From d959f6d19926ff2b75322acb008dc692b6a29aa5 Mon Sep 17 00:00:00 2001
From: "Sergey G. Brester" <serg.brester@sebres.de>
Date: Thu, 26 Nov 2020 12:25:32 +0100
Subject: [PATCH] Update nginx-tls-fallback.conf

more precise and conclusive regex without catch-all's
---
 config/filter.d/nginx-tls-fallback.conf | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/config/filter.d/nginx-tls-fallback.conf b/config/filter.d/nginx-tls-fallback.conf
index aaa84fb9..b9eeac04 100644
--- a/config/filter.d/nginx-tls-fallback.conf
+++ b/config/filter.d/nginx-tls-fallback.conf
@@ -5,12 +5,10 @@
 [Definition]
 
 
-failregex = ^ \[crit\] \d+#\d+: \*\d+ SSL_do_handshake\(\) failed.*?ssl3_get_record.*?too.*?, client: <HOST>, server: \S+$
+failregex = ^\s*\[crit\] \d+#\d+: \*\d+ SSL_do_handshake\(\) failed \(SSL: error:\S+(?: \S+){1,3} too (?:long|short)\)[^,]*, client: <HOST>
 
 ignoreregex = 
 
 datepattern = {^LN-BEG}
 
 # Author: Stephan Orlowsky
-# maybe not restrictive enough, will also match:
-#"[crit] 76952#76952: *5062354 SSL_do_handshake() failed ssl3_get_record too, client: 0.0.0.0, server: thisshouldntmatch"