Ssl_conf_cmd

Opened 3 years ago

1. Ssl_conf_cmd Example
2. Ssl_conf_cmd(3 Ssl)
3. Ssl.openssl.ssl-conf-cmd
4. Ssl_conf_cmd

Closed 7 months ago

Java.lang.Object; org.apache.tomcat.util.net.openssl.OpenSSLConfCmd. For a list of supported command names, see the section Supported configuration file commands in the SSLCONFcmd(3) manual page for OpenSSL. Some of the SSLOpenSSLConfCmd commands can be used as an alternative to existing directives (such as SSLCipherSuite or SSLProtocol ), though it should be noted that the syntax / allowable values for the. Ssl.openssl.ssl-conf-cmd = ('Protocol' = '-TLSv1.1, -TLSv1, -SSLv3'). Supported commands are described on the SSLCONFcmd (3ssl) manual page. Several config lines can be used to specify multiple configuration commands. This option requires OpenSSL 1.0.2 or later. Connect = HOST:PORT connect to a remote address If no host is specified, the host defaults to localhost.

Last modified 7 months ago

#1529closedtask (fixed)

Reported by:	Owned by:
Priority:	minor	Milestone:	1.13
Component:	nginx-module	Version:	1.13.x
Keywords:	Cc:
uname -a:	Linux jintaiyang123.org 4.15.0-13-generic #14-Ubuntu SMP Sat Mar 17 13:44:27 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux
nginx -V:	nginx version: nginx/1.13.11 built by gcc 7.3.0 (Ubuntu 7.3.0-16ubuntu2) built with OpenSSL 1.1.1-pre5-dev xx XXX xxxx TLS SNI support enabled configure arguments: --add-module=../ngx_brotli --add-module=../nginx-ct --with-http_v2_module --with-http_ssl_module --with-http_gzip_static_module --add-module=../incubator-pagespeed-ngx-latest-stable --with-openssl=../openssl-test --with-openssl-opt='enable-ec_nistp_64_gcc_128 enable-weak-ssl-ciphers'

Change History (22)

follow-up: 10comment:1 by , 3 years ago

Cc:	removed
Resolution:	→ wontfix
Status:	new → closed

comment:14 by , 2 years ago

in reply to: 18comment:19 by , 14 months ago

comment:21 by , 7 months ago

I think these functions are all new with 1.0.2, but maybe some aren't...
If so, was there a missing step to get them exported or set the linkage?
mod_ssl from httpd trunk fails like this:
Linking C shared library mod_ssl.so
Creating library mod_ssl.lib and object mod_ssl.exp
ssl_engine_config.c.obj : error LNK2019: unresolved external symbol
SSL_CONF_CTX_new referenced in function modssl_ctx_init
ssl_engine_config.c.obj : error LNK2019: unresolved external symbol
SSL_CONF_CTX_set_flags referenced in function modssl_ctx_init
ssl_engine_config.c.obj : error LNK2019: unresolved external symbol
SSL_CONF_cmd_value_type referenced in function ssl_cmd_SSLOpenSSLConfCmd
ssl_engine_init.c.obj : error LNK2019: unresolved external symbol
SSL_CTX_get0_certificate referenced in function ssl_init_server_certs
ssl_engine_init.c.obj : error LNK2019: unresolved external symbol
SSL_CONF_CTX_finish referenced in function ssl_init_server_ctx

ssl_engine_init.c.obj : error LNK2019: unresolved external symbol
SSL_CONF_CTX_free referenced in function ssl_init_server_ctx
ssl_engine_init.c.obj : error LNK2019: unresolved external symbol
SSL_CONF_CTX_set_ssl_ctx referenced in function ssl_init_server_ctx
ssl_engine_init.c.obj : error LNK2019: unresolved external symbol
SSL_CONF_cmd referenced in function ssl_init_server_ctx
mod_ssl.so : fatal error LNK1120: 8 unresolved externals
LINK Pass 1 failed. with 1120
OpenSSL built like this:
cd UsersTrawickgitopenssl && perl Configure no-asm --prefix=$(PREFIX)
VC-WIN64A
cd UsersTrawickgitopenssl && msdo_win64a.bat

Ssl_conf_cmd Example

cd UsersTrawickgitopenssl && nmake /f msntdll.mak
cd UsersTrawickgitopenssl && nmake /f msntdll.mak test
cd UsersTrawickgitopenssl && nmake /f msntdll.mak install
httpd built with cmake

Ssl_conf_cmd(3 Ssl)

--/--
Windows 7, Visual Studio 2012 64-bit command prompt

Ssl.openssl.ssl-conf-cmd

ssl_engine_init.c.obj : error LNK2019: unresolved external symbol
SSL_CONF_CTX_free referenced in function ssl_init_server_ctx
ssl_engine_init.c.obj : error LNK2019: unresolved external symbol
SSL_CONF_CTX_set_ssl_ctx referenced in function ssl_init_server_ctx
ssl_engine_init.c.obj : error LNK2019: unresolved external symbol
SSL_CONF_cmd referenced in function ssl_init_server_ctx
mod_ssl.so : fatal error LNK1120: 8 unresolved externals
LINK Pass 1 failed. with 1120
OpenSSL built like this:
cd UsersTrawickgitopenssl && perl Configure no-asm --prefix=$(PREFIX)
VC-WIN64A
cd UsersTrawickgitopenssl && msdo_win64a.bat

Ssl_conf_cmd Example

cd UsersTrawickgitopenssl && nmake /f msntdll.mak
cd UsersTrawickgitopenssl && nmake /f msntdll.mak test
cd UsersTrawickgitopenssl && nmake /f msntdll.mak install
httpd built with cmake

Ssl_conf_cmd(3 Ssl)

--/--
Windows 7, Visual Studio 2012 64-bit command prompt

Ssl.openssl.ssl-conf-cmd

Ssl_conf_cmd