more fix

Author: h2zi

src/ngx_http_lua_ssl_client_helloby.c

@@ -544,6 +544,9 @@ ngx_http_lua_ffi_ssl_get_client_hello_server_name(ngx_http_request_t *r,
 #ifdef LIBRESSL_VERSION_NUMBER
     *err = "LibreSSL does not support by ssl_client_hello_by_lua*";
     return NGX_ERROR;
+#elif defined(OPENSSL_IS_AWSLC)
+    *err = "AWS-LC does not support by ssl_client_hello_by_lua*";
+    return NGX_ERROR;
 #else
     ngx_ssl_conn_t          *ssl_conn;
 #ifdef SSL_ERROR_WANT_CLIENT_HELLO_CB
@@ -634,6 +637,9 @@ ngx_http_lua_ffi_ssl_get_client_hello_ext(ngx_http_request_t *r,
 #ifdef LIBRESSL_VERSION_NUMBER
     *err = "LibreSSL does not support by ssl_client_hello_by_lua*";
     return NGX_ERROR;
+#elif defined(OPENSSL_IS_AWSLC)
+    *err = "AWSLC does not support by ssl_client_hello_by_lua*";
+    return NGX_ERROR;
 #else
     ngx_ssl_conn_t          *ssl_conn;
 

src/ngx_http_lua_ssl_export_keying_material.c

@@ -31,7 +31,7 @@ ngx_http_lua_ffi_ssl_export_keying_material(ngx_http_request_t *r,
     u_char *out, size_t out_size, const char *label, size_t llen,
     const u_char *context, size_t ctxlen, int use_ctx, char **err)
 {
-#if defined(OPENSSL_IS_BORINGSSL)
+#if defined(OPENSSL_IS_BORINGSSL) && !defined(OPENSSL_IS_AWSLC)
     *err = "BoringSSL does not support SSL_export_keying_material";
     return NGX_ERROR;
 #elif defined(LIBRESSL_VERSION_NUMBER)

src/ngx_http_lua_ssl_ocsp.c

@@ -511,7 +511,7 @@ ngx_http_lua_ffi_ssl_set_ocsp_status_resp(ngx_http_request_t *r,
         return NGX_ERROR;
     }
 
-#ifdef SSL_CTRL_GET_TLSEXT_STATUS_REQ_TYPE
+#if defined(SSL_CTRL_GET_TLSEXT_STATUS_REQ_TYPE) || defined(OPENSSL_IS_AWSLC)
     if (SSL_get_tlsext_status_type(ssl_conn) == -1) {
 #else
     if (ssl_conn->tlsext_status_type == -1) {

t/140-ssl-c-api.t

@@ -11,8 +11,6 @@ my $openssl_version = eval { `$NginxBinary -V 2>&1` };
 if ($openssl_version =~ m/built with OpenSSL (0|1\.0\.(?:0|1[^\d]|2[a-d]).*)/) {
     plan(skip_all => "too old OpenSSL, need 1.0.2e, was $1");
 
-} elsif ($openssl_version =~ m/AWS-LC/) {
-    plan(skip_all => "does not support AWS-LC");
 } else {
     plan tests => repeat_each() * (blocks() * 5 - 1);
 }