrong version number) while SSL
handshaking

Since this is wanted, is there a way to disable these logs (just for
SSL3
failed handshakes)?

lorenzo_r · October 13, 2014, 12:02pm

Hello!

On Sat, Oct 11, 2014 at 03:49:22PM +0200, Lorenzo R. wrote:

failed handshakes)?
You can configure logging level using the error_log directive, see
Core functionality.

–
Maxim D.
http://nginx.org/