search

openresty / encrypted-session-nginx-module

encrypt and decrypt nginx variable values
http://openresty.org
198 stars 52 forks source link

Outdated module in new Linux distros #35

Open hiringaccount opened 3 months ago

hiringaccount commented 3 months ago

This module is totally outdated in any Linux distro that had removed OpenSSL 1 support (for example Debian 12). It is not recommended to use OpenSSL anymore as it is not secure anymore since previous year

When you try to compile the module it will show this error and it cannot be compiled:

encrypted-session-nginx-module/src/ngx_http_encrypted_session_cipher.c:90:5: error: ‘MD5’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
   90 |     MD5(data, data_size, p);
      |     ^~~
In file included from encrypted-session-nginx-module/src/ngx_http_encrypted_session_cipher.c:15:
/usr/include/openssl/md5.h:52:38: note: declared here
   52 | OSSL_DEPRECATEDIN_3_0 unsigned char *MD5(const unsigned char *d, size_t n,
      |                                      ^~~
encrypted-session-nginx-module/src/ngx_http_encrypted_session_cipher.c: In function ‘ngx_http_encrypted_session_aes_mac_decrypt’:
encrypted-session-nginx-module/src/ngx_http_encrypted_session_cipher.c:228:5: error: ‘MD5’ is deprecated: Since OpenSSL 3.0 [-Werror=deprecated-declarations]
  228 |     MD5(*dst, *dst_len, new_digest);
      |     ^~~
/usr/include/openssl/md5.h:52:38: note: declared here
   52 | OSSL_DEPRECATEDIN_3_0 unsigned char *MD5(const unsigned char *d, size_t n,
      |                                      ^~~