Consider this a joke until somebody who knows crypto well can review it
(_and_ kgio-monkey[1]). I know it works with curl (test case included)
and I can''t see plain-text when I strace/tcpdump, that''s about
it :)
Subject: [PATCH] add preliminary SSL support
This will also be the foundation of SSL support in Rainbows!
and Zbatery. Some users may also want to use this in
Unicorn on LANs to meet certain security/auditing requirements.
Of course, Nightmare! (in whatever form) should also be able to
use it.
---
The patch is a big, so you can view it here
http://bogomips.org/unicorn.git/patch?id=ac346b5abc
[1] - http://bogomips.org/kgio-monkey/
git clone git://bogomips.org/kgio-monkey.git
This is absolutely NOT intended to be an endorsement of the current
certificate authority system. Don''t support or encourage it.
lib/unicorn/configurator.rb | 13 +++--
lib/unicorn/http_server.rb | 3 +
lib/unicorn/ssl_client.rb | 6 ++
lib/unicorn/ssl_configurator.rb | 104 +++++++++++++++++++++++++++++++++++++++
lib/unicorn/ssl_server.rb | 42 ++++++++++++++++
script/isolate_for_tests | 1 +
t/.gitignore | 2 +
t/sslgen.sh | 63 +++++++++++++++++++++++
t/t0600-https-server-basic.sh | 48 ++++++++++++++++++
test/unit/test_sni_hostnames.rb | 47 +++++++++++++++++
10 files changed, 325 insertions(+), 4 deletions(-)
create mode 100644 lib/unicorn/ssl_client.rb
create mode 100644 lib/unicorn/ssl_configurator.rb
create mode 100644 lib/unicorn/ssl_server.rb
create mode 100755 t/sslgen.sh
create mode 100755 t/t0600-https-server-basic.sh
create mode 100644 test/unit/test_sni_hostnames.rb
--
Eric Wong
