lua-resty-http and ssl

cgatfud · 2015-07-13T19:24:52+00:00

Hello! On Sat, Jul 11, 2015 at 10:28 PM, kamalp wrote: > > seems it has already been submitted using another issue "Nginx Lua adds > the Con...

lua-resty-http and ssl

cgatfud

I'm using https://github.com/pintsized/lua-resty-http to issue HTTP POST requests. In the error log file I keep getting the following error message:

failed to request: 20: unable to get local issuer certificate

How do I configure openresty with the root certificate and alternatively how can I configure my resty http client to ignore cert mismatches?

ta,
Chris

hamish.forbes

You probably need to set https://github.com/openresty/lua-nginx-module#lua_ssl_trusted_certificate to your system CA bundle (or the specific root CA certs for your target server).

You might need to tweak the lua_ssl_verify_depth option too.

If you're using the 'simple' request_uri() interface then set ssl_verify = false in your params table to skip verification. https://github.com/pintsized/lua-resty-http#request

Otherwise you are calling ssl_handshake() yourself and just need to set the option there.

It would help if you posted a full example of how you're using resty-http though.

Hamish

On Monday, 13 July 2015 12:24:52 UTC+1, cga...@gmail.com wrote:

I'm using https://github.com/pintsized/lua-resty-http to issue HTTP POST requests. In the error log file I keep getting the following error message:

failed to request: 20: unable to get local issuer certificate

How do I configure openresty with the root certificate and alternatively how can I configure my resty http client to ignore cert mismatches?

ta,
Chris