Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

The module should support AES gcm mode. #25

Open
rcosnita opened this issue Nov 2, 2020 · 0 comments
Open

The module should support AES gcm mode. #25

rcosnita opened this issue Nov 2, 2020 · 0 comments

Comments

@rcosnita
Copy link

rcosnita commented Nov 2, 2020

At the moment the module does not support gcm mode. In order to keep backward compatibility, I suggest we introduce a directive which allows us to switch between cbc and gcm mode. By default, CBC should be enabled in order to keep backward compatibility.

encrypted_session_key $key; # introduced in PR https://github.com/openresty/encrypted-session-nginx-module/pull/24
encrypted_session_iv $iv; # introduced in PR https://github.com/openresty/encrypted-session-nginx-module/pull/24
encrypted_session_iv_in_content; # introduced in PR https://github.com/openresty/encrypted-session-nginx-module/pull/24
encrypted_session_mode gcm; # possible values are gcm or cbc.
rcosnita added a commit to rcosnita/encrypted-session-nginx-module that referenced this issue Nov 3, 2020
rcosnita added a commit to rcosnita/encrypted-session-nginx-module that referenced this issue Nov 3, 2020
rcosnita added a commit to rcosnita/encrypted-session-nginx-module that referenced this issue Nov 3, 2020
rcosnita added a commit to rcosnita/encrypted-session-nginx-module that referenced this issue Nov 3, 2020
rcosnita added a commit to rcosnita/encrypted-session-nginx-module that referenced this issue Dec 5, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant