deps: update lua-resty-openssl to version 1.6.4

Author: TheophileDiot

CHANGELOG.md

@@ -4,6 +4,7 @@
 
 - [DOCS] Add multi-language support to the documentation, including French
 - [UI] Fix incorrect key used when viewing service details
+- [DEPS] Update lua-resty-openssl version to v1.6.4
 
 ## v1.6.5-rc2 - ????/??/??
 

src/deps/deps.json

@@ -125,9 +125,9 @@
     },
     {
       "id": "lua-resty-openssl",
-      "name": "lua-resty-openssl v1.6.3",
+      "name": "lua-resty-openssl v1.6.4",
       "url": "https://github.com/fffonion/lua-resty-openssl.git",
-      "commit": "790209507c4bb7d24f5b3eb3f4cb9621af60831b",
+      "commit": "1c9e3f5f0ce5274d82f2faf259dd34d4b6b75eb6",
       "post_install": "rm -r src/deps/src/lua-resty-openssl/t"
     },
     {

src/deps/src/lua-resty-openssl/CHANGELOG.md

@@ -2,6 +2,12 @@
 ## [Unreleased]
 
 
+<a name="1.6.4"></a>
+## [1.6.4] - 2025-09-08
+### bug fixes
+- **jwk:** fix EC key x and y padding [42cac34](https://github.com/fffonion/lua-resty-openssl/commit/42cac34d5749c8b629002f66e8bbc8ce7ff54303)
+
+
 <a name="1.6.3"></a>
 ## [1.6.3] - 2025-09-04
 ### bug fixes
@@ -658,7 +664,8 @@
 - **x509:** export pubkey [ede4f81](https://github.com/fffonion/lua-resty-openssl/commit/ede4f817cb0fe092ad6f9ab5d6ecdcde864a9fd8)
 
 
-[Unreleased]: https://github.com/fffonion/lua-resty-openssl/compare/1.6.3...HEAD
+[Unreleased]: https://github.com/fffonion/lua-resty-openssl/compare/1.6.4...HEAD
+[1.6.4]: https://github.com/fffonion/lua-resty-openssl/compare/1.6.3...1.6.4
 [1.6.3]: https://github.com/fffonion/lua-resty-openssl/compare/1.6.2...1.6.3
 [1.6.2]: https://github.com/fffonion/lua-resty-openssl/compare/1.6.1...1.6.2
 [1.6.1]: https://github.com/fffonion/lua-resty-openssl/compare/1.6.0...1.6.1

src/deps/src/lua-resty-openssl/lib/resty/openssl.lua

@@ -24,7 +24,7 @@ try_require_modules()
 
 
 local _M = {
-  _VERSION = '1.6.3',
+  _VERSION = '1.6.4',
 }
 
 function _M.load_modules()

src/deps/src/lua-resty-openssl/lib/resty/openssl/auxiliary/jwk.lua

@@ -342,6 +342,36 @@ local jwk_params_required_mapping = {
   OKP = {},
 }
 
+local ec_coord_size_map = {
+  -- JWK RFC7518
+  ["P-256"] = 32,
+  ["P-384"] = 48,
+  ["P-521"] = 66, -- rounded up to the next byte
+  -- JOSE RFC8812 and others
+  prime256v1 = 32,
+  secp384r1 = 48,
+  secp521r1 = 66, -- rounded up to the next byte
+  brainpoolP256r1 = 32,
+  brainpoolP320r1 = 40,
+  brainpoolP384r1 = 48,
+  brainpoolP512r1 = 64, -- note this is 512 not 521
+  secp256k1 = 32,
+}
+-- Pad coordinates to field size with leading zeros
+local function pad_ec_coordinate(coord, crv)
+  local size = ec_coord_size_map[crv]
+  if not size then
+    return nil, "unsupported curve " .. tostring(crv)
+  end
+  if #coord < size then
+    return string.rep("\x00", size - #coord) .. coord
+  elseif #coord > size then
+    return nil, "coordinate length " .. #coord .. " is longer than expected " .. size
+  else
+    return coord
+  end
+end
+
 function _M.load_jwk_ex(txt, ptyp, properties)
   local tbl, err = json.decode(txt)
   if err then
@@ -420,7 +450,17 @@ function _M.load_jwk_ex(txt, ptyp, properties)
 
   if kty == "EC" then
     if params_t["x"] and params_t["y"] then
-      params_t["pub"] = "\x04" .. params_t["x"]:reverse() .. params_t["y"]:reverse()
+      local x = params_t["x"]:reverse()
+      local y = params_t["y"]:reverse()
+      x, err = pad_ec_coordinate(x, tbl["crv"])
+      if err then
+        return nil, "jwk:load_jwk: pad_ec_coordinate: " .. err
+      end
+      y, err = pad_ec_coordinate(y, tbl["crv"])
+      if err then
+        return nil, "jwk:load_jwk: pad_ec_coordinate: " .. err
+      end
+      params_t["pub"] = "\x04" .. x .. y
       params_t["x"], params_t["y"] = nil, nil
     end
   end

src/deps/src/lua-resty-openssl/lua-resty-openssl-1.6.3-1.rockspec renamed to src/deps/src/lua-resty-openssl/lua-resty-openssl-1.6.4-1.rockspec

@@ -1,8 +1,8 @@
 package = "lua-resty-openssl"
-version = "1.6.3-1"
+version = "1.6.4-1"
 source = {
    url = "git+https://github.com/fffonion/lua-resty-openssl.git",
-   tag = "1.6.3"
+   tag = "1.6.4"
 }
 description = {
    detailed = "FFI-based OpenSSL binding for LuaJIT.",