-
Notifications
You must be signed in to change notification settings - Fork 15
Add support connection using SSL #308
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Comments
How to build tt on a local PC: --- a/magefile.go
+++ b/magefile.go
@@ -32,6 +32,7 @@ const (
var (
ldflags = []string{
+ "-linkmode=external", "-extldflags", "-static",
"-s", "-w",
"-X ${PACKAGE}/version.gitTag=${GIT_TAG}",
"-X ${PACKAGE}/version.gitCommit=${GIT_COMMIT}",
@@ -153,7 +154,7 @@ func Build() error {
err := sh.RunWith(
getBuildEnvironment(), goExecutableName, "build",
"-o", ttExecutableName,
- "-tags=go_tarantool_ssl_disable",
+ "-tags=netgo,osusergo",
"-ldflags", strings.Join(ldflags, " "),
"-asmflags", asmflags,
"-gcflags", gcflags,
@@ -320,6 +321,6 @@ func getBuildEnvironment() map[string]string {
"VERSION_LABEL": os.Getenv("VERSION_LABEL"),
"PWD": currentDir,
"CONFIG_PATH": getDefaultConfigPath(),
- "CGO_ENABLED": "0",
+ "CGO_ENABLED": "1",
}
} $ wget https://github.com/openssl/openssl/releases/download/openssl-3.0.8/openssl-3.0.8.tar.gz
$ tar -xvf openssl-3.0.8.tar.gz
$ cd openssl-3.0.8/
$ ./Configure --prefix=/tmp/openssl/ no-shared
$ make -j12 && make install
$ CGO_LDFLAGS="-L/tmp/openssl/lib" CGO_CFLAGS="-Wno-deprecated-declarations -I/tmp/openssl/include" mage build
$ ldd tt
not a dynamic executable |
oleg-jukovec
added a commit
that referenced
this issue
Mar 3, 2023
The patch adds options to configure traffic encryption[1]: --sslkeyfile - a path to a private SSL key file; --sslcerfile - a path to an SSL certificate file; --sslcafile - a path to a trusted certificate authorities (CA) file; --sslciphers - colon-separated (:) list of SSL cipher suites the connection can use; 1. https://www.tarantool.io/en/enterprise_doc/security/#configuration Part of #308
oleg-jukovec
added a commit
to tarantool/go-openssl
that referenced
this issue
Mar 3, 2023
The build tag `openssl_static` does not produce a binary with static linked libcrypto and libssl. The patch fixes it. Related to tarantool/tt#308
oleg-jukovec
added a commit
to tarantool/go-openssl
that referenced
this issue
Mar 7, 2023
The build tag `openssl_static` does not produce a binary with static linked libcrypto and libssl. The patch fixes it. Related to tarantool/tt#308
oleg-jukovec
added a commit
to tarantool/go-tarantool
that referenced
this issue
Mar 7, 2023
The patch fixes build on macOS with Apple M1. Related to tarantool/tt#308 Closes #260
1 task
oleg-jukovec
added a commit
to tarantool/go-tarantool
that referenced
this issue
Mar 7, 2023
The patch fixes build on macOS with Apple M1. Related to tarantool/tt#308 Closes #260
oleg-jukovec
added a commit
that referenced
this issue
Mar 10, 2023
The patch adds options to configure traffic encryption[1]: --sslkeyfile - a path to a private SSL key file; --sslcerfile - a path to an SSL certificate file; --sslcafile - a path to a trusted certificate authorities (CA) file; --sslciphers - colon-separated (:) list of SSL cipher suites the connection can use; 1. https://www.tarantool.io/en/enterprise_doc/security/#configuration Part of #308
oleg-jukovec
added a commit
that referenced
this issue
Mar 10, 2023
3 build options have been added: - static with statically linked OpenSSL; - shared with dynamically linked OpenSSL; - nossl without OpenSSL; Closes #308
oleg-jukovec
added a commit
that referenced
this issue
Mar 10, 2023
3 build options have been added: - static with statically linked OpenSSL; - shared with dynamically linked OpenSSL; - nossl without OpenSSL; Closes #308
oleg-jukovec
added a commit
that referenced
this issue
Mar 10, 2023
