Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

help request: openresty-openssl already support SM2 #12044

Open
qizhendong1 opened this issue Mar 13, 2025 · 4 comments
Open

help request: openresty-openssl already support SM2 #12044

qizhendong1 opened this issue Mar 13, 2025 · 4 comments
Labels
question label for questions asked by users

Comments

@qizhendong1
Copy link
Contributor

Description

openresty-openssl already support SM2, shell we need Tongshuo module ?
openresty/openresty#943

Environment

  • APISIX version (run apisix version):
  • Operating system (run uname -a):
  • OpenResty / Nginx version (run openresty -V or nginx -V):
  • etcd version, if relevant (run curl http://127.0.0.1:9090/v1/server_info):
  • APISIX Dashboard version, if relevant:
  • Plugin runner version, for issues related to plugin runners:
  • LuaRocks version, for installation issues (run luarocks --version):
@dosubot dosubot bot added the question label for questions asked by users label Mar 13, 2025
@juzhiyuan
Copy link
Member

@moonming Should we support this in APISIX, or should we encourage community users to build their own?

@moonming
Copy link
Member

https://apisix.apache.org/zh/docs/apisix/next/plugins/gm/ APISIX has the GM plugin, with tongsuo.
And APISIX can also work with OpenSSL 3(#10724), which supports GM, but maybe need some work for SSL offloading.

@qizhendong1
Copy link
Contributor Author

If openssl3 itself does not support GM, users need to compile it themselves. The problem is that the openssl3 used by openresty is also customized as openresty-openssl3. I don't know what changes have been made in openresty-openssl3. Is there a potential problem with using tongsuo directly? Therefore, the best solution is to directly support GM in openresty-openssl3, so that apisix does not need to compile tongsuo and can use it directly.

@qizhendong1
Copy link
Contributor Author

qizhendong1 commented Mar 18, 2025

I also saw someone report this requirement in the openresty community, but there is no progress so far.
openresty/openresty#943

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question label for questions asked by users
Projects
Status: 📋 Backlog
Development

No branches or pull requests

3 participants