The Envoy OpenSSL Extensions project hosts extensions for building Envoy purely with OpenSSL.
OpenSSL is supported by providing a compatiblity library and a set of TLS related classes that track upstream functionality using OpenSSL rather than BoringSSL.
After initial checkout, initialize and update submodules for Envoy and BoringSSL:
git submodule init
git submodule update
For a standalone build of the library, see bssl-compat README.
In order to start building the Envoy handshaker extension, first install Bazel. Bazelisk is a user-friendly launcher for Bazel, install a suitable release for the desired platform. Clang is strongly recommended for a successful build.
After installing clang and Bazelisk/Bazel, build Envoy handshaker with:
patch envoy/bazel/repositories.bzl -i bazel/envoy.patch
CC=clang CXX=clang++ bazel build --config=clang --define crypto=system :envoy
The Envoy OpenSSL Extensions project is governed by the Apache License, Version 2.0. See the LICENSE file for the full license text.