mirror of
https://github.com/caddyserver/caddy.git
synced 2025-10-31 02:27:19 -04:00
e1aa862e6a
* acmeserver: support specifying the allowed challenge types * add caddyfile adapt tests * introduce basic acme_server test * skip acme test on unsuitable environments * skip integration tests of ACME * documentation * add negative-scenario test for mismatched allowed challenges * a bit more docs * fix tests for ACME challenges * appease the linter * skip ACME tests on s390x * enable ACME challenge tests on all machines * Apply suggestions from code review Co-authored-by: Matt Holt <mholt@users.noreply.github.com> --------- Co-authored-by: Matt Holt <mholt@users.noreply.github.com>
78 lines
1.8 KiB
Go
78 lines
1.8 KiB
Go
package acmeserver
|
|
|
|
import (
|
|
"encoding/json"
|
|
"fmt"
|
|
"strings"
|
|
|
|
"github.com/smallstep/certificates/authority/provisioner"
|
|
)
|
|
|
|
// ACMEChallenge is an opaque string that represents supported ACME challenges.
|
|
type ACMEChallenge string
|
|
|
|
const (
|
|
HTTP_01 ACMEChallenge = "http-01"
|
|
DNS_01 ACMEChallenge = "dns-01"
|
|
TLS_ALPN_01 ACMEChallenge = "tls-alpn-01"
|
|
)
|
|
|
|
// validate checks if the given challenge is supported.
|
|
func (c ACMEChallenge) validate() error {
|
|
switch c {
|
|
case HTTP_01, DNS_01, TLS_ALPN_01:
|
|
return nil
|
|
default:
|
|
return fmt.Errorf("acme challenge %q is not supported", c)
|
|
}
|
|
}
|
|
|
|
// The unmarshaller first marshals the value into a string. Then it
|
|
// trims any space around it and lowercase it for normaliztion. The
|
|
// method does not and should not validate the value within accepted enums.
|
|
func (c *ACMEChallenge) UnmarshalJSON(b []byte) error {
|
|
var s string
|
|
if err := json.Unmarshal(b, &s); err != nil {
|
|
return err
|
|
}
|
|
*c = ACMEChallenge(strings.ToLower(strings.TrimSpace(s)))
|
|
return nil
|
|
}
|
|
|
|
// String returns a string representation of the challenge.
|
|
func (c ACMEChallenge) String() string {
|
|
return strings.ToLower(string(c))
|
|
}
|
|
|
|
// ACMEChallenges is a list of ACME challenges.
|
|
type ACMEChallenges []ACMEChallenge
|
|
|
|
// validate checks if the given challenges are supported.
|
|
func (c ACMEChallenges) validate() error {
|
|
for _, ch := range c {
|
|
if err := ch.validate(); err != nil {
|
|
return err
|
|
}
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func (c ACMEChallenges) toSmallstepType() []provisioner.ACMEChallenge {
|
|
if len(c) == 0 {
|
|
return nil
|
|
}
|
|
ac := make([]provisioner.ACMEChallenge, len(c))
|
|
for i, ch := range c {
|
|
ac[i] = provisioner.ACMEChallenge(ch)
|
|
}
|
|
return ac
|
|
}
|
|
|
|
func stringToChallenges(chs []string) ACMEChallenges {
|
|
challenges := make(ACMEChallenges, len(chs))
|
|
for i, ch := range chs {
|
|
challenges[i] = ACMEChallenge(ch)
|
|
}
|
|
return challenges
|
|
}
|