{"id":3899,"date":"2020-08-07T19:48:57","date_gmt":"2020-08-07T19:48:57","guid":{"rendered":"https:\/\/www.gubatron.com\/blog\/?p=3899"},"modified":"2020-08-07T19:52:25","modified_gmt":"2020-08-07T19:52:25","slug":"how-to-suppress-useless-mod_openssl-lighttpd-error-messages-from-var-log-syslog-in-ubuntu","status":"publish","type":"post","link":"https:\/\/www.gubatron.com\/blog\/how-to-suppress-useless-mod_openssl-lighttpd-error-messages-from-var-log-syslog-in-ubuntu\/","title":{"rendered":"[linux\/ubuntu] How to suppress useless mod_openssl\/lighttpd error messages from appearing in \/var\/log\/syslog"},"content":{"rendered":"

Sometimes you have a bunch of useless errors creating unnecessary disk I\/O on your server, disk I\/O that should be used towards serving your user’s requests efficiently.<\/p>\n

In this case a site running on lighttpd keeps logging several times per second the following message, creating too much noise and making it hard to see meaningful things I should pay attention to could appear on \/var\/log\/syslog.<\/p>\n

Aug\u00a0 <\/span>7 19:36:03 ip-172-30-1-251 lighttpd[287019]: message repeated 44 times: [ 2020-08-07 19:36:02: (mod_openssl.c.1796) SSL: 1 error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol]<\/span><\/pre>\n
I tried disabling syslog error messages for SSL, and all syslog output on the lighttpd configuration to no avail. Good thing you can configure rsyslog in Linux to do amazing things with log messages before they make it into the log.<\/p>\n
To silence this message, all I had to do was edit an rsyslog config file to filter out my undesired message, and restart the service (no need to restart your host os)<\/p>\n
    \n
  1. Edited \/etc\/rsyslog.d\/50-default.conf<\/strong> before any mention of \/var\/log\/syslog,<\/strong> to have the following condition (ideally at the top of the config file):<\/li>\n<\/ol>\n
    [pastacode lang=”bash” manual=”if%20%24msg%20contains%20’tls_early_post_process_client_hello’%20then%20stop” message=”” highlight=”” provider=”manual”\/]<\/p>\n
      \n
    1. Restarted the rsyslog<\/strong> service, no more noise on \/var\/log\/syslog<\/li>\n<\/ol>\n
      \u00a0 \u00a0 \u00a0sudo service rsyslog restart<\/strong><\/span><\/pre>\n","protected":false},"excerpt":{"rendered":"
      Sometimes you have a bunch of useless errors creating unnecessary disk I\/O on your server, disk I\/O that should be used towards serving your user’s requests efficiently. In this case a site running on lighttpd keeps logging several times per second the following message, creating too much noise and making it hard to see meaningful […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[43],"tags":[1632,1631,1633,1630,1027],"class_list":["post-3899","post","type-post","status-publish","format-standard","hentry","category-linux","tag-filtering","tag-rsyslog","tag-silencing","tag-syslog","tag-ubuntu"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p5Unzf-10T","jetpack-related-posts":[{"id":3376,"url":"https:\/\/www.gubatron.com\/blog\/what-to-do-when-lighttpd-wont-start-and-wont-give-out-any-error-output\/","url_meta":{"origin":3899,"position":0},"title":"What to do when lighttpd won’t start and won’t give out any error output?","author":"gubatron","date":"February 4, 2015","format":false,"excerpt":"So you upgraded your server, or just all of a sudden you try to start lighttpd, it says the server started ok, but you check and there's no lighttpd process. You then go after your error log files, and nothing... what the fuck is happening? try this to attempt to\u2026","rel":"","context":"In "Code"","block_context":{"text":"Code","link":"https:\/\/www.gubatron.com\/blog\/category\/code\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":3517,"url":"https:\/\/www.gubatron.com\/blog\/sysadmin-serve-your-wordpress-cached-pages-with-lighttpd-and-not-php\/","url_meta":{"origin":3899,"position":1},"title":"[SYSADMIN] Serve your WordPress cached pages directly with lighttpd and not PHP","author":"gubatron","date":"June 7, 2016","format":false,"excerpt":"Optimizing Your Wordpress Cache Loads in Lighttpd. If you don't configure your wordpress virtual host properly in lighttpd, your wordpress cache will still make use of PHP. Wouldn't it be nice if all those cached requests were served directy from the webserver as the static files that they are, bypassing\u2026","rel":"","context":"In "Code"","block_context":{"text":"Code","link":"https:\/\/www.gubatron.com\/blog\/category\/code\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":3839,"url":"https:\/\/www.gubatron.com\/blog\/nginx-server-configuration-for-a-wordpress-instance-served-from-a-urls-subdirectory\/","url_meta":{"origin":3899,"position":2},"title":"nginx server configuration for a wordpress instance served from a URL’s subdirectory","author":"gubatron","date":"November 14, 2019","format":false,"excerpt":"You want to serve a wordpress instance on a website's domain url but not at the path's root, you want it under a sub-directory, for example \"blog\", the same as this blog: https:\/\/www.gubatron.com\/blog\u00a0 Here's how my NGINX's server block for 'www.gubatron.com' looks like at the moment (https\/ssl hasn't been configured\u2026","rel":"","context":"In "Code"","block_context":{"text":"Code","link":"https:\/\/www.gubatron.com\/blog\/category\/code\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":913,"url":"https:\/\/www.gubatron.com\/blog\/how-to-filter-logs-in-lighttpd\/","url_meta":{"origin":3899,"position":3},"title":"How to filter logs in lighttpd","author":"gubatron","date":"October 27, 2008","format":false,"excerpt":"I usually don't keep lighttpd access logs turned on to avoid writing for every read, but there are times when you need to monitor what's going on, and you'd like to have a high signal-to-noise ratio so it might be convenient to ignore all requests to .gif, .png, .jpg, .css,\u2026","rel":"","context":"In "Code"","block_context":{"text":"Code","link":"https:\/\/www.gubatron.com\/blog\/category\/code\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/www.lighttpd.net\/light_logo.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":3591,"url":"https:\/\/www.gubatron.com\/blog\/upgrading-your-wordpress-blog-to-php-7-0-on-ubuntu-xenial\/","url_meta":{"origin":3899,"position":4},"title":"Upgrading your wordpress blog to PHP 7.0 on Ubuntu Xenial","author":"gubatron","date":"September 7, 2016","format":false,"excerpt":"If you're about to upgrade your Ubuntu server to 16.04 (Xenial) you might want to take advantage of the new PHP 7.0 which is as fast or more than Facebook's HHVM, or perhaps during the upgrade process a few things may have broken and perhaps that's why you're here Make\u2026","rel":"","context":"In "Linux"","block_context":{"text":"Linux","link":"https:\/\/www.gubatron.com\/blog\/category\/linux\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":2593,"url":"https:\/\/www.gubatron.com\/blog\/lighttpd-allow-access-control-allow-origin-headers-on-the-server-status-page\/","url_meta":{"origin":3899,"position":5},"title":"lighttpd, allow “Access-Control-Allow-Origin:*” headers on the server status page","author":"gubatron","date":"November 29, 2011","format":false,"excerpt":"Maybe there's someone out there who needs to read the output of lighttpd's status for monitoring purpose like me tonight, and also, like me, you want to do this using JavaScript, but your browser gives you this nasty error: XMLHttpRequest cannot load http:\/\/otherSubdomain.server.com\/lighttpd-status-url-you-have-configured. Origin http:\/\/requestingSubdomain.server.com is not allowed by Access-Control-Allow-Origin.\u2026","rel":"","context":"In "AJAX"","block_context":{"text":"AJAX","link":"https:\/\/www.gubatron.com\/blog\/category\/ajax\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.gubatron.com\/blog\/wp-json\/wp\/v2\/posts\/3899","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.gubatron.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.gubatron.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.gubatron.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.gubatron.com\/blog\/wp-json\/wp\/v2\/comments?post=3899"}],"version-history":[{"count":5,"href":"https:\/\/www.gubatron.com\/blog\/wp-json\/wp\/v2\/posts\/3899\/revisions"}],"predecessor-version":[{"id":3904,"href":"https:\/\/www.gubatron.com\/blog\/wp-json\/wp\/v2\/posts\/3899\/revisions\/3904"}],"wp:attachment":[{"href":"https:\/\/www.gubatron.com\/blog\/wp-json\/wp\/v2\/media?parent=3899"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.gubatron.com\/blog\/wp-json\/wp\/v2\/categories?post=3899"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.gubatron.com\/blog\/wp-json\/wp\/v2\/tags?post=3899"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}