nginx-ssl-ja3 icon indicating copy to clipboard operation
nginx-ssl-ja3 copied to clipboard

Add modern nginx / openssl3 patches

Open sp3nx0r opened this issue 3 years ago • 1 comments

Patches don't successfully apply on a fresh ubuntu:jammy openresty installation, no surprise. Need to add patch files for these modern versions.

sp3nx0r avatar Jul 16 '22 01:07 sp3nx0r

Please try, again, patches were updated for stable version of openssl 1.1.1

fooinha avatar Aug 17 '22 19:08 fooinha

@fooinha - Ubuntu 22.04 comes with OpenSSL 3.0.2-0ubuntu1.6, not 1.1.1

zentavr avatar Sep 15 '22 00:09 zentavr

@zentavr , I'll take a look as soon as I find some time. Thanx

fooinha avatar Sep 15 '22 00:09 fooinha

@zentavr, I've used the following version for openssl.

  6 [remote "origin"]
  7     url = https://github.com/openssl/openssl
  8     fetch = +refs/tags/openssl-3.0.5:refs/tags/openssl-3.0.5

I patched it, compiled it, and used for compilation of nginx and this module, and the patches are compatible.

So, the current patches for OpenSSL can also be used for the newer 3.0.x versions.

fooinha avatar Sep 15 '22 10:09 fooinha

Hello @fooinha - the stupid question: How can I specify which OpenSSL folder with sources to use while compiling nginx?

In the readme there is nothing about this:

# Configure

$ ./configure --add-module=/build/ngx_ssl_ja3 --with-http_ssl_module --with-stream_ssl_module --with-debug --with-stream

zentavr avatar Sep 15 '22 19:09 zentavr

Seems like I do need to set --with-openssl= flag while doing ./configure

zentavr avatar Sep 15 '22 20:09 zentavr