user_canceled
user_canceled (90) is sent to indicate that the handshake is being canceled for reasons unrelated to a protocol failure. The user (or application) explicitly canceled the TLS session before it completed. A close_notify should follow user_canceled to close the connection cleanly.
Alert Code
90
Level
Warning
Standard
RFC 8446
Description
user_canceled is the TLS mechanism for signaling an application-level cancellation during or after the handshake. Per RFC 8446, if the sender is not at a convenient point to close the connection, it should follow user_canceled with close_notify. In practice, this alert is rarely sent by implementations – most just close the connection. It is more of a courtesy signal than a technical error. Applications canceling HTTP requests mid-flight typically send close_notify directly.
Common Causes
- –User canceled a browser connection before TLS handshake completed
- –Application explicitly closed the connection during handshake
- –Timeout expired before handshake completion (application decision)