johnsully / modssl Goto Github PK
View Code? Open in Web Editor NEWAn SSL Module for Redis and KeyDB
Home Page: https://keydb.dev/
License: GNU Lesser General Public License v3.0
An SSL Module for Redis and KeyDB
Home Page: https://keydb.dev/
License: GNU Lesser General Public License v3.0
22520:M 25 Nov 2019 06:00:55.552 # WARNING: The TCP backlog setting of 511 cannot be enforced because /proc/sys/net/core/somaxconn is set to the lower value of 128.
22520:M 25 Nov 2019 06:00:55.552 # Server initialized
22520:M 25 Nov 2019 06:00:55.552 # WARNING you have Transparent Huge Pages (THP) support enabled in your kernel. This will create latency and memory usage issues with KeyDB. To fix this issue run the command 'echo never > /sys/kernel/mm/transparent_hugepage/enabled' as root, and add it to your /etc/rc.local in order to retain the setting after a reboot. KeyDB must be restarted after THP is disabled.
22520:M 25 Nov 2019 06:00:55.553 * Initializing SSL configuration
22520:M 25 Nov 2019 06:00:55.595 * Module 'modssl' loaded from /modssl/modssl.so
22520:M 25 Nov 2019 06:00:55.595 * Ready to accept connections
22520:M 25 Nov 2019 06:00:55.595 Thread 0 alive.
22520:M 25 Nov 2019 06:01:34.591 # SSL Negotiation unsuccessful due to Error: TLS alert received: Error encountered in /modssl/submodules/s2n/tls/s2n_alerts.c line 96 : TLS alert received
Segmentation fault
Note to self on the build failure.
g++ -o modssl.so patch.o ssl.o module.o -shared -lssl -lcrypto -Lsubmodules/s2n/build/lib/ -l:libs2n.a -L./ -lsubhook
/usr/bin/ld: .//libsubhook.a(subhook.c.o): relocation R_X86_64_PC32 against symbol `subhook_disasm_handler' can not be used when making a shared object; recompile with -fPIC
/usr/bin/ld: final link failed: Bad value
collect2: error: ld returned 1 exit status
Makefile:35: recipe for target 'modssl.so' failed
make: *** [modssl.so] Error 1```
Hello @JohnSully, this is quite an impressive project!
I wonder what the Redis modules API should provide in order to let such a project to exist without the need of hot patching. And if, by providing such APIs, the rest would continue to work without issues across releases, no longe relying on low level details about the Redis implementation. I'll review the SSL PR with the idea to merge before Redis 6, however this experiment of yours kinda changes the landscape. During the Redis Conf there was a meeting where I actually suggested to go with the module approach, but we were not sure about how much viable and convenient it was, so many were against the idea. However this project of yours brings new insights into this approach. Thanks.
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.