openresty / openresty/lua-nginx-module
features discuss: change protocols and ciphers in ssl_certificate_by_lua_*
Open
Nobody has claimed this yet.
- Dominant language
- C
- Stars
- 11.8k
- Forks
- 2.1k
- Avg merge
- 6h 1m
- Merged PRs (30d)
- 6
Description
Can use SSL_set_options and SSL_set_cipher_list to modify ssl_protocols and ssl_ciphers in the ssl_certificate_by_lua_* phase?
Maybe the ssl_protocols modification is invalid, have way?
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the ssl_certificate_by_lua_* phase and checking how the named SSL_set_options and SSL_set_cipher_list APIs relate to ssl_protocols and ssl_ciphers there. Determine whether either setting can be changed in that phase, what constraints apply, and define the supported behavior or documentation needed.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- c, lua, nginx
- Domain
- backend, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100