mirror of
https://github.com/ruby/ruby.git
synced 2022-11-09 12:17:21 -05:00
5505449793
- SSLContext#client_cert_cb is a Proc. it is called when a client
certificate is requested by a server and no certificate was yet
set for the SSLContext. it must return an Array which includes
OpenSSL::X509::Certificate and OpenSSL::PKey::RSA/DSA objects.
- SSLContext#tmp_dh_callback is called in key exchange with DH
algorithm. it must return an OpenSSL::PKey::DH object.
* ext/openssl/ossl_ssl.c:
(ossl_sslctx_set_ciphers): ignore the argument if it's nil.
(ossl_start_ssl, ossl_ssl_write): call rb_sys_fail if errno isn't 0.
[ruby-dev:25831]
* ext/openssl/ossl_pkey.c
(GetPrivPKeyPtr, ossl_pkey_sign): should call rb_funcall first.
(DupPrivPKeyPtr): new function.
* ext/openssl/ossl_pkey_dh.c: add default DH parameters.
* ext/openssl/ossl_pkey.h: ditto.
* ext/openssl/lib/openssl/cipher.rb: fix typo. [ruby-dev:24285]
git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@8129 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
81 lines
1.6 KiB
Ruby
81 lines
1.6 KiB
Ruby
require "socket"
|
|
require "thread"
|
|
require "openssl"
|
|
require File.join(File.dirname(__FILE__), "utils.rb")
|
|
|
|
def get_pem(io=$stdin)
|
|
buf = ""
|
|
while line = io.gets
|
|
if /^-----BEGIN / =~ line
|
|
buf << line
|
|
break
|
|
end
|
|
end
|
|
while line = io.gets
|
|
buf << line
|
|
if /^-----END / =~ line
|
|
break
|
|
end
|
|
end
|
|
return buf
|
|
end
|
|
|
|
def make_key(pem)
|
|
begin
|
|
return OpenSSL::PKey::RSA.new(pem)
|
|
rescue
|
|
return OpenSSL::PKey::DSA.new(pem)
|
|
end
|
|
end
|
|
|
|
ca_cert = OpenSSL::X509::Certificate.new(get_pem)
|
|
ssl_cert = OpenSSL::X509::Certificate.new(get_pem)
|
|
ssl_key = make_key(get_pem)
|
|
port = Integer(ARGV.shift)
|
|
verify_mode = Integer(ARGV.shift)
|
|
start_immediately = (/yes/ =~ ARGV.shift)
|
|
|
|
store = OpenSSL::X509::Store.new
|
|
store.add_cert(ca_cert)
|
|
store.purpose = OpenSSL::X509::PURPOSE_SSL_CLIENT
|
|
ctx = OpenSSL::SSL::SSLContext.new
|
|
ctx.cert_store = store
|
|
#ctx.extra_chain_cert = [ ca_cert ]
|
|
ctx.cert = ssl_cert
|
|
ctx.key = ssl_key
|
|
ctx.verify_mode = verify_mode
|
|
|
|
Socket.do_not_reverse_lookup = true
|
|
tcps = nil
|
|
100.times{|i|
|
|
begin
|
|
tcps = TCPServer.new("0.0.0.0", port+i)
|
|
port = port + i
|
|
break
|
|
rescue Errno::EADDRINUSE
|
|
next
|
|
end
|
|
}
|
|
ssls = OpenSSL::SSL::SSLServer.new(tcps, ctx)
|
|
ssls.start_immediately = start_immediately
|
|
|
|
$stdout.sync = true
|
|
$stdout.puts Process.pid
|
|
$stdout.puts port
|
|
|
|
loop do
|
|
ssl = ssls.accept rescue next
|
|
Thread.start{
|
|
q = Queue.new
|
|
th = Thread.start{ ssl.write(q.shift) while true }
|
|
while line = ssl.gets
|
|
if line =~ /^STARTTLS$/
|
|
ssl.accept
|
|
next
|
|
end
|
|
q.push(line)
|
|
end
|
|
th.kill if q.empty?
|
|
ssl.close
|
|
}
|
|
end
|