Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

get_client_hello_ext() | lua-resty-core/lib/ngx/ssl | Issue with custom TLS Extension Type 17516 #459

Open
josedamianm opened this issue Feb 29, 2024 · 0 comments

Comments

@josedamianm
Copy link

I am trying to extract a TLS Extension with a custom Extension type 17516. I am using openresty/lua-resty-core get_client_hello_ext() method, but i am not getting any data.

This is my nginx.conf:
error_log /usr/local/openresty/nginx/logs/error.log info;

events {
worker_connections 2048;
}

http {
server {
listen 443 ssl;
server_name localhost;
ssl_certificate /usr/local/openresty/nginx/conf/certificate.crt;
ssl_certificate_key /usr/local/openresty/nginx/conf/private.key;

    ssl_client_hello_by_lua_block {
        local ssl_clt = require "ngx.ssl.clienthello"
        local ext = ssl_clt.get_client_hello_ext(0x446c)
        local encoded_ext = ngx.encode_base64(ext)
        ngx.log(ngx.INFO, "Extension: ", encoded_ext)
    }

    location / {
        # Proxy_pass configuration if needed
        proxy_pass http://backendserver:8080/;
    }
}

}

This is how i am sending the TLS Extension:
Extension: Unknown type 17516 (len=28)
Type: Unknown (17516)
Length: 28
Data: 546869732069732074686520456e63727970746564204d534953444e

I tried also by calling the get_client_hello_ext(17516) with the Extension type in decimal, but i am still not getting the values.

It seems that the get_client_hello_ext method is not working for no standard Ext_Type like 17516.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant