Establish a SSL connection using LuaJIT FFI

perusio · 2013-01-21T19:20:42+00:00

sorry accidentally got posted userid on; userid_name ohId;&nb...

Establish a SSL connection using LuaJIT FFI

perusio

Hello,

I would like to know if anyone here ever tried, or think it's possible to override the default SSL handling done by the Nginx

SSL module and do it all in Lua using the LuaJIT FFI with OpenSSL.

What I would like to do is to load certificate key/pairs on demand based on the virtual host returned in the handshake structure

returned by the client (SNI).

I know that you can do the handshake yourself if using the Perl module, but I would prefer to stay on the Lua side.

Thanks,

---appa

agentzh

Hello!

On Mon, Jan 21, 2013 at 3:20 AM, perusio wrote:
> I would like to know if anyone here ever tried, or think it's possible to
> override the default SSL handling done by the Nginx
> SSL module and do it all in Lua using the LuaJIT FFI with OpenSSL.
>
> What I would like to do is to load certificate key/pairs on demand based on
> the virtual host returned in the handshake structure
> returned by the client (SNI).
>

Well, this is still a TODO item for ngx_lua. See the discussion here:

    https://github.com/chaoslawful/lua-nginx-module/issues/178

I'll try to look into this myself in the next few weeks or so :)

Best regards,
-agentzh