2 Commits
Author SHA1 Message Date
David Kalnischkies 49e91b96d9 aptwebserver: Refuse client immediately on TLS handshake
We implement a HTTP-only server here (that is wrapped by stunnel for
HTTPS support), so if a TLS handshake reaches us it is always wrong
and we can just close the connection immediately instead of accepting
it and letting the client run into a timeout as we will never receive
the message(s) we expect.

This happens e.g. with browsers like Firefox that opportunistically
try https first (even if you ask for http and specify a port).
2026-06-10 13:07:30 +00:00
Julian Andres Klode 2129ffecc0 Turn TLS handshake issues into transient errors
This makes them retriable, and brings them more into line with
TCP, where handshake is also a transient error.

LP: #1928100
2021-05-12 13:06:11 +02:00