之前在 [Lua] 設定 HTTP 連線時的逾時秒數 這篇裡，

有用到  socket.http 來連線到 HTTP 網站，

不過用它來連 HTTPS 網站時，不知道為什麼，

有時候會成功，有時候會失敗…

 

舉例來說，用同樣的 http 物件，

連 Google 可以，連台南市圖卻不行：

> http = require("socket.http")

> http.request{url = "https://www.google.com"}
1	200	table: 0x7fdb7340c2c0	HTTP/1.1 200 OK

> http.request{url = "https://lib.tnml.tn.edu.tw/"}
nil	connection refused

 

查了一下，有人是說 HTTPS 網站要用 LuaSec 來連線才行～

先用  luarocks 來安裝 luasec，

不過它要求要有 OpenSSL 的標頭檔才能編譯：

testuser@localhost ~ $ sudo luarocks install luasec

Warning: falling back to wget - install luasec to get native HTTPS support
Installing https://luarocks.org/luasec-1.0.1-1.src.rock

Error: Could not find header file for OPENSSL
  No file openssl/ssl.h in /usr/local/include
  No file openssl/ssl.h in /usr/include
  No file openssl/ssl.h in /include
You may have to install OPENSSL in your system and/or pass OPENSSL_DIR or OPENSSL_INCDIR to the luarocks command.
Example: luarocks install luasec OPENSSL_DIR=/usr/local

 

在 Mac 上，可以直接用 Homebrew 來安裝 openssl 套件：

testuser@localhost ~ $ brew info openssl

[email protected]: stable 1.1.1k (bottled) [keg-only]
Cryptography and SSL/TLS Toolkit
https://openssl.org/
/usr/local/Cellar/[email protected]/1.1.1k (8,071 files, 18.5MB)
  Poured from bottle on 2021-03-27 at 17:00:38
From: https://github.com/Homebrew/homebrew-core/blob/HEAD/Formula/[email protected]
License: OpenSSL
==> Caveats
A CA file has been bootstrapped using certificates from the system
keychain. To add additional certificates, place .pem files in
  /usr/local/etc/[email protected]/certs

and run
  /usr/local/opt/[email protected]/bin/c_rehash

[email protected] is keg-only, which means it was not symlinked into /usr/local,
because macOS provides LibreSSL.

If you need to have [email protected] first in your PATH, run:
  echo 'export PATH="/usr/local/opt/[email protected]/bin:$PATH"' >> /Users/jeff_lai/.bash_profile

For compilers to find [email protected] you may need to set:
  export LDFLAGS="-L/usr/local/opt/[email protected]/lib"
  export CPPFLAGS="-I/usr/local/opt/[email protected]/include"

For pkg-config to find [email protected] you may need to set:
  export PKG_CONFIG_PATH="/usr/local/opt/[email protected]/lib/pkgconfig"

 

接著就可以在 luarocks 的指令裡加上  OPENSSL_DIR 參數，

來指定 OpenSSL 目錄的位置了：

sudo luarocks install luasec OPENSSL_DIR=/usr/local/opt/openssl

 

安裝好 LuaSec 後，

可以使用  ssl.https 物件來對 HTTPS 網站連線囉：

> https = require 'ssl.https'
> https.request{url = "https://lib.tnml.tn.edu.tw"}
1	200	table: 0x7fa74792af40	HTTP/1.1 200 OK

 

參考資料：

• luasocket – https request in lua – Stack Overflow
• Lua https timeout is not working – Stack Overflow