search

mozilla-iam / mozilla.oidc.accessproxy

Stand-alone OIDC Access Proxy
Mozilla Public License 2.0
12 stars 10 forks source link

lua entry thread aborted: runtime error: /usr/share/lua/5.1/resty/evp.lua:216 #23

Closed claudijd closed 6 years ago

claudijd commented 6 years ago

To anyone using the OpenResty Lua Auth0 strategy to act as an OIDC proxy, after doing system updates and upgrading OpenResty/OpenSSL you will notice the proxy will no longer work. This is due to a bug in OpenSSL expectations for lua-resty-jwt 1.x (more details here: https://bugzilla.mozilla.org/show_bug.cgi?id=1491142).

The TLDR fix is to:

1.) Upgrade lua-resty-jwt to 2.x 2.) Restart openresty daemon

I'm going to follow up and mark this as closed, but filing just for the sake of historical value and info sharing.

gene1wood commented 6 years ago

The fix for this in lua-resty-openidc is in zmartzone/lua-resty-openidc#165 by changing the dependency on lua-resty-jwt to a new fork of that package and a new version.

To take advantage of this fix, make sure you are running lua-resty-openidc 1.6.0 or newer.