Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix SSL_read: unexpected eof while reading issues #730

Closed
wants to merge 1 commit into from

Conversation

ahrechushkin
Copy link

Ignore unexpected shutdown of TLS connections. After updating to ssl 3.0 some requests may fail with unexpected eof while reading issue.

Ignore unexpected shutdown of TLS connections. After updating to ssl 3.0 some requests may fail with unexpected eof while reading issue.
@rhenium
Copy link
Member

rhenium commented Mar 21, 2024

OpenSSL::SSL::OP_IGNORE_UNEXPECTED_EOF is not a safe option to enable by default.

You can safely set this option in your program, through OpenSSL::SSL::SSLContext#options= or OpenSSL::SSL::SSLContext#set_params, if you know that your protocol can detect a truncation attack (e.g., HTTP/2).

@rhenium rhenium closed this Mar 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants