OpenResty® Scalable Web Platform by Extending NGINX with Lua

OpenSSL patches by OpenResty

Thibault Charbonnier , 17 Jul 2019 (created 03 Jun 2019)

If your are not using the OpenResty openresty-openssl RPM/DEB packages, you must apply our OpenSSL patches to the OpenSSL source tree before building it in order to support yielding operations in ssl_session_fetch_by_lua* and ssl_certificate_by_lua*.

Our openresty-openssl pre-built packages already include these patches.

Additionally, if you are not using an official OpenResty release, you must also apply our NGINX core patches yourself.

OpenSSL 1.1.1 series

For OpenSSL 1.1.1c or later, apply this patch

OpenSSL 1.1.0 series

For OpenSSL 1.1.0c or earlier, apply this patch

For OpenSSL 1.1.0d or later, apply this patch

Note that you also need to apply Nginx core patches if you are not using OpenResty.

OpenSSL 1.0.2 series

Apply this patch.

Note that you also need to apply Nginx core patches if you are not using OpenResty.