Nate,Maxim,

I found a patch here
(http://mailman.nginx.org/pipermail/nginx-devel/2017-September/010449.html)
regarding the PSK spport in Nginx. I can not make the new parameter
ssl_psk_file work.

I applied it to release-1.13.5 successfully.

I updated my nginx.conf to

stream {
upstream dtls_udp_upstreams {
hash $remote_addr:remote_port;
server preprod.mycorp.com:5685;
}


server {
listen 5684 udp ssl;
ssl_protocols DTLSv1.2;
ssl_ciphers PSK-AES128-CBC-SHA;
ssl_psk_file /tmp/cred.txt;
ssl_certificate /tmp/server.pem;
ssl_certificate_key /tmp/server.key;
proxy_pass dtls_udp_upstreams;
}

My issue is that although /tmp/cred.txt file exists, Nginx returns :

nginx: [emerg] unknown directive "ssl_psk_file" in /tmp/nginx.conf:26.


I checked the source files, it looks like the patch has been correctly applied.

Would you mind posting the complete/corrected patch I could apply and test ?

I'm using DTLS client with PSK load-balancer and I could experiment the setup.


My patching application looks like :

git checkout release-1.13.5

patch -p1 -i pskpatch.diff


Thank you !
_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx