The Envoy OpenSSL Extensions project hosts extensions for building Envoy purely with OpenSSL.

To build OpenSSL-enabled Envoy run

$ CXXFLAGS="-DENVOY_SSL_VERSION=\\\"OpenSSL\\\"" bazel build //:envoy --define boringssl=disabled

If you need OpenSSL dynamically linked to Envoy then re-map @boringssl to @openssl_shared by editing the WORKSPACE file.

The Envoy OpenSSL Extensions project is governed by the Apache License, Version 2.0. See the LICENSE file for the full license text.