openresty / openresty/lua-nginx-module

Pref CHACHA

Open
#1,291 4 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
C
Stars
11.8k
Forks
2.1k
Avg merge
6h 1m
Merged PRs (30d)
6

Description

Hi

Just a quick question, apologies if this has been asked before, i searched but couldn't find it.

Is it possible to use this module to analyse the TLS client hello to look for the top client pref being CHACHA and if so, selecting CHACHA as the server top pref?

I have tried the cloudflare nginx patch but it doesn't work (at least on my build - 1.13.10, Lua module, OpenSSL 1.1.0g) :-(.

Thanks in advance for any help offered.
Neil

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Review the module's TLS client hello handling and compare it with the Cloudflare nginx patch mentioned in the issue. Check behavior with nginx 1.13.10, the Lua module, and OpenSSL 1.1.0g; done means determining whether client CHACHA preference can be observed and used for server selection, or documenting the limitation.

Written by the indexing model from the issue text.

Assessment

Tech stack
c, nginx
Domain
networking, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
15/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.