Meaningless error message: Bad request line "/1.1"! #648

Closed
michaelrsweet opened this Issue Mar 23, 2004 · 3 comments

Comments

Projects
None yet
1 participant
Collaborator

michaelrsweet commented Mar 23, 2004

Version: 1.1.17
CUPS.org User: minfrin.sharp

Configure CUPS to require encryption, and set up a suitable certificate, etc.

If a client attempts to connect to CUPS without using SSL/TLS, the following error is logged:

E [23/Mar/2004:17:59:42 +0200] EncryptClient: error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request
E [23/Mar/2004:17:59:42 +0200] Bad request line "/1.1"!

This error indicates clearly that a client has attempted to connect cleartext to a port expecting SSL. The error message does not indicate what IP address and port this client was connecting from, which makes troubleshooting this error message impossible.

Collaborator

michaelrsweet commented Mar 24, 2004

CUPS.org User: mike

If you set the log level to "debug" you'll see the "AcceptClient:" message which shows the IP address and port.

Will look into adding the IP address to the SSL error messages.

Collaborator

michaelrsweet commented Mar 24, 2004

CUPS.org User: mike

Updated to show the connection address when any SSL errors occur, plus the access_log will also show any errors as well.

Collaborator

michaelrsweet commented Mar 24, 2004

CUPS.org User: mike

Fixed in CVS - the anonymous CVS repository will be updated at midnight EST.

michaelrsweet added this to the Stable milestone Mar 17, 2016

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment