taobao nginx configure

[root@192 ngx_openresty-1.2.6.6]# ./configure
platform: linux (linux)
cp -rp bundle/ build
cd build
cd lua-5.1.5
gmake linux
cd src && gmake linux
gmake[1]: Entering directory `/opt/software/ngx_openresty-1.2.6.6/build/lua-5.1.5/src'
gmake all MYCFLAGS=-DLUA_USE_LINUX MYLIBS="-Wl,-E -ldl -lreadline -lhistory -lncurses"
gmake[2]: Entering directory `/opt/software/ngx_openresty-1.2.6.6/build/lua-5.1.5/src'
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o lapi.o lapi.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o lcode.o lcode.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o ldebug.o ldebug.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o ldo.o ldo.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o ldump.o ldump.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o lfunc.o lfunc.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o lgc.o lgc.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o llex.o llex.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o lmem.o lmem.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o lobject.o lobject.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o lopcodes.o lopcodes.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o lparser.o lparser.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o lstate.o lstate.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o lstring.o lstring.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o ltable.o ltable.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o ltm.o ltm.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o lundump.o lundump.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o lvm.o lvm.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o lzio.o lzio.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o lauxlib.o lauxlib.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o lbaselib.o lbaselib.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o ldblib.o ldblib.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o liolib.o liolib.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o lmathlib.o lmathlib.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o loslib.o loslib.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o ltablib.o ltablib.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o lstrlib.o lstrlib.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o loadlib.o loadlib.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o linit.o linit.c
ar rcu liblua.a lapi.o lcode.o ldebug.o ldo.o ldump.o lfunc.o lgc.o llex.o lmem.o lobject.o lopcodes.o lparser.o lstate.o lstring.o ltable.o ltm.o lundump.o lvm.o lzio.o lauxlib.o lbaselib.o ldblib.o liolib.o lmathlib.o loslib.o ltablib.o lstrlib.o loadlib.o linit.o   # DLL needs all object files
ranlib liblua.a
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o lua.o lua.c
gcc -o lua  lua.o liblua.a -lm -Wl,-E -ldl -lreadline -lhistory -lncurses
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o luac.o luac.c
gcc -O2 -Wall -DLUA_USE_LINUX   -c -o print.o print.c
gcc -o luac  luac.o print.o liblua.a -lm -Wl,-E -ldl -lreadline -lhistory -lncurses
gmake[2]: Leaving directory `/opt/software/ngx_openresty-1.2.6.6/build/lua-5.1.5/src'
gmake[1]: Leaving directory `/opt/software/ngx_openresty-1.2.6.6/build/lua-5.1.5/src'
gmake install INSTALL_TOP=/opt/software/ngx_openresty-1.2.6.6/build/lua-root/usr/local/openresty/lua
cd src && mkdir -p /opt/software/ngx_openresty-1.2.6.6/build/lua-root/usr/local/openresty/lua/bin /opt/software/ngx_openresty-1.2.6.6/build/lua-root/usr/local/openresty/lua/include /opt/software/ngx_openresty-1.2.6.6/build/lua-root/usr/local/openresty/lua/lib /opt/software/ngx_openresty-1.2.6.6/build/lua-root/usr/local/openresty/lua/man/man1 /opt/software/ngx_openresty-1.2.6.6/build/lua-root/usr/local/openresty/lua/share/lua/5.1 /opt/software/ngx_openresty-1.2.6.6/build/lua-root/usr/local/openresty/lua/lib/lua/5.1
cd src && cp -p lua luac /opt/software/ngx_openresty-1.2.6.6/build/lua-root/usr/local/openresty/lua/bin
cd src && cp -p lua.h luaconf.h lualib.h lauxlib.h ../etc/lua.hpp /opt/software/ngx_openresty-1.2.6.6/build/lua-root/usr/local/openresty/lua/include
cd src && cp -p liblua.a /opt/software/ngx_openresty-1.2.6.6/build/lua-root/usr/local/openresty/lua/lib
cd doc && cp -p lua.1 luac.1 /opt/software/ngx_openresty-1.2.6.6/build/lua-root/usr/local/openresty/lua/man/man1
export LUA_LIB='/opt/software/ngx_openresty-1.2.6.6/build/lua-root/usr/local/openresty/lua/lib'
export LUA_INC='/opt/software/ngx_openresty-1.2.6.6/build/lua-root/usr/local/openresty/lua/include'
cd ..
cd nginx-1.2.6
./configure --prefix=/usr/local/openresty/nginx \
  --add-module=../ngx_devel_kit-0.2.18 \
  --add-module=../echo-nginx-module-0.42 \
  --add-module=../xss-nginx-module-0.03rc9 \
  --add-module=../ngx_coolkit-0.2rc1 \
  --add-module=../set-misc-nginx-module-0.22rc8 \
  --add-module=../form-input-nginx-module-0.07 \
  --add-module=../encrypted-session-nginx-module-0.02 \
  --add-module=../srcache-nginx-module-0.19 \
  --add-module=../ngx_lua-0.7.15 \
  --add-module=../headers-more-nginx-module-0.19 \
  --add-module=../array-var-nginx-module-0.03rc1 \
  --add-module=../memc-nginx-module-0.13rc3 \
  --add-module=../redis2-nginx-module-0.09 \
  --add-module=../redis-nginx-module-0.3.6 \
  --add-module=../auth-request-nginx-module-0.2 \
  --add-module=../rds-json-nginx-module-0.12rc10 \
  --add-module=../rds-csv-nginx-module-0.05rc2 \
  --with-http_ssl_module
checking for OS
+ Linux 2.6.32-279.el6.x86_64 x86_64
checking for C compiler ... found
+ using GNU C compiler
+ gcc version: 4.4.6 20120305 (Red Hat 4.4.6-4) (GCC)
checking for gcc -pipe switch ... found
checking for gcc builtin atomic operations ... found
checking for C99 variadic macros ... found
checking for gcc variadic macros ... found
checking for unistd.h ... found
checking for inttypes.h ... found
checking for limits.h ... found
checking for sys/filio.h ... not found
checking for sys/param.h ... found
checking for sys/mount.h ... found
checking for sys/statvfs.h ... found
checking for crypt.h ... found
checking for Linux specific features
checking for epoll ... found
checking for sendfile() ... found
checking for sendfile64() ... found
checking for sys/prctl.h ... found
checking for prctl(PR_SET_DUMPABLE) ... found
checking for sched_setaffinity() ... found
checking for crypt_r() ... found
checking for sys/vfs.h ... found
checking for nobody group ... found
checking for poll() ... found
checking for /dev/poll ... not found
checking for kqueue ... not found
checking for crypt() ... not found
checking for crypt() in libcrypt ... found
checking for F_READAHEAD ... not found
checking for posix_fadvise() ... found
checking for O_DIRECT ... found
checking for F_NOCACHE ... not found
checking for directio() ... not found
checking for statfs() ... found
checking for statvfs() ... found
checking for dlopen() ... not found
checking for dlopen() in libdl ... found
checking for sched_yield() ... found
checking for SO_SETFIB ... not found
checking for SO_ACCEPTFILTER ... not found
checking for TCP_DEFER_ACCEPT ... found
checking for TCP_KEEPIDLE, TCP_KEEPINTVL, TCP_KEEPCNT ... found
checking for TCP_INFO ... found
checking for accept4() ... found
checking for int size ... 4 bytes
checking for long size ... 8 bytes
checking for long long size ... 8 bytes
checking for void * size ... 8 bytes
checking for uint64_t ... found
checking for sig_atomic_t ... found
checking for sig_atomic_t size ... 4 bytes
checking for socklen_t ... found
checking for in_addr_t ... found
checking for in_port_t ... found
checking for rlim_t ... found
checking for uintptr_t ... uintptr_t found
checking for system byte ordering ... little endian
checking for size_t size ... 8 bytes
checking for off_t size ... 8 bytes
checking for time_t size ... 8 bytes
checking for setproctitle() ... not found
checking for pread() ... found
checking for pwrite() ... found
checking for sys_nerr ... found
checking for localtime_r() ... found
checking for posix_memalign() ... found
checking for memalign() ... found
checking for mmap(MAP_ANON|MAP_SHARED) ... found
checking for mmap("/dev/zero", MAP_SHARED) ... found
checking for System V shared memory ... found
checking for POSIX semaphores ... not found
checking for POSIX semaphores in libpthread ... found
checking for struct msghdr.msg_control ... found
checking for ioctl(FIONBIO) ... found
checking for struct tm.tm_gmtoff ... found
checking for struct dirent.d_namlen ... not found
checking for struct dirent.d_type ... found
checking for sysconf(_SC_NPROCESSORS_ONLN) ... found
checking for openat(), fstatat() ... found
configuring additional modules
adding module in ../ngx_devel_kit-0.2.18
+ ngx_devel_kit was configured
adding module in ../echo-nginx-module-0.42
+ ngx_http_echo_module was configured
adding module in ../xss-nginx-module-0.03rc9
+ ngx_http_xss_filter_module was configured
adding module in ../ngx_coolkit-0.2rc1
+ ngx_coolkit_module was configured
adding module in ../set-misc-nginx-module-0.22rc8
found ngx_devel_kit for ngx_set_misc; looks good.
+ ngx_http_set_misc_module was configured
adding module in ../form-input-nginx-module-0.07
found ngx_devel_kit for ngx_form_input; looks good.
+ ngx_http_form_input_module was configured
adding module in ../encrypted-session-nginx-module-0.02
+ ngx_http_encrypted_session_module was configured
adding module in ../srcache-nginx-module-0.19
+ ngx_http_srcache_filter_module was configured
adding module in ../ngx_lua-0.7.15
checking for Lua library in /opt/software/ngx_openresty-1.2.6.6/build/lua-root/usr/local/openresty/lua/lib and /opt/software/ngx_openresty-1.2.6.6/build/lua-root/usr/local/openresty/lua/include (specified by the LUA_LIB and LUA_INC env) ... found
checking for export symbols by default ... found
+ ngx_http_lua_module was configured
adding module in ../headers-more-nginx-module-0.19
+ ngx_http_headers_more_filter_module was configured
adding module in ../array-var-nginx-module-0.03rc1
found ngx_devel_kit for ngx_array_var; looks good.
+ ngx_http_array_var_module was configured
adding module in ../memc-nginx-module-0.13rc3
+ ngx_http_memc_module was configured
adding module in ../redis2-nginx-module-0.09
+ ngx_http_redis2_module was configured
adding module in ../redis-nginx-module-0.3.6
+ ngx_http_redis_module was configured
adding module in ../auth-request-nginx-module-0.2
+ ngx_http_auth_request_module was configured
adding module in ../rds-json-nginx-module-0.12rc10
+ ngx_http_rds_json_filter_module was configured
adding module in ../rds-csv-nginx-module-0.05rc2
+ ngx_http_rds_csv_filter_module was configured
checking for PCRE library ... found
checking for PCRE JIT support ... not found
checking for OpenSSL library ... found
checking for zlib library ... found
creating objs/Makefile

