openresty / openresty/lua-nginx-module
enable/disable server block specific SSL protocol
Nobody has claimed this yet.
- Dominant language
- C
- Stars
- 11.8k
- Forks
- 2.1k
- Avg merge
- 6h 1m
- Merged PRs (30d)
- 6
Description
Hello All,
my setup details:
Ubuntu 18.04 bionic
openresty-1.19.3.2
openssl-1.1.1k
Installation type: manually compiled and installed openssl and openresty
Not sure if this is known issue because i couldn't find any previously raised related issue apologies if that's not the case... So I did a manual compilation and installation using tar provided from openresty website and installation was completed successfully. But it looks like even in the latest build of openresty I am not able set SSL protocol per virtualhost/server block I have faced this similar issue in other webserver like apache few months back but that issue was addressed lately when I recompiled apache with latest openssl
I was wondering why nginx/openresty has still not addressed this issue.... I did come across a comment in stackoverflow where some suggested to lua_ssl_protocols instead of nginx directive ssl_protocol but unfortunately it doesn't seems to Working for me
am I missing something here, Please let me know if any workaround is available for this issue or is there something I can do resolve this issue. Any suggestions on this will be really helpful
Thanks
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the configuration with Ubuntu 18.04, OpenResty 1.19.3.2, and OpenSSL 1.1.1k, then inspect how server-block SSL protocol settings interact with lua_ssl_protocols. Done means determining whether per-server protocol configuration works and documenting a confirmed workaround or limitation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- lua, nginx
- Domain
- backend, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100