2022-03-15 18:17:19 +00:00
|
|
|
use std::{fs::File, io::BufReader};
|
2018-08-07 22:34:16 -07:00
|
|
|
|
2019-03-30 09:12:42 -07:00
|
|
|
use actix_files::Files;
|
2022-03-15 18:17:19 +00:00
|
|
|
use actix_web::{
|
|
|
|
|
http::header::ContentType, middleware, web, App, HttpRequest, HttpResponse, HttpServer,
|
|
|
|
|
};
|
|
|
|
|
use log::debug;
|
2024-05-25 05:36:36 +01:00
|
|
|
use rustls::{pki_types::PrivateKeyDer, ServerConfig};
|
2022-01-30 16:22:16 +00:00
|
|
|
use rustls_pemfile::{certs, pkcs8_private_keys};
|
2018-08-07 22:34:16 -07:00
|
|
|
|
|
|
|
|
/// simple handle
|
2019-12-07 23:59:24 +06:00
|
|
|
async fn index(req: HttpRequest) -> HttpResponse {
|
2022-06-07 22:53:38 -04:00
|
|
|
debug!("{req:?}");
|
2022-03-15 18:17:19 +00:00
|
|
|
|
|
|
|
|
HttpResponse::Ok().content_type(ContentType::html()).body(
|
|
|
|
|
"<!DOCTYPE html><html><body>\
|
|
|
|
|
<p>Welcome to your TLS-secured homepage!</p>\
|
|
|
|
|
</body></html>",
|
|
|
|
|
)
|
2018-08-07 22:34:16 -07:00
|
|
|
}
|
|
|
|
|
|
2020-09-12 16:49:45 +01:00
|
|
|
#[actix_web::main]
|
2019-12-07 23:59:24 +06:00
|
|
|
async fn main() -> std::io::Result<()> {
|
2022-03-15 18:17:19 +00:00
|
|
|
env_logger::init_from_env(env_logger::Env::default().default_filter_or("info"));
|
|
|
|
|
|
|
|
|
|
let config = load_rustls_config();
|
|
|
|
|
|
2023-02-25 12:38:19 +00:00
|
|
|
log::info!("starting HTTPS server at https://localhost:8443");
|
2018-08-07 22:34:16 -07:00
|
|
|
|
2022-03-15 18:17:19 +00:00
|
|
|
HttpServer::new(|| {
|
|
|
|
|
App::new()
|
|
|
|
|
// enable logger
|
|
|
|
|
.wrap(middleware::Logger::default())
|
|
|
|
|
// register simple handler, handle all methods
|
|
|
|
|
.service(web::resource("/index.html").to(index))
|
2023-03-14 02:40:02 +00:00
|
|
|
.service(web::redirect("/", "/index.html"))
|
2022-03-15 18:17:19 +00:00
|
|
|
.service(Files::new("/static", "static"))
|
|
|
|
|
})
|
2024-05-25 05:36:36 +01:00
|
|
|
.bind_rustls_0_23("127.0.0.1:8443", config)?
|
2022-03-15 18:17:19 +00:00
|
|
|
.run()
|
|
|
|
|
.await
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
fn load_rustls_config() -> rustls::ServerConfig {
|
2024-05-25 05:36:36 +01:00
|
|
|
rustls::crypto::aws_lc_rs::default_provider()
|
|
|
|
|
.install_default()
|
|
|
|
|
.unwrap();
|
|
|
|
|
|
2022-03-15 18:17:19 +00:00
|
|
|
// init server config builder with safe defaults
|
2024-05-25 05:36:36 +01:00
|
|
|
let config = ServerConfig::builder().with_no_client_auth();
|
2022-03-15 18:17:19 +00:00
|
|
|
|
|
|
|
|
// load TLS key/cert files
|
2018-08-07 22:34:16 -07:00
|
|
|
let cert_file = &mut BufReader::new(File::open("cert.pem").unwrap());
|
|
|
|
|
let key_file = &mut BufReader::new(File::open("key.pem").unwrap());
|
2022-03-15 18:17:19 +00:00
|
|
|
|
|
|
|
|
// convert files to key/cert objects
|
2024-05-25 05:36:36 +01:00
|
|
|
let cert_chain = certs(cert_file).collect::<Result<Vec<_>, _>>().unwrap();
|
|
|
|
|
let mut keys = pkcs8_private_keys(key_file)
|
|
|
|
|
.map(|key| key.map(PrivateKeyDer::Pkcs8))
|
|
|
|
|
.collect::<Result<Vec<_>, _>>()
|
|
|
|
|
.unwrap();
|
2022-03-15 18:17:19 +00:00
|
|
|
|
|
|
|
|
// exit if no keys could be parsed
|
2021-10-06 22:06:25 -04:00
|
|
|
if keys.is_empty() {
|
|
|
|
|
eprintln!("Could not locate PKCS 8 private keys.");
|
|
|
|
|
std::process::exit(1);
|
|
|
|
|
}
|
2018-08-07 22:34:16 -07:00
|
|
|
|
2022-03-15 18:17:19 +00:00
|
|
|
config.with_single_cert(cert_chain, keys.remove(0)).unwrap()
|
2019-03-09 18:03:09 -08:00
|
|
|
}
|
