sandstorm-io/sandstorm

Suppress noisy OpenSSL errors in system log?

Open

#3,596 建立於 2021年12月13日

在 GitHub 查看
 (2 留言) (0 反應) (0 負責人)JavaScript (6,583 star) (737 fork)batch import
enhancementgood first issue

描述

A large portion of my system log contains the below exceptions from the gateway. I am not sure these should be logged on a production server. I get the impression they represent failed connection attempts from browsers (or likely bots) which do not support a new enough TLS version. Public servers are often subjected to a deluge of random connection attempts: If we're confident these aren't "Sandstorm errors", I think it might make sense to stop logging them.

sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000f7:SSL routines:OPENSSL_internal:WRONG_VERSION_NUMBER
stack: 58f2a4 596986 596fd5 544fa1 597a60 591de0 5fe0c0
sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:1000009c:SSL routines:OPENSSL_internal:HTTP_REQUEST
stack: 58f2a4 596986 596fd5 544fa1 597a60 591de0 5fe0c0
sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000f7:SSL routines:OPENSSL_internal:WRONG_VERSION_NUMBER
stack: 58f2a4 596986 596fd5 544fa1 597a60 591de0 5fe0c0
sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000f7:SSL routines:OPENSSL_internal:WRONG_VERSION_NUMBER
stack: 58f2a4 596986 596fd5 544fa1 597a60 591de0 5fe0c0
sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000f7:SSL routines:OPENSSL_internal:WRONG_VERSION_NUMBER
stack: 58f2a4 596986 596fd5 544fa1 597a60 591de0 5fe0c0
sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000b8:SSL routines:OPENSSL_internal:NO_SHARED_CIPHER
stack: 58f2a4 596986 596fd5 544fa1 597a60 591de0 5fe0c0
sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000f0:SSL routines:OPENSSL_internal:UNSUPPORTED_PROTOCOL
stack: 58f2a4 596986 596fd5 544fa1 597a60 591de0 5fe0c0
sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000b8:SSL routines:OPENSSL_internal:NO_SHARED_CIPHER
stack: 58f2a4 596986 596fd5 544fa1 597a60 591de0 5fe0c0
sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000f7:SSL routines:OPENSSL_internal:WRONG_VERSION_NUMBER
stack: 58f2a4 596986 596fd5 544fa1 597a60 591de0 5fe0c0
sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000f7:SSL routines:OPENSSL_internal:WRONG_VERSION_NUMBER
stack: 58f2a4 596986 596fd5 544fa1 597a60 591de0 5fe0c0
sandstorm/gateway.c++:1072: error: exception = kj/compat/tls.c++:66: failed: OpenSSL error; message = error:100000f7:SSL routines:OPENSSL_internal:WRONG_VERSION_NUMBER
stack: 58f2a4 596986 596fd5 544fa1 597a60 591de0 5fe0c0

貢獻者指南

技術棧
cppjavascript
領域
backendobservability
議題類型
feature
難度面向新貢獻者的預計實作難度，1 表示很小改動，5 表示專家級工作。
3
預計時間有經驗貢獻者完成調查、實作、測試並準備 pull request 的粗略時間範圍。
1-3 hours
活動狀態議題目前的可參與程度：新鮮、活躍、陳舊、阻塞或等待維護者輸入。
stale
清晰度議題是否清楚說明預期改動、驗收標準和下一步。
clear
前置要求
basic C++understanding of logging in kj framework
新手友善度1-100 的估計分數，表示該議題對首次貢獻者的友善程度。
70
研究方向
The issue requests suppression of noisy OpenSSL errors in the system log. The relevant code is in sandstorm/gateway.c++ around line 1072, where exceptions from OpenSSL are being logged. To resolve, one should inspect the logging mechanism in the gateway, possibly using a conditional check to skip logging errors like WRONG VERSION NUMBER or HTTP REQUEST. The maintainers have not commented on the specific errors to suppress; a good approach would be to introduce a configuration option or a whitelist of errors to ignore, or simply lower the log level for these expected errors. The linked comments may provide additional context.