feature: ngx_stream_lua_ffi_req_shared_ssl_ciphers() #378
+270
−0
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Overview
This pull request introduces a new API to retrieve shared SSL ciphers between the client and server, with optional filtering for GREASE ciphers. It also includes corresponding tests to validate the functionality and error handling. The most important changes are grouped into two themes: API Implementation and Testing Enhancements.
API Implementation:
ngx_stream_lua_ffi_req_shared_ssl_ciphers
insrc/ngx_stream_lua_ssl_certby.c
to retrieve shared SSL ciphers, with an option to filter out GREASE ciphers. This function handles errors such as invalid requests, insufficient buffer size, and unsupported SSL libraries.ngx_stream_lua_is_grease_cipher
to identify GREASE cipher IDs based on their pattern.Related PR
Closed openresty/lua-resty-core#505
Closed openresty/lua-nginx-module#1962
Closed openresty/lua-nginx-module#2424
Testing Enhancements:
t/140-ssl-c-api.t
to enable Lua integration.t/140-ssl-c-api.t
to validate: