pgmoon.crypto better support for resty.openssl / resty.string libraries #117

bungle · 2022-01-18T18:08:28Z

Adds random_bytes function to pgmoon.crypto compatibility layer and makes use of it in pgmoon.init
Adds x509_digest function to pgmoon.crypto compatibility layer and makes use of it in pgmoon.init
Adds resty.openssl support to hmac_sha256
Adds resty.openssl and resty.string support to digest_sha256

We don't anymore ship luaossl with Kong and this causes our users issues with scram-sha-256 authentication as reported in: Kong/kong#8259

This PR fixes it so that it works with resty.openssl library too (the one that is shipped with Kong).

bungle · 2022-02-02T12:51:11Z

Hi @leafo, if you have time, could you give some eye to this? I can make changes as requested.

leafo · 2022-02-04T21:10:43Z

Thanks, looks good

leafo · 2022-02-17T18:21:30Z

Sorry about the delay publishing, 1.14 is now out on luarocks and opm

bungle added 5 commits January 18, 2022 18:21

pgmoon.crypto random bytes to fallback to available lib

4c909e7

pgmoon.crypto x509 digest to fallback to available lib

d9c7e68

pgmoon.crypto kdf_derive_sha256 to support resty.openssl

d60a3a2

pgmoon.crypto hmac_sha256 to support resty.openssl

d29878f

pgmoon.crypto digest_sha256 to support resty.openssl (and resty.string)

476d81e

bungle mentioned this pull request Jan 18, 2022

kong migrations bootstrap failure with postgres 14 Kong/kong#8259

Closed

1 task

leafo merged commit d384c40 into leafo:master Feb 4, 2022

bungle deleted the feat/crypto branch February 6, 2022 00:00

fffonion mentioned this pull request Feb 14, 2022

fix(init) use lua-resty-openssl instead of luaossl to let it run Kong/pgmoon#15

Merged

Provide feedback