[GitHub] [trafficserver] bneradt commented on pull request #8610: Make TLS Early Data available with BoringSSL

[GitBox <gi...@apache.org>]

bneradt commented on pull request #8610:
URL: https://github.com/apache/trafficserver/pull/8610#issuecomment-1018788927


   > Looks good. Just a few suggestions for comments we can add.
   > 
   > Maybe we can set up BoringSSL to run for one of the PR jobs in CI? Perhaps we can use the Fedora run, for instance, to run with BoringSSL.
   
   For the record, this seems to do the trick:
   
   ```
   docker pull controller.trafficserver.org/ats/fedora:33
   docker run -it controller.trafficserver.org/ats/fedora:33 /bin/bash
   
   # Now in the docker container, running as root.
   yum install -y cmake go
   cd /opt
   git clone https://boringssl.googlesource.com/boringssl
   cd boringssl
   mkdir build
   cd build
   cmake -DCMAKE_BUILD_TYPE=Release ..
   make -j $(nproc)
   cd ../
   mkdir lib
   cd lib
   ln -s ../build/ssl/libssl.a
   ln -s ../build/crypto/libcrypto.a
   ```
   
   We can add that to the controller.trafficserver.org/ats/fedora:33, making it a part of its image.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: github-unsubscribe@trafficserver.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org