openresty / openresty/lua-nginx-module

enable/disable server block specific SSL protocol

Open
#1,896 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
C
Stars
11.8k
Forks
2.1k
Avg merge
6h 1m
Merged PRs (30d)
6

Description

Hello All,

my setup details:
Ubuntu 18.04 bionic
openresty-1.19.3.2
openssl-1.1.1k
Installation type: manually compiled and installed openssl and openresty

Not sure if this is known issue because i couldn't find any previously raised related issue apologies if that's not the case... So I did a manual compilation and installation using tar provided from openresty website and installation was completed successfully. But it looks like even in the latest build of openresty I am not able set SSL protocol per virtualhost/server block I have faced this similar issue in other webserver like apache few months back but that issue was addressed lately when I recompiled apache with latest openssl

I was wondering why nginx/openresty has still not addressed this issue.... I did come across a comment in stackoverflow where some suggested to lua_ssl_protocols instead of nginx directive ssl_protocol but unfortunately it doesn't seems to Working for me

am I missing something here, Please let me know if any workaround is available for this issue or is there something I can do resolve this issue. Any suggestions on this will be really helpful

Thanks

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the configuration with Ubuntu 18.04, OpenResty 1.19.3.2, and OpenSSL 1.1.1k, then inspect how server-block SSL protocol settings interact with lua_ssl_protocols. Done means determining whether per-server protocol configuration works and documenting a confirmed workaround or limitation.

Written by the indexing model from the issue text.

Assessment

Tech stack
lua, nginx
Domain
backend, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.