3 build options have been added: - static with statically linked OpenSSL; - shared with dynamically linked OpenSSL; - nossl without OpenSSL; Closes #308
oleg-jukovec
added a commit
that referenced
this issue
Mar 15, 2023
The patch adds options to configure traffic encryption[1]: --sslkeyfile - a path to a private SSL key file; --sslcerfile - a path to an SSL certificate file; --sslcafile - a path to a trusted certificate authorities (CA) file; --sslciphers - colon-separated (:) list of SSL cipher suites the connection can use; 1. https://www.tarantool.io/en/enterprise_doc/security/#configuration Part of #308
oleg-jukovec
added a commit
that referenced
this issue
Mar 15, 2023
3 build options have been added: - static with statically linked OpenSSL; - shared with dynamically linked OpenSSL; - nossl without OpenSSL; Closes #308
oleg-jukovec
added a commit
that referenced
this issue
Mar 16, 2023
3 build options have been added: - static with statically linked OpenSSL; - shared with dynamically linked OpenSSL; - nossl without OpenSSL; Closes #308
oleg-jukovec
added a commit
that referenced
this issue
Mar 16, 2023
3 build options via TT_CLI_BUILD environment variable have been added: - nocgo without OpenSSL; - static with statically linked OpenSSL; - shared with dynamically linked OpenSSL; Closes #308
oleg-jukovec
added a commit
that referenced
this issue
Mar 17, 2023
The patch adds options to configure traffic encryption[1]: --sslkeyfile - a path to a private SSL key file; --sslcerfile - a path to an SSL certificate file; --sslcafile - a path to a trusted certificate authorities (CA) file; --sslciphers - colon-separated (:) list of SSL cipher suites the connection can use; 1. https://www.tarantool.io/en/enterprise_doc/security/#configuration Part of #308
oleg-jukovec
added a commit
that referenced
this issue
Mar 17, 2023
3 build options via TT_CLI_BUILD environment variable have been added: - nocgo without OpenSSL; - static with statically linked OpenSSL; - shared with dynamically linked OpenSSL; Closes #308
oleg-jukovec
added a commit
that referenced
this issue
Mar 20, 2023
3 build options via TT_CLI_BUILD_SSL environment variable have been added: - no without OpenSSL; - static with statically linked OpenSSL; - shared with dynamically linked OpenSSL; Closes #308
LeonidVas
pushed a commit
that referenced
this issue
Mar 20, 2023
The patch adds options to configure traffic encryption[1]: --sslkeyfile - a path to a private SSL key file; --sslcerfile - a path to an SSL certificate file; --sslcafile - a path to a trusted certificate authorities (CA) file; --sslciphers - colon-separated (:) list of SSL cipher suites the connection can use; 1. https://www.tarantool.io/en/enterprise_doc/security/#configuration Part of #308
oleg-jukovec
added a commit
to tarantool/go-openssl
that referenced
this issue
Jul 27, 2023
The build tag `openssl_static` does not produce a binary with static linked libcrypto and libssl. The patch fixes it. Related to tarantool/tt#308
oleg-jukovec
added a commit
to tarantool/go-openssl
that referenced
this issue
Jul 27, 2023
The build tag `openssl_static` does not produce a binary with static linked libcrypto and libssl. The patch fixes it. Related to tarantool/tt#308
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
The tarantool EE supports connection with SSL, but
tt connect
doesn't. It is necessary to add this functionality tott connect
.The problem is that in this case we have to add the openssl dependency which will break the static build and we need to find a way to keep the static build if possible (maybe we need to add some changes to go-tarantool).
The text was updated successfully, but these errors were encountered: