I though about that, but this is coming from the `errno` from [here](https://github.com/xrootd/xrootd/blob/master/src/XrdTls/XrdTlsSocket.cc#L291-L303), so I don't know a good/easy way to have a better message, but at least if you enable debug level for logging you will get messages like: ``` [2023-06-13 13:37:03.848977 +0200][Debug ][AsyncSock ] [eospilot.cern.ch:1094.0] Attempting connection to [::ffff:128.142.53.25]:1094 [2023-06-13 13:37:03.849007 +0200][Debug ][Poller ] Adding socket 0xf12e0b50 to the poller [2023-06-13 13:37:03.849422 +0200][Debug ][AsyncSock ] [eospilot.cern.ch:1094.0] Async connection call returned [2023-06-13 13:37:03.849438 +0200][Debug ][XRootDTransport ] [eospilot.cern.ch:1094.0] Sending out the initial hand shake + kXR_protocol [2023-06-13 13:37:03.849450 +0200][Dump ][AsyncSock ] [eospilot.cern.ch:1094.0] Wrote a message: (0x580015e0), 44 bytes [2023-06-13 13:37:03.849923 +0200][Dump ][XRootDTransport ] [msg: 0x58001420] Expecting 8 bytes of message body [2023-06-13 13:37:03.849933 +0200][Dump ][AsyncSock ] [eospilot.cern.ch:1094.0] Received message header, size: 8 [2023-06-13 13:37:03.849938 +0200][Dump ][AsyncSock ] [eospilot.cern.ch:1094.0] Received a message of 16 bytes [2023-06-13 13:37:03.849941 +0200][Debug ][XRootDTransport ] [eospilot.cern.ch:1094.0] Got the server hand shake response (type: manager [], protocol version 511) [2023-06-13 13:37:03.849949 +0200][Dump ][XRootDTransport ] [msg: 0x58001420] Expecting 8 bytes of message body [2023-06-13 13:37:03.849953 +0200][Dump ][AsyncSock ] [eospilot.cern.ch:1094.0] Received message header, size: 8 [2023-06-13 13:37:03.849959 +0200][Dump ][AsyncSock ] [eospilot.cern.ch:1094.0] Received a message of 16 bytes [2023-06-13 13:37:03.849964 +0200][Debug ][XRootDTransport ] [eospilot.cern.ch:1094.0] kXR_protocol successful (type: manager [], protocol version 511) [2023-06-13 13:37:03.850645 +0200][Debug ][XRootDTransport ] [eospilot.cern.ch:1094.0] Sending out kXR_login request, username: amadio, cgi: xrd.cc=ch&xrd.tz=1&xrd.appname=xrdcp&xrd.info=&xrd.hostname=gentoo.cern.ch&xrd.rn=v5.5.5-385-g2b42eba41, dual-stack: true, private IPv4: false, private IPv6: false [2023-06-13 13:37:03.850654 +0200][Debug ][XRootDTransport ] [eospilot.cern.ch:1094.0] Server requested encryption, enabling TLS [2023-06-13 13:37:03.850658 +0200][Debug ][AsyncSock ] [eospilot.cern.ch:1094.0] TLS hand-shake exchange. [2023-06-13 13:37:03.856412 +0200][Debug ][AsyncSock ] [eospilot.cern.ch:1094.0] TLS hand-shake exchange. [2023-06-13 13:37:03.856518 +0200][Error ][TlsMsg ] [] error:00000001:lib(0):func(0):reason(1) [2023-06-13 13:37:03.856527 +0200][Debug ][TlsMsg ] [] 139824434509504:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:../openssl-1.1.1u/ssl/statem/statem_clnt.c:1919: [2023-06-13 13:37:03.856532 +0200][Error ][TlsMsg ] Failed to do TLS connect: Unable to connect to eospilot.cern.ch; error_ssl [2023-06-13 13:37:03.856536 +0200][Error ][AsyncSock ] [eospilot.cern.ch:1094.0] Socket error while handshaking: [FATAL] TLS error: resource temporarily unavailable [2023-06-13 13:37:03.856541 +0200][Debug ][AsyncSock ] [eospilot.cern.ch:1094.0] Closing the socket ``` which indicate that there was a verification failure of the server. -- Reply to this email directly or view it on GitHub: https://github.com/xrootd/xrootd/pull/2031#issuecomment-1589421548 You are receiving this because you commented. Message ID: <[log in to unmask]> ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-DEV list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1