actix/examples
1
0
Fork 0
mirror of https://github.com/actix/examples synced 2025-02-02 09:39:03 +01:00
Code Issues Releases Wiki Activity

Updated security/rustls to v4. (#512)

Browse Source
This commit is contained in:
Christopher Gubbin 2022-01-30 16:22:16 +00:00 committed by GitHub
parent 25066b754f
commit 57514aa8d8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 23 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
security/rustls/Cargo.toml
View File

@ -2,14 +2,15 @@
name = "rustls-example" name = "rustls-example"
version = "1.0.0" version = "1.0.0"
authors = ["Nikolay Kim <fafhrd91@gmail.com>"] authors = ["Nikolay Kim <fafhrd91@gmail.com>"]
edition = "2018" edition = "2021"
[[bin]] [[bin]]
name = "rustls-server" name = "rustls-server"
path = "src/main.rs" path = "src/main.rs"
[dependencies] [dependencies]
env_logger = "0.8" env_logger = "0.9"
rustls = "0.18" rustls = "0.20.2"
actix-web = { version = "3", features = ["rustls"] } rustls-pemfile = "0.2.1"
actix-files = "0.3" actix-web = { version = "4.0.0-beta.21", features = ["rustls"] }
actix-files = "0.6.0-beta.15"

24
security/rustls/src/main.rs
View File

@ -3,8 +3,8 @@ use std::io::BufReader;
use actix_files::Files; use actix_files::Files;
use actix_web::{middleware, web, App, HttpRequest, HttpResponse, HttpServer}; use actix_web::{middleware, web, App, HttpRequest, HttpResponse, HttpServer};
use rustls::internal::pemfile::{certs, pkcs8_private_keys}; use rustls::{Certificate, PrivateKey, ServerConfig};
use rustls::{NoClientAuth, ServerConfig}; use rustls_pemfile::{certs, pkcs8_private_keys};
/// simple handle /// simple handle
async fn index(req: HttpRequest) -> HttpResponse { async fn index(req: HttpRequest) -> HttpResponse {
@ -22,16 +22,26 @@ async fn main() -> std::io::Result<()> {
env_logger::init(); env_logger::init();
// load ssl keys // load ssl keys
let mut config = ServerConfig::new(NoClientAuth::new()); let config = ServerConfig::builder()
.with_safe_defaults()
.with_no_client_auth();
let cert_file = &mut BufReader::new(File::open("cert.pem").unwrap()); let cert_file = &mut BufReader::new(File::open("cert.pem").unwrap());
let key_file = &mut BufReader::new(File::open("key.pem").unwrap()); let key_file = &mut BufReader::new(File::open("key.pem").unwrap());
let cert_chain = certs(cert_file).unwrap(); let cert_chain = certs(cert_file)
let mut keys = pkcs8_private_keys(key_file).unwrap(); .unwrap()
.into_iter()
.map(Certificate)
.collect();
let mut keys: Vec<PrivateKey> = pkcs8_private_keys(key_file)
.unwrap()
.into_iter()
.map(PrivateKey)
.collect();
if keys.is_empty() { if keys.is_empty() {
eprintln!("Could not locate PKCS 8 private keys."); eprintln!("Could not locate PKCS 8 private keys.");
std::process::exit(1); std::process::exit(1);
} }
config.set_single_cert(cert_chain, keys.remove(0)).unwrap(); let config = config.with_single_cert(cert_chain, keys.remove(0)).unwrap();
println!("Starting https server: 127.0.0.1:8443"); println!("Starting https server: 127.0.0.1:8443");
HttpServer::new(|| { HttpServer::new(|| {
@ -43,7 +53,7 @@ async fn main() -> std::io::Result<()> {
// with path parameters // with path parameters
.service(web::resource("/").route(web::get().to(|| { .service(web::resource("/").route(web::get().to(|| {
HttpResponse::Found() HttpResponse::Found()
.header("LOCATION", "/index.html") .append_header(("LOCATION", "/index.html"))
.finish() .finish()
}))) })))
.service(Files::new("/static", "static")) .service(Files::new("/static", "static"))