Skip to content

feat(stream) add upstream ssl ffi function and stream client ssl ffi function #50

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 15 commits into from
Jan 3, 2023
Merged

feat(stream) add upstream ssl ffi function and stream client ssl ffi function #50

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
a18ca8c
rebase stream tls
oowl Dec 12, 2022
8149559
test kbt branch added
oowl Dec 12, 2022
56e77dc
fix stream tls test
oowl Dec 12, 2022
3bd3da9
feat(doc) add stream api subsystem in tls doc
oowl Dec 12, 2022
f4f97af
fix(test) fix test style
oowl Dec 12, 2022
1acc90b
fix(test) fix test index
oowl Dec 12, 2022
6c7c134
fix(test) add stream session reuse
oowl Dec 13, 2022
32ed49c
remove 1.19 patch
oowl Dec 26, 2022
8338427
fix test title
oowl Dec 26, 2022
121451c
fix code style
oowl Dec 26, 2022
0cd9433
test skip nginx version
oowl Dec 26, 2022
155a870
test skip nginx version
oowl Dec 26, 2022
b69519b
let ssl_ctx palloc once
oowl Jan 3, 2023
62c63e0
use ngx_flag_t to proxy_ssl_disable
oowl Jan 3, 2023
297cc12
fix test
oowl Jan 3, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
22 changes: 11 additions & 11 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -148,7 +148,7 @@ resty.kong.tls.disable\_session\_reuse

**context:** *ssl_certificate_by_lua**

**subsystems:** *http*
**subsystems:** *http* *stream*

Prevents the TLS session for the current connection from being reused by
disabling session ticket and session ID for the current TLS connection.
Expand All @@ -162,9 +162,9 @@ resty.kong.tls.get\_full\_client\_certificate\_chain
----------------------------------------------------
**syntax:** *pem_chain, err = resty.kong.tls.get\_full\_client\_certificate\_chain()*

**context:** *rewrite_by_lua*, access_by_lua*, content_by_lua*, log_by_lua**
**context:** *rewrite_by_lua*, access_by_lua*, content_by_lua*, log_by_lua**, *preread_by_lua**

**subsystems:** *http*
**subsystems:** *http* *stream*

Returns the PEM encoded downstream client certificate chain with the client certificate
at the top and intermediate certificates (if any) at the bottom.
Expand Down Expand Up @@ -192,9 +192,9 @@ resty.kong.tls.set\_upstream\_cert\_and\_key
--------------------------------------------
**syntax:** *ok, err = resty.kong.tls.set\_upstream\_cert\_and\_key(chain, key)*

**context:** *rewrite_by_lua*, access_by_lua*, balancer_by_lua**
**context:** *rewrite_by_lua*, access_by_lua*, balancer_by_lua**, *preread_by_lua**

**subsystems:** *http*
**subsystems:** *http* *stream*

Overrides and enables sending client certificate while connecting to the
upstream in the current request.
Expand All @@ -218,9 +218,9 @@ resty.kong.tls.set\_upstream\_ssl\_trusted\_store
-------------------------------------------------
**syntax:** *ok, err = resty.kong.tls.set\_upstream\_ssl\_trusted\_store(store)*

**context:** *rewrite_by_lua*, access_by_lua*, balancer_by_lua**
**context:** *rewrite_by_lua*, access_by_lua*, balancer_by_lua**, *preread_by_lua**

**subsystems:** *http*
**subsystems:** *http* *stream*

Set upstream ssl verification trusted store of current request. Global setting set by
`proxy_ssl_trusted_certificate` will be overwritten for the current request.
Expand Down Expand Up @@ -280,9 +280,9 @@ resty.kong.tls.set\_upstream\_ssl\_verify
-----------------------------------------
**syntax:** *ok, err = resty.kong.tls.set\_upstream\_ssl\_verify(verify)*

**context:** *rewrite_by_lua*, access_by_lua*, balancer_by_lua**
**context:** *rewrite_by_lua*, access_by_lua*, balancer_by_lua**, *preread_by_lua**

**subsystems:** *http*
**subsystems:** *http* *stream*

Set upstream ssl verification enablement of current request to the given boolean
argument `verify`. Global setting set by `proxy_ssl_verify` will be overwritten.
Expand All @@ -299,9 +299,9 @@ resty.kong.tls.set\_upstream\_ssl\_verify\_depth
------------------------------------------------
**syntax:** *ok, err = resty.kong.tls.set\_upstream\_ssl\_verify\_depth(depth)*

**context:** *rewrite_by_lua*, access_by_lua*, balancer_by_lua**
**context:** *rewrite_by_lua*, access_by_lua*, balancer_by_lua**, *preread_by_lua**

**subsystems:** *http*
**subsystems:** *http* *stream*

Set upstream ssl verification depth of current request to the given non-negative integer
argument `depth`. Global setting set by `proxy_ssl_verify_depth` will be overwritten.
Expand Down
1 change: 1 addition & 0 deletions config
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,7 @@ ngx_module_srcs=" \
$ngx_addon_dir/src/ngx_http_lua_kong_tag.c \
$ngx_addon_dir/src/ngx_http_lua_kong_module.c \
$ngx_addon_dir/src/ngx_http_lua_kong_log.c \
$ngx_addon_dir/src/ssl/ngx_lua_kong_ssl.c \
"

ngx_module_incs="$ngx_addon_dir/src"
Expand Down
Loading