blek
/
astraproxy
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

autocert: HTTP-01 handler

This commit is contained in:
Vladislav Yarmak 2022-09-05 00:36:49 +03:00
parent fa23c7b75c
commit 0d51373079
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
main.go
View File

@ -64,6 +64,7 @@ type CLIArgs struct {
autocertDir string
autocertACME string
autocertEmail string
autocertHTTP string
}
func list_ciphers() {
@ -91,6 +92,7 @@ func parse_args() CLIArgs {
flag.StringVar(&args.autocertDir, "autocert-dir", filepath.Join(home, ".dumbproxy", "autocert"), "path to autocert cache")
flag.StringVar(&args.autocertACME, "autocert-acme", autocert.DefaultACMEDirectory, "custom ACME endpoint")
flag.StringVar(&args.autocertEmail, "autocert-email", "", "email used for ACME registration")
flag.StringVar(&args.autocertHTTP, "autocert-http", "", "listen address for HTTP-01 challenges handler of ACME")
flag.Parse()
return args
}
@ -158,6 +160,12 @@ func run() int {
if args.autocertWhitelist != nil {
m.HostPolicy = autocert.HostWhitelist([]string(args.autocertWhitelist)...)
}
if args.autocertHTTP != "" {
go func() {
log.Fatalf("HTTP-01 ACME challenge server stopped: %v",
http.ListenAndServe(args.autocertHTTP, m.HTTPHandler(nil)))
}()
}
cfg := m.TLSConfig()
cfg.CipherSuites = makeCipherList(args.ciphers)
server.TLSConfig = cfg