mirror of
https://github.com/caddyserver/caddy.git
synced 2025-11-04 03:27:23 -05:00
6f78cc49d1
- Using xenolf/lego's likely-temporary acmev2 branch - Cleaned up vendor folder a little bit (probably more to do) - Temporarily set default CA URL to v2 staging endpoint - Refactored user management a bit; updated tests (biggest change is how we get the email address, which now requires being able to make an ACME client with a User with a private key so that we can get the current ToS URL) - Automatic HTTPS now allows specific wildcard pattern hostnames - Commented out (but kept) the TLS-SNI code, as the challenge type may return in the future in a similar form
80 lines
2.4 KiB
Go
80 lines
2.4 KiB
Go
package acme
|
|
|
|
import (
|
|
"fmt"
|
|
"net"
|
|
"net/http"
|
|
"strings"
|
|
)
|
|
|
|
// HTTPProviderServer implements ChallengeProvider for `http-01` challenge
|
|
// It may be instantiated without using the NewHTTPProviderServer function if
|
|
// you want only to use the default values.
|
|
type HTTPProviderServer struct {
|
|
iface string
|
|
port string
|
|
done chan bool
|
|
listener net.Listener
|
|
}
|
|
|
|
// NewHTTPProviderServer creates a new HTTPProviderServer on the selected interface and port.
|
|
// Setting iface and / or port to an empty string will make the server fall back to
|
|
// the "any" interface and port 80 respectively.
|
|
func NewHTTPProviderServer(iface, port string) *HTTPProviderServer {
|
|
return &HTTPProviderServer{iface: iface, port: port}
|
|
}
|
|
|
|
// Present starts a web server and makes the token available at `HTTP01ChallengePath(token)` for web requests.
|
|
func (s *HTTPProviderServer) Present(domain, token, keyAuth string) error {
|
|
if s.port == "" {
|
|
s.port = "80"
|
|
}
|
|
|
|
var err error
|
|
s.listener, err = net.Listen("tcp", net.JoinHostPort(s.iface, s.port))
|
|
if err != nil {
|
|
return fmt.Errorf("Could not start HTTP server for challenge -> %v", err)
|
|
}
|
|
|
|
s.done = make(chan bool)
|
|
go s.serve(domain, token, keyAuth)
|
|
return nil
|
|
}
|
|
|
|
// CleanUp closes the HTTP server and removes the token from `HTTP01ChallengePath(token)`
|
|
func (s *HTTPProviderServer) CleanUp(domain, token, keyAuth string) error {
|
|
if s.listener == nil {
|
|
return nil
|
|
}
|
|
s.listener.Close()
|
|
<-s.done
|
|
return nil
|
|
}
|
|
|
|
func (s *HTTPProviderServer) serve(domain, token, keyAuth string) {
|
|
path := HTTP01ChallengePath(token)
|
|
|
|
// The handler validates the HOST header and request type.
|
|
// For validation it then writes the token the server returned with the challenge
|
|
mux := http.NewServeMux()
|
|
mux.HandleFunc(path, func(w http.ResponseWriter, r *http.Request) {
|
|
if strings.HasPrefix(r.Host, domain) && r.Method == "GET" {
|
|
w.Header().Add("Content-Type", "text/plain")
|
|
w.Write([]byte(keyAuth))
|
|
logf("[INFO][%s] Served key authentication", domain)
|
|
} else {
|
|
logf("[WARN] Received request for domain %s with method %s but the domain did not match any challenge. Please ensure your are passing the HOST header properly.", r.Host, r.Method)
|
|
w.Write([]byte("TEST"))
|
|
}
|
|
})
|
|
|
|
httpServer := &http.Server{
|
|
Handler: mux,
|
|
}
|
|
// Once httpServer is shut down we don't want any lingering
|
|
// connections, so disable KeepAlives.
|
|
httpServer.SetKeepAlivesEnabled(false)
|
|
httpServer.Serve(s.listener)
|
|
s.done <- true
|
|
}
|