-
Notifications
You must be signed in to change notification settings - Fork 592
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
CORE-2425 add additional tls error codes #18564
CORE-2425 add additional tls error codes #18564
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Dope. One suggestion
src/v/net/connection.cc
Outdated
@@ -27,22 +25,21 @@ namespace net { | |||
* indirectly as errors from the TLS layer. | |||
*/ | |||
bool is_reconnect_error(const std::system_error& e) { | |||
auto v = e.code().value(); | |||
const auto v = e.code().value(); | |||
const std::array ss_tls_reconnect_errors{ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Suggestion: static?
Switched to using the error codes exposed from Seastar. This allows us to switch from GnuTLS to OpenSSL as the backend TLS provider in Seastar. Signed-off-by: Michael Boquard <michael@redpanda.com>
Signed-off-by: Michael Boquard <michael@redpanda.com>
a97dccc
to
1d60df7
Compare
Force push
|
Re-run of CI failed runs passed |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
change makes sense, updating to a new list of error codes and removing the switch/case. this particular change is about detecting a retry situation and there's no issue here. Are we returning new error codes from the API with this change? Will that be a breaking change for customers, potentially?
With one exception (which I'll discuss after this), these are the same error codes we were looking for as reconnect errors. (You can see the linked Seastar PR). The new one is the
If anything this may improve reliability. |
Removes use of GnuTLS from
net
. Uses instead the error codes exposed from Seastar.Backports Required
Release Notes