set_encrypt_session: ok, where do the keys do then?

hughserious · 2014-05-26T09:26:03+00:00

Hi!Does postgresql module support ssl connection mode?Thanks.

set_encrypt_session: ok, where do the keys do then?

hughserious

 --this is my guess but doesnt work
   ndk.set_var.encrypted_session_key = "abcdefghijklmnopqrstuvwxyz123456"
   ndk.set_var.encrypted_session_iv = "1234567812345678"
   ndk.set_var.encrypted_session_expires = 600 -- seconds


local  token = "mysession" 
      local binary = ndk.set_var.set_encrypt_session(token)   --  runtime error, key missing

also, what is this "iv" thing?

thanks for any help.

gg.lafon

Hello,

did you read this topic?

https://groups.google.com/forum/#!searchin/openresty-en/set_encrypt_session/openresty-en/07Au31s3qFk/to-EIOKpwnEJ

This should give you some ideas about how to encrypt/decrypt data.

Jérôme

Le lundi 26 mai 2014 03:26:02 UTC+2, hugh a écrit :

--this is my guess but doesnt work ndk.set_var.encrypted_session_key = "abcdefghijklmnopqrstuvwxyz123456" ndk.set_var.encrypted_session_iv = "1234567812345678" ndk.set_var.encrypted_session_expires = 600 -- seconds local token = "mysession" local binary = ndk.set_var.set_encrypt_session(token) -- runtime error, key missing

also, what is this "iv" thing?

thanks for any help.

hughserious

Thanks for your reply.

Yes, i saw that, but it does not explain where to set the keys in Lua only in nginx.conf. i suppose it could put them there, but it feels ugly.

agentzh

Hello!

On Mon, May 26, 2014 at 6:10 AM, hugh wrote:
> Yes, i saw that, but it does not explain where to set the keys in Lua only
> in nginx.conf. i suppose it could put them there, but it feels ugly.
>

Sadly ngx_encrypted_session does not support setting the key and IV
via nginx variables (that way you can set their values from within
Lua).

I'd like this module to expose a Lua API, just like ngx_lua_upstream:

    https://github.com/openresty/lua-upstream-nginx-module#readme

BTW, "iv" is "initialization vector":

    http://en.wikipedia.org/wiki/Initialization_vector

Regards,
-agentzh