Molio-tan opened a new issue #5571:
URL: https://github.com/apache/apisix/issues/5571


   ### Issue description
   
   I installed the gmssl with openresty, and a demo of GM SSL could be ran 
properly.But when I begin to start apisix, it failed.
   
![image](https://user-images.githubusercontent.com/31587573/142810765-b06f707c-15ae-44dd-b8a8-ffaa364062a2.png)
   It seems like ssl.so package can not work well under the GmSSL, I doubts.
   
   Here is my steps for install openresty with gmssl.
   ```
   wget https://www.gmssl.cn/gmssl/Tool_Down?File=gmssl_openssl_1.1_b4.tar.gz 
&& tar xzfm Tool_Down?File=gmssl_openssl_1.1_b4.tar.gz -C /usr/local
   wget https://openresty.org/download/openresty-1.19.3.1.tar.gz && tar xzfm 
openresty-1.19.3.1.tar.gz -C /usr/local/gm-openresty
   sed -i 's#$OPENSSL/.openssl/#$OPENSSL/#p' 
/usr/local/gm-openresty-1.19.3.1/bundle/nginx-1.19.3/auto/lib/openssl/conf && \ 
                                         
   cd openresty-1.19.3.1/ && \                                                  
                                                                                
      
   ./configure \                                                                
                                                                                
      
   --without-http_gzip_module \                                                 
                                                                                
      
   --with-http_ssl_module \                                                     
                                                                                
      
   --with-http_stub_status_module \                                             
                                                                                
      
   --with-http_v2_module \                                                      
                                                                                
      
   --with-file-aio \                                                            
                                                                                
      
   --with-openssl=/usr/local/gmssl \                                            
                                                                                
            
   --with-cc-opt="-I/usr/local/gmssl/include" \                                 
                                                                                
            
   --with-ld-opt="-lm" && \                                                     
                                                                                
      
   make install
   ```
   I created the gmssl certificates on 
[website](https://www.gmssl.cn/gmssl/index.jsp) and ran openresty with 
nginx.conf:
   ```
      server                                                                    
                                                                                
          
       {                                                                        
                                                                                
          
         listen 0.0.0.0:9080;                                                   
                                                                                
          
         listen 0.0.0.0:9443 ssl;                                               
                                                                                
          
         ssl_protocols TLSv1 TLSv1.1 TLSv1.2;                                   
                                                                                
          
         ssl_ciphers 
ECDHE-RSA-AES128-GCM-SHA256:AES128-SHA:DES-CBC3-SHA:ECC-SM4-CBC-SM3:ECDHE-SM4-GCM-SM3;
                                                               
         ssl_verify_client off;                                                 
                                                                                
          
                                                                                
                                                                                
          
         ssl_certificate /usr/local/cert/rsa.albRSA.crt.pem;                    
                                                                                
          
         ssl_certificate_key /usr/local/cert/rsa.albRSA.key.pem;                
                                                                                
          
                                                                                
                                                                                
          
         ssl_certificate /usr/local/cert/sm2.albRSA.sig.crt.pem;                
                                                                                
          
         ssl_certificate_key /usr/local/cert/sm2.albRSA.sig.key.pem;            
                                                                                
          
                                                                                
                                                                                
          
         ssl_certificate /usr/local/cert/sm2.albRSA.enc.crt.pem;                
                                                                                
          
         ssl_certificate_key /usr/local/cert/sm2.albRSA.enc.key.pem;            
                                                                                
          
                                                                                
                                                                                
          
         location /                                                             
                                                                                
          
         {                                                                      
                                                                                
          
           root /data/html;                                                     
                                                                                
          
           index index.html index.htm;                                          
                                                                                
          
         }                                                                      
                                                                                
          
      }                               
   ```
   It works well with `openresty -p /opt/test_openresty -c /opt/nginx.conf`.
   
   Then I install the APISIX.
   ```
   cd /opt
   git clone https://github.com/apache/apisix.git
   cd apisix
   make deps
   ./bin/apisix start
   ```
   But it failed. Is anyone can solve this problem or just give some advices 
please?
   
   
   ### Environment
   
   - apisix version (cmd: `apisix version`): the master
   - OS (cmd: `uname -a`): Linux 05a076f63128 5.4.0-84-generic 
#94~18.04.1-Ubuntu SMP Thu Aug 26 23:17:46 UTC 2021 x86_64 x86_64 x86_64 
GNU/Linux
   - OpenResty / Nginx version (cmd: `nginx -V` or `openresty -V`): 1.19.3.1
   - etcd version, if have (cmd: run `curl 
http://127.0.0.1:9090/v1/server_info` to get the info from server-info API):
   - apisix-dashboard version, if have:
   - the plugin runner version, if the issue is about a plugin runner (cmd: 
depended on the kind of runner):
   - luarocks version, if the issue is about installation (cmd: `luarocks 
--version`):
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to