envoyproxy / envoy-openssl

Envoy OpenSSL extensions
Apache License 2.0
44 stars 39 forks source link

OpenSSL handshaker + bssl_compat bazel build #60

Closed ipuustin closed 1 year ago

ipuustin commented 1 year ago

Also clean up the repository a bit and make Envoy buildable (with OpenSSL handshaker extension).

Noticed one issue with bssl_compat library build: because bazel builds in a network namespaced sandbox, downloading the OpenSSL source code from cmake doesn't work, unless you specify --spawn_strategy=standalone.

To test building bssl_compat, use

bazel build --spawn_strategy=standalone @bssl-compat//:bssl-compat

and to test building Envoy with OpenSSL TLS handshaker, use

 bazel build //:envoy

The bssl-compat library is added as an Envoy dependency by mapping it over BoringSSL.