mirror of
https://github.com/puma/puma.git
synced 2022-11-09 13:48:40 -05:00
d2f9d6de7b
Any number of verification flags supported by OpenSSL can be set ( https://www.openssl.org/docs/manmaster/man3/X509_VERIFY_PARAM_set_hostflags.html#VERIFICATION-FLAGS
79 lines
2.4 KiB
Ruby
79 lines
2.4 KiB
Ruby
module Puma
|
|
module MiniSSL
|
|
class ContextBuilder
|
|
def initialize(params, events)
|
|
@params = params
|
|
@events = events
|
|
end
|
|
|
|
def context
|
|
ctx = MiniSSL::Context.new
|
|
|
|
if defined?(JRUBY_VERSION)
|
|
unless params['keystore']
|
|
events.error "Please specify the Java keystore via 'keystore='"
|
|
end
|
|
|
|
ctx.keystore = params['keystore']
|
|
|
|
unless params['keystore-pass']
|
|
events.error "Please specify the Java keystore password via 'keystore-pass='"
|
|
end
|
|
|
|
ctx.keystore_pass = params['keystore-pass']
|
|
ctx.ssl_cipher_list = params['ssl_cipher_list'] if params['ssl_cipher_list']
|
|
else
|
|
unless params['key']
|
|
events.error "Please specify the SSL key via 'key='"
|
|
end
|
|
|
|
ctx.key = params['key']
|
|
|
|
unless params['cert']
|
|
events.error "Please specify the SSL cert via 'cert='"
|
|
end
|
|
|
|
ctx.cert = params['cert']
|
|
|
|
if ['peer', 'force_peer'].include?(params['verify_mode'])
|
|
unless params['ca']
|
|
events.error "Please specify the SSL ca via 'ca='"
|
|
end
|
|
end
|
|
|
|
ctx.ca = params['ca'] if params['ca']
|
|
ctx.ssl_cipher_filter = params['ssl_cipher_filter'] if params['ssl_cipher_filter']
|
|
end
|
|
|
|
ctx.no_tlsv1 = true if params['no_tlsv1'] == 'true'
|
|
ctx.no_tlsv1_1 = true if params['no_tlsv1_1'] == 'true'
|
|
|
|
if params['verify_mode']
|
|
ctx.verify_mode = case params['verify_mode']
|
|
when "peer"
|
|
MiniSSL::VERIFY_PEER
|
|
when "force_peer"
|
|
MiniSSL::VERIFY_PEER | MiniSSL::VERIFY_FAIL_IF_NO_PEER_CERT
|
|
when "none"
|
|
MiniSSL::VERIFY_NONE
|
|
else
|
|
events.error "Please specify a valid verify_mode="
|
|
MiniSSL::VERIFY_NONE
|
|
end
|
|
end
|
|
|
|
if params['verification_flags']
|
|
ctx.verification_flags = params['verification_flags'].split(',').
|
|
map { |flag| MiniSSL::VERIFICATION_FLAGS.fetch(flag) }.
|
|
inject { |sum, flag| sum ? sum | flag : flag }
|
|
end
|
|
|
|
ctx
|
|
end
|
|
|
|
private
|
|
|
|
attr_reader :params, :events
|
|
end
|
|
end
|
|
end
|