/
basictls.go
112 lines (95 loc) · 2.47 KB
/
basictls.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
package net
import (
"bytes"
"crypto/tls"
"encoding/json"
"fmt"
"net"
"github.com/proidiot/gone/log"
"github.com/stuphlabs/pullcord/config"
)
// TLSCertificateGetter provides a mechanism by which the assignment of the
// crypto/tls.Config.GetCertificate method can be abstracted independently from
// other aspects of the creation of the net.Listener returned from a call to
// crypto/tls.NewListener.
type TLSCertificateGetter interface {
GetCertificate(*tls.ClientHelloInfo) (*tls.Certificate, error)
}
// BasicTLSListener combines the certificate retrieval process abstracted by a
// TLSCertificateGetter with a supplied net.Listener to give a simple
// configurable wrapper around a call to crypto/tls.NewListener.
type BasicTLSListener struct {
Listener net.Listener
CertGetter TLSCertificateGetter
actualListener net.Listener
}
func init() {
e := config.RegisterResourceType(
"basictlslistener",
func() json.Unmarshaler {
return new(BasicTLSListener)
},
)
if e != nil {
panic(e)
}
}
// UnmarshalJSON implements encoding/json.Unmarshaler.
func (b *BasicTLSListener) UnmarshalJSON(d []byte) error {
var t struct {
Listener config.Resource
CertGetter config.Resource
}
dec := json.NewDecoder(bytes.NewReader(d))
if e := dec.Decode(&t); e != nil {
return e
}
var ok bool
b.Listener, ok = t.Listener.Unmarshalled.(net.Listener)
if !ok {
_ = log.Debug(
fmt.Sprintf(
"Resource is not a net.Listener: %#v",
t.Listener.Unmarshalled,
),
)
return config.UnexpectedResourceType
}
b.CertGetter, ok = t.CertGetter.Unmarshalled.(TLSCertificateGetter)
if !ok {
_ = log.Debug(
fmt.Sprintf(
"Resource is not a TLSCertificateGetter: %#v",
t.CertGetter.Unmarshalled,
),
)
return config.UnexpectedResourceType
}
b.assureActualListenerCreated()
return nil
}
func (b *BasicTLSListener) assureActualListenerCreated() {
if b.actualListener == nil {
b.actualListener = tls.NewListener(
b.Listener,
&tls.Config{
GetCertificate: b.CertGetter.GetCertificate,
},
)
}
}
// Accept implements net.Listener.
func (b *BasicTLSListener) Accept() (net.Conn, error) {
b.assureActualListenerCreated()
return b.actualListener.Accept()
}
// Close implements net.Listener.
func (b *BasicTLSListener) Close() error {
b.assureActualListenerCreated()
return b.actualListener.Close()
}
// Addr implements net.Listener.
func (b *BasicTLSListener) Addr() net.Addr {
b.assureActualListenerCreated()
return b.actualListener.Addr()
}