autocert: HTTP-01 handler
This commit is contained in:
parent
fa23c7b75c
commit
0d51373079
8
main.go
8
main.go
|
@ -64,6 +64,7 @@ type CLIArgs struct {
|
||||||
autocertDir string
|
autocertDir string
|
||||||
autocertACME string
|
autocertACME string
|
||||||
autocertEmail string
|
autocertEmail string
|
||||||
|
autocertHTTP string
|
||||||
}
|
}
|
||||||
|
|
||||||
func list_ciphers() {
|
func list_ciphers() {
|
||||||
|
@ -91,6 +92,7 @@ func parse_args() CLIArgs {
|
||||||
flag.StringVar(&args.autocertDir, "autocert-dir", filepath.Join(home, ".dumbproxy", "autocert"), "path to autocert cache")
|
flag.StringVar(&args.autocertDir, "autocert-dir", filepath.Join(home, ".dumbproxy", "autocert"), "path to autocert cache")
|
||||||
flag.StringVar(&args.autocertACME, "autocert-acme", autocert.DefaultACMEDirectory, "custom ACME endpoint")
|
flag.StringVar(&args.autocertACME, "autocert-acme", autocert.DefaultACMEDirectory, "custom ACME endpoint")
|
||||||
flag.StringVar(&args.autocertEmail, "autocert-email", "", "email used for ACME registration")
|
flag.StringVar(&args.autocertEmail, "autocert-email", "", "email used for ACME registration")
|
||||||
|
flag.StringVar(&args.autocertHTTP, "autocert-http", "", "listen address for HTTP-01 challenges handler of ACME")
|
||||||
flag.Parse()
|
flag.Parse()
|
||||||
return args
|
return args
|
||||||
}
|
}
|
||||||
|
@ -158,6 +160,12 @@ func run() int {
|
||||||
if args.autocertWhitelist != nil {
|
if args.autocertWhitelist != nil {
|
||||||
m.HostPolicy = autocert.HostWhitelist([]string(args.autocertWhitelist)...)
|
m.HostPolicy = autocert.HostWhitelist([]string(args.autocertWhitelist)...)
|
||||||
}
|
}
|
||||||
|
if args.autocertHTTP != "" {
|
||||||
|
go func() {
|
||||||
|
log.Fatalf("HTTP-01 ACME challenge server stopped: %v",
|
||||||
|
http.ListenAndServe(args.autocertHTTP, m.HTTPHandler(nil)))
|
||||||
|
}()
|
||||||
|
}
|
||||||
cfg := m.TLSConfig()
|
cfg := m.TLSConfig()
|
||||||
cfg.CipherSuites = makeCipherList(args.ciphers)
|
cfg.CipherSuites = makeCipherList(args.ciphers)
|
||||||
server.TLSConfig = cfg
|
server.TLSConfig = cfg
|
||||||
|
|
Loading…
Reference in New Issue