Datong Sun

I think this test can be written as a DAO unit test. We shouldn't have to use Test-Nginx and introduce a new test mode for it. PM'ed @SumiMakito offline to...

@fffonion We intentionally removed `luaossl` because of the issues we encountered so adding it back would not be the best idea. Do we know why `pgmoon` is using `luaossl` and...

Will this affect things like the log serializer so that those upstream headers are returned as request headers? https://github.com/Kong/kong/blob/master/kong/pdk/log.lua#L677

As discussed offline with @fffonion, let's hold off this PR until we can figure out a way to fix the serializer change. Otherwise it will be user visible impact when...

@fffonion Will this break in FIPS mode?

@flrgh the issue is not related to encryption, it's about SHA1 might trigger some unnecessary eyes under FIPS mode. Maybe use CRC32 instead? That will make it clear that we...

I came across this module while implementing my customized FIDO U2F auth module in NGINX. @bdauvergne got a valid point, in general IV should be re-generated from a secure random...

It seems to me that TLS-PSK is not a commonly used technology at all. AFAIK none of the web browsers on the market supports it. Additionally, NGINX, Apache, Python, Golang...

I do not believe this is a good idea. As WebSocket is bi-directional and it is expected to receive message from the other end at any moment, this won't work...

@zhuizhuhaomeng @EnricoMazzu In Kong we have been using: https://github.com/openresty/lua-nginx-module/pull/1602 https://github.com/openresty/lua-resty-core/pull/278 within our OpenResty build for more than a year in order to have cosocket mTLS support. You can give it...