wenqiang li

自建CA和颁发证书： ```zsh 生成CA密钥： ➜ openssl genrsa -out cakey.pem 2048 Generating RSA private key, 2048 bit long modulus ....................................+++ ................................+++ e is 65537 (0x10001) 生成CA证书 ➜ openssl req -new -x509 -days...

编译openssl支持tls1.3，开启弱密码套件 ``` git clone https://github.com/openssl/openssl.git ./config shared threads enable-ssl-trace enable-tls1_3 enable-weak-ssl-ciphers --prefix=/path/to/openssl --openssldir=/path/to/openssl -fPIC -ggdb ``` 编译curl支持tls1.3，需要指定上述编译好的openssl库。 ```sh git clone https://github.com/curl/curl.git ./buildconf ./configure --prefix=/path/to/curl --with-ssl=/path/to/openssl ``` 参考： https://curl.haxx.se/docs/install.html

Thank you for your issue. You can use the [release](https://github.com/vislee/lua-resty-dns-server/releases) version. @selboo can you fix this issue.

fix in a7fc349 . @andreaf74 @selboo If you use the subnet feature, try again. @andreaf74

@andreaf74 Can you provide the version of dig, and parameters? In theory it can't happen, I guess it maybe need to second recv.

ipip免费的库没有英文的数据。

> @vislee thanks for your contribution. > `disable_ssl` is not a good idea, `set_upstream_ttl(enabled)` should be better, we can decide `http` or `https` per upstream try. @doujiang24 Yes, `disable_ssl` is...

> @vislee Thanks for your PR, could you help to add some test cases? @rainingmaster The test case in `lua-resty-core` repository, `ngx_http_lua_ffi_balancer_get_last_failure` is also absent, I don't know how to...

openssl aes 加解密 openssl enc -d -aes-128-cbc [-iv IV] [-K key] [-k password] 的关系： 加解密时如没通过-md指定hash算法，默认为md5。如下： ``` $ openssl enc -aes-128-cbc -k hello -md md5 -P -nosalt key=5D41402ABC4B2A76B9719D911017C592 iv =28B46ED3C111E85102909B1CFB50EA0F ```...

http3.0 HEADERS帧Lua用例代码： ```lua local function parse_headers_frame(frame_data) -- 读取帧标志 local flags = string.byte(frame_data, 1) -- 检查是否存在头部碎片 local has_fragment = bit32.band(flags, 0x01) ~= 0 if has_fragment then -- TODO: 处理头部碎片的情况 end --...