The Envoy OpenSSL Extensions project hosts extensions for building Envoy purely with OpenSSL.
OpenSSL is supported by providing a compatiblity library and a set of TLS related classes that track upstream functionality using OpenSSL rather than BoringSSL.
After initial checkout, initialize and update submodules for Envoy and BoringSSL:
git submodule update --init --depth=1
For a standalone build of the bssl-compat library, see
bssl-compat README.
For a full build of envoy on the bssl-compat library, start by running the run-build-container.sh script:
./run-build-container.sh
This script pulls the upstream envoy builder image (which may take some time) and then runs an interactive bash prompt.
Then, to build envoy simply run the following:
bazel build @envoy//:envoy
The Envoy OpenSSL Extensions project is governed by the Apache License, Version 2.0. See the LICENSE file for the full license text.