Thanks, Yichun.
I will look into adding that support, but in the meantime will rely on the server ca cert without the x509 client certs.
Openresty is amazing!
Zach
> On Jul 31, 2015, at 2:10 AM, "Yichun Zhang (agentzh)" <age...@gmail.com> wrote:
>
> Hello!
>
>> On Thu, Jul 30, 2015 at 3:57 AM, Zachary Zaro wrote:
>> Hi there. I'm trying to figure out how to configure lua-resty-mysql to talk
>> to a MySQL server that uses SSL for all connections. I see that there is a
>> boolean value to tell the client to use SSL, and then there is the
>> lua_ssl_trusted_certificate setting in openresty to configure the CA cert
>> that I will use. I don't see any way to configure the certificate or the key
>> for the client to send to the server.
>>
>
> There's no support for client-side certificates in ngx_lua's cosockets
> yet. So only server-side certificates are supported atm.
>
>> It feels like I must be missing something obvious, has anyone been able to
>> set this up? Thanks!
>>
>
> You're welcome to submit a patch to ngx_lua to add the
> lua_ssl_client_certificate directive, similar to nginx's:
>
> http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_client_certificate
>
> Regards,
> -agentzh.
