OpenResty® Scalable Web Platform by Extending NGINX with Lua

OpenResty XRay

Advanced observability built for OpenResty and more

×

limited time offer

Request TRIAL today and receive a diagnostic REPORT
Learn more

Nginx patches by OpenResty for SSL features

Thibault Charbonnier , 15 Aug 2019 (created 03 Jun 2019)

If you are not using an official OpenResty release, you must apply our NGINX core patches to support yielding operations in ssl_session_fetch_by_lua* and ssl_certificate_by_lua*.

OpenResty releases after 1.11.2.1 already include these patches. If you are building your own NGINX with OpenResty's Lua modules, you then must apply these patches yourself.

Additionally, if you are not using the OpenResty openresty-openssl RPM/DEB packages, you must also apply our OpenSSL patches to support these directives.

Nginx 1.17.x series

For Nginx 1.17.x cores, apply this patch and this patch.

Nginx 1.15.x series

For Nginx 1.15.x cores, apply this patch and this patch.

Nginx 1.13.x versions

For Nginx 1.13.x cores, apply this patch and this patch.

Nginx 1.11.x versions

For Nginx 1.11.x cores, apply this patch and this patch.