envoyproxy / envoy-openssl

Envoy OpenSSL extensions
Apache License 2.0
47 stars 45 forks source link

SSL functions used in Envoy async handshake #61

Closed pfl closed 1 year ago

pfl commented 2 years ago

Add functions needed by SSL async handshake implemented in https://github.com/envoyproxy/envoy-openssl/pull/60 Translate SSL modes and error codes as these differ between BoringSSL and OpenSSL. Also, SSL_get/get_mode is defined as a macro in OpenSSL while it is a regular function in BoringSSL. Since part of the bridge library code needs to find OpenSSL headers and especially opensslconf.h, which is generated, @twghu 's pull request https://github.com/envoyproxy/envoy-openssl/pull/55 is included. The include directories under bssl_compat/include need some clarification of their intended purpose. Not all OpenSSL header files can be used as is due to the macro vs. function differences above.

pfl commented 1 year ago

Updated patch set with the liberty of some minor cleanups: