resty sting hmac

siddontang · 2013-05-20T09:08:57+00:00

I spoke at Ricon East about a service we built using openresty and Riak:http://brian.akins.org/blog/2013/05/18/ricon-east-slides/ I'll post a link to th...

resty sting hmac

siddontang

Hi:

I've found that only hmac_sha1 support in openresty, but our team has use hmac_md5 for http url sign. So I write hmac.lua for resty string module. But now it only support openssl >= 1.0.0 because of some function definitions are changed.

Is it there some easy way to support different function definitions in openssl >= 1.0.0 and openssl 0.9.x when using luajit ffi?

Put hmac.lua in openresty lualib/resty, very simple to use :

local str = require "resty.string"

local hmac = require "resty.hmac"

local obj = hmac:new("1234567890", hmac.hash.md5)
obj:update("1234567890")
local res = obj:final()

ngx.say(str.to_hex(res))

Best regards,

-siddon

agentzh

Hello!

On Sun, May 19, 2013 at 6:08 PM, Siddon Tang wrote:
>     I've found that only hmac_sha1 support in openresty, but our team has
> use hmac_md5 for http url sign. So I write hmac.lua for resty string module.
> But now it only support openssl >= 1.0.0 because of some function
> definitions are changed.
>
>     Is it there some easy way to support different function definitions  in
> openssl >= 1.0.0 and openssl 0.9.x when using luajit ffi?
>

IMHO, the easiest way may be to write a thin layer of C to abstract
away the differences between different verrsions of openssl and then
call your intermediate C API by LuaJIT FFI.

The "thin layer of C" could be a DSO file dynamically loaded by
ffi.load() (which is looked up from within LUA_CPATH, probably) or
could just reside in an Nginx C module.

In ngx_lua's new FFI-based Lua API, I'm taking this approach (see
ngx_lua's ffi branch and the lua-resty-core library):

    https://github.com/chaoslawful/lua-nginx-module/tree/ffi
    https://github.com/agentzh/lua-resty-core

Best regards,
-agentzh

siddontang

Thank you very much!

Compatibility is not an easy thing!

2013/5/20 agentzh <age...@gmail.com>

Hello!

On Sun, May 19, 2013 at 6:08 PM, Siddon Tang wrote:
> I've found that only hmac_sha1 support in openresty, but our team has
> use hmac_md5 for http url sign. So I write hmac.lua for resty string module.
> But now it only support openssl >= 1.0.0 because of some function
> definitions are changed.
>
> Is it there some easy way to support different function definitions in
> openssl >= 1.0.0 and openssl 0.9.x when using luajit ffi?
>

IMHO, the easiest way may be to write a thin layer of C to abstract
away the differences between different verrsions of openssl and then
call your intermediate C API by LuaJIT FFI.

The "thin layer of C" could be a DSO file dynamically loaded by
ffi.load() (which is looked up from within LUA_CPATH, probably) or
could just reside in an Nginx C module.

In ngx_lua's new FFI-based Lua API, I'm taking this approach (see
ngx_lua's ffi branch and the lua-resty-core library):

https://github.com/chaoslawful/lua-nginx-module/tree/ffi
https://github.com/agentzh/lua-resty-core

Best regards,
-agentzh

.