Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: upgrade openresty version to v1.27.11 #11936

Open
wants to merge 12 commits into
base: master
Choose a base branch
from

Conversation

shreemaan-abhishek
Copy link
Contributor

@shreemaan-abhishek shreemaan-abhishek commented Jan 22, 2025

Description

Upgrade openresty version to v1.27.1.1.

Checklist

  • I have explained the need for this PR and the problem it solves
  • I have explained the changes or the new features added to this PR
  • I have added tests corresponding to this change
  • I have updated the documentation to reflect this change
  • I have verified that this change is backward compatible (If not, please discuss on the APISIX mailing list first)

@shreemaan-abhishek shreemaan-abhishek marked this pull request as ready for review February 6, 2025 15:21
@dosubot dosubot bot added size:S This PR changes 10-29 lines, ignoring generated files. chore labels Feb 6, 2025
@@ -188,7 +188,7 @@ routes:
GET /hello
--- error_code: 502
--- error_log
upstream: "grpc://127.0.0.1:80"
connect() failed (111: Connection refused) while connecting to upstream
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this change is needed as grpc proxy is done under subrequest, and the apisix custom logger (in apisix-nginx-module) overrides the original log handler of nginx and stores the reference to the original log handler in ctx.

but ngx_stash_ctx fails to store reference to that log handler. Thus the original log handler doesn't get executed and the upstream: "grpc: ..." field in error log is not present.

@@ -258,7 +258,8 @@ function _M.set(matched_ssl, sni)
local reject_in_handshake =
(ngx.config.subsystem == "stream") or
(matched_ssl.value.client.skip_mtls_uri_regex == nil)
local ok, err = ngx_ssl.verify_client(parsed_cert, depth,
-- TODO: support passing `trusted_certs` (3rd arg, keep it nil for now)
local ok, err = ngx_ssl.verify_client(parsed_cert, depth, nil,
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the verify client API has changed and it expects 4 parameters now, the 3rd parameter is trusted_certs, we can implement the support for trusted certs later.

@Revolyssup Revolyssup self-requested a review February 6, 2025 15:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
chore size:S This PR changes 10-29 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants