Welcome! Log In Create A New Profile

Advanced

Add support for PSK cipher suites patch

January 25, 2018 11:10AM
Nate,Maxim,

I found a patch here
(http://mailman.nginx.org/pipermail/nginx-devel/2017-September/010449.html)
regarding the PSK spport in Nginx. I can not make the new parameter
ssl_psk_file work.

I applied it to release-1.13.5 successfully.

I updated my nginx.conf to

stream {
upstream dtls_udp_upstreams {
hash $remote_addr:remote_port;
server preprod.mycorp.com:5685;
}


server {
listen 5684 udp ssl;
ssl_protocols DTLSv1.2;
ssl_ciphers PSK-AES128-CBC-SHA;
ssl_psk_file /tmp/cred.txt;
ssl_certificate /tmp/server.pem;
ssl_certificate_key /tmp/server.key;
proxy_pass dtls_udp_upstreams;
}

My issue is that although /tmp/cred.txt file exists, Nginx returns :

nginx: [emerg] unknown directive "ssl_psk_file" in /tmp/nginx.conf:26.


I checked the source files, it looks like the patch has been correctly applied.

Would you mind posting the complete/corrected patch I could apply and test ?

I'm using DTLS client with PSK load-balancer and I could experiment the setup.


My patching application looks like :

git checkout release-1.13.5

patch -p1 -i pskpatch.diff


Thank you !
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Add support for PSK cipher suites patch

scoulibaly January 25, 2018 11:10AM

Re: Add support for PSK cipher suites patch

Maxim Dounin January 25, 2018 11:28AM

Re: Add support for PSK cipher suites patch

scoulibaly January 26, 2018 03:56AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 65
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready