Gecko [ www.corporacionhdm.com.pe ]

Name	Size	Permission	Date
httpauth	[ DIR ]	drwxr-xr-x	2024-03-03 22:48
httpservlet	[ DIR ]	drwxr-xr-x	2024-03-03 22:48
accesslog.rb	4.16 KB	-rw-r--r--	2011-06-23 07:22
cgi.rb	6.9 KB	-rw-r--r--	2010-11-08 20:59
compat.rb	912 B	-rw-r--r--	2011-05-17 20:29
config.rb	4.38 KB	-rw-r--r--	2010-09-11 06:21
cookie.rb	3.03 KB	-rw-r--r--	2011-06-20 06:48
htmlutils.rb	707 B	-rw-r--r--	2014-02-14 04:24
httpauth.rb	3.33 KB	-rw-r--r--	2011-05-10 23:37
httpproxy.rb	8.85 KB	-rw-r--r--	2011-05-10 00:13
httprequest.rb	12.67 KB	-rw-r--r--	2011-07-22 12:49
httpresponse.rb	9.5 KB	-rw-r--r--	2011-06-21 12:58
https.rb	1.61 KB	-rw-r--r--	2011-05-29 14:14
httpserver.rb	7.21 KB	-rw-r--r--	2011-05-10 00:13
httpservlet.rb	669 B	-rw-r--r--	2009-10-02 10:45
httpstatus.rb	4.95 KB	-rw-r--r--	2011-06-16 21:12
httputils.rb	10.28 KB	-rw-r--r--	2014-02-14 04:24
httpversion.rb	1.12 KB	-rw-r--r--	2011-05-09 19:22
log.rb	3.6 KB	-rw-r--r--	2011-06-16 21:12
server.rb	5.76 KB	-rw-r--r--	2011-05-10 00:13
ssl.rb	4.23 KB	-rw-r--r--	2010-07-30 23:26
utils.rb	6.23 KB	-rw-r--r--	2012-05-19 05:40
version.rb	353 B	-rw-r--r--	2011-05-09 19:22

Rename

#
# ssl.rb -- SSL/TLS enhancement for GenericServer
#
# Copyright (c) 2003 GOTOU Yuuzou All rights reserved.
#
# $Id: ssl.rb 28803 2010-07-30 23:26:53Z nahi $

require 'webrick'
require 'openssl'

module WEBrick
  module Config
    svrsoft = General[:ServerSoftware]
    osslv = ::OpenSSL::OPENSSL_VERSION.split[1]
    SSL = {
      :ServerSoftware       => "#{svrsoft} OpenSSL/#{osslv}",
      :SSLEnable            => false,
      :SSLCertificate       => nil,
      :SSLPrivateKey        => nil,
      :SSLClientCA          => nil,
      :SSLExtraChainCert    => nil,
      :SSLCACertificateFile => nil,
      :SSLCACertificatePath => nil,
      :SSLCertificateStore  => nil,
      :SSLVerifyClient      => ::OpenSSL::SSL::VERIFY_NONE,
      :SSLVerifyDepth       => nil,
      :SSLVerifyCallback    => nil,   # custom verification
      :SSLTimeout           => nil,
      :SSLOptions           => nil,
      :SSLStartImmediately  => true,
      # Must specify if you use auto generated certificate.
      :SSLCertName          => nil,
      :SSLCertComment       => "Generated by Ruby/OpenSSL"
    }
    General.update(SSL)
  end

module Utils
    def create_self_signed_cert(bits, cn, comment)
      rsa = OpenSSL::PKey::RSA.new(bits){|p, n|
        case p
        when 0; $stderr.putc "."  # BN_generate_prime
        when 1; $stderr.putc "+"  # BN_generate_prime
        when 2; $stderr.putc "*"  # searching good prime,
                                  # n = #of try,
                                  # but also data from BN_generate_prime
        when 3; $stderr.putc "\n" # found good prime, n==0 - p, n==1 - q,
                                  # but also data from BN_generate_prime
        else;   $stderr.putc "*"  # BN_generate_prime
        end
      }
      cert = OpenSSL::X509::Certificate.new
      cert.version = 2
      cert.serial = 1
      name = OpenSSL::X509::Name.new(cn)
      cert.subject = name
      cert.issuer = name
      cert.not_before = Time.now
      cert.not_after = Time.now + (365*24*60*60)
      cert.public_key = rsa.public_key

ef = OpenSSL::X509::ExtensionFactory.new(nil,cert)
      ef.issuer_certificate = cert
      cert.extensions = [
        ef.create_extension("basicConstraints","CA:FALSE"),
        ef.create_extension("keyUsage", "keyEncipherment"),
        ef.create_extension("subjectKeyIdentifier", "hash"),
        ef.create_extension("extendedKeyUsage", "serverAuth"),
        ef.create_extension("nsComment", comment),
      ]
      aki = ef.create_extension("authorityKeyIdentifier",
                                "keyid:always,issuer:always")
      cert.add_extension(aki)
      cert.sign(rsa, OpenSSL::Digest::SHA1.new)

return [ cert, rsa ]
    end
    module_function :create_self_signed_cert
  end

class GenericServer
    def ssl_context
      @ssl_context ||= nil
    end

undef listen
    def listen(address, port)
      listeners = Utils::create_listeners