Configuration summary
  + using system PCRE library
  + using system OpenSSL library
  + md5: using OpenSSL library
  + sha1: using OpenSSL library
  + using system zlib library

  nginx path prefix: "/usr/local/openresty/nginx"
  nginx binary file: "/usr/local/openresty/nginx/sbin/nginx"
  nginx configuration prefix: "/usr/local/openresty/nginx/conf"
  nginx configuration file: "/usr/local/openresty/nginx/conf/nginx.conf"
  nginx pid file: "/usr/local/openresty/nginx/logs/nginx.pid"
  nginx error log file: "/usr/local/openresty/nginx/logs/error.log"
  nginx http access log file: "/usr/local/openresty/nginx/logs/access.log"
  nginx http client request body temporary files: "client_body_temp"
  nginx http proxy temporary files: "proxy_temp"
  nginx http fastcgi temporary files: "fastcgi_temp"
  nginx http uwsgi temporary files: "uwsgi_temp"
  nginx http scgi temporary files: "scgi_temp"

cd ../..
Type the following commands to build and install:
    gmake
    gmake install
[root@192 ngx_openresty-1.2.6.6]#

评论

3 楼 zdx3578 2013-03-18  

用户通过证书登录vpn 登录后端应用，现在要求对登录应用的用户身份进行判断，必须是和vpn证书登录用户身份一致的用户才能登录应用，即a用户登录vpn后不能用其他用户身份登录后端应用，必须还是a身份，
通过nginx做代理，通过嵌入的lua实现对证书用户身份识别，在lua里面进行证书用户和 用户在应用里的帐号的判断，实现证书用户必须使用这个用户在应用里面的帐号登录自己的应用，而不能自己的证书登录vpn，而其他人通过他的vpn登录自己的帐号，a的vpn登录后，后端应用必须是a的帐号登录而不能是b 或c的帐号登录应用。

2 楼 zdx3578 2013-03-17  

    if (ngx_decode_base64(res, &src) != NGX_OK) {
        ngx_log_error(NGX_LOG_ERR, r->connection->log, 0,
                      "set_decode_base64: invalid value");
        return NGX_ERROR;

源代码 未输出其他debug信息

1 楼 zdx3578 2013-03-17  

使用 set_decode_base64  $base64   ;  解码时一直提示： set_decode_base64: invalid value, client: 错误

后经过反复调试终于发现是在对base64字符串截取时 字符串前面多了个空格导致格式不对，s  h i t。

Basic emR4OjEx
1
2.. emR4OjEx..1
1
zdx:11