在ssl_certificate_by阶段如何取得客户IP

pl080516 · 2017-10-23T21:41:04+00:00

写一个 Nginx C 模块，在这个模块里面引用 hiredis 的头&#x...

在ssl_certificate_by阶段如何取得客户IP

pl080516

Hi all:

我原来希望在ssl_certificate_by_*阶段通过ngx.var.remote_addr来获取客户IP，但是出现如下错误：

2017/10/23 21:32:17 [notice] 163#163: signal process started
2017/10/23 21:32:20 [error] 164#164: *6 lua entry thread aborted: runtime error: ssl_certificate_by_lua:2: API disabled in the current context
stack traceback:
coroutine 0:
[C]: in function '__index'
ssl_certificate_by_lua:2: in function <ssl_certificate_by_lua:1>, context: ssl_certificate_by_lua*, client: 127.0.0.1, server: 0.0.0.0:443
2017/10/23 21:32:20 [crit] 164#164: *5 SSL_do_handshake() failed (SSL: error:1408A179:SSL routines:ssl3_get_client_hello:cert cb error) while SSL handshaking, client: 127.0.0.1, server: 0.0.0.0:443

请问，我怎么才能在ssl_certificate_by_*阶段获取客户地址呢？

谢谢！

zchao1995

变量系统在这个阶段还不可用，应该没有常规的办法可以获取到客户端地址

On 23 October 2017 at 21:41:08, 朱宇 (pl0...@gmail.com) wrote:

Hi all:

我原来希望在ssl_certificate_by_*阶段通过ngx.var.remote_addr来获取客户IP，但是出现如下错误：

2017/10/23 21:32:17 [notice] 163#163: signal process started
2017/10/23 21:32:20 [error] 164#164: *6 lua entry thread aborted: runtime error: ssl_certificate_by_lua:2: API disabled in the current context
stack traceback:
coroutine 0:
[C]: in function '__index'
ssl_certificate_by_lua:2: in function <ssl_certificate_by_lua:1>, context: ssl_certificate_by_lua*, client: 127.0.0.1, server: 0.0.0.0:443
2017/10/23 21:32:20 [crit] 164#164: *5 SSL_do_handshake() failed (SSL: error:1408A179:SSL routines:ssl3_get_client_hello:cert cb error) while SSL handshaking, client: 127.0.0.1, server: 0.0.0.0:443

请问，我怎么才能在ssl_certificate_by_*阶段获取客户地址呢？

谢谢！
--

spacewanderlzx

有一个 ongoing 的 pr：https://github.com/openresty/lua-nginx-module/pull/1145
如果觉得这个 pr 对你有意义，欢迎参与讨论。

在 2017年10月23日下午9:43，Zhang Chao <zcha...@gmail.com>写道：

变量系统在这个阶段还不可用，应该没有常规的办法可以获取到客户端地址

On 23 October 2017 at 21:41:08, 朱宇 (pl0...@gmail.com) wrote:

Hi all:

我原来希望在ssl_certificate_by_*阶段通过ngx.var.remote_addr来获取客户IP，但是出现如下错误：

2017/10/23 21:32:17 [notice] 163#163: signal process started
2017/10/23 21:32:20 [error] 164#164: *6 lua entry thread aborted: runtime error: ssl_certificate_by_lua:2: API disabled in the current context
stack traceback:
coroutine 0:
[C]: in function '__index'
ssl_certificate_by_lua:2: in function <ssl_certificate_by_lua:1>, context: ssl_certificate_by_lua*, client: 127.0.0.1, server: 0.0.0.0:443
2017/10/23 21:32:20 [crit] 164#164: *5 SSL_do_handshake() failed (SSL: error:1408A179:SSL routines:ssl3_get_client_hello:cert cb error) while SSL handshaking, client: 127.0.0.1, server: 0.0.0.0:443

请问，我怎么才能在ssl_certificate_by_*阶段获取客户地址呢？

谢谢！
--

--