Skip to content

Commit 6e58b28

Browse files
authored
fix(pkey) clear error stack when verification fails (#121)
Otherwise, Nginx will print such an alert log message when establishing a new ssl connection. `ignoring stale global SSL error (SSL: error:04091068:rsa routines:int_rsa_verify:bad signature)` [FTI-5324](https://konghq.atlassian.net/browse/FTI-5324)
1 parent 4871f49 commit 6e58b28

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

lib/resty/openssl/pkey.lua

+1-1
Original file line numberDiff line numberDiff line change
@@ -868,7 +868,7 @@ function _M:verify(signature, digest, md_alg, padding, opts)
868868
end
869869

870870
if code == 0 then
871-
return false, nil
871+
return false, format_error("pkey:verify")
872872
elseif code == 1 then
873873
return true, nil
874874
end

0 commit comments

Comments
 (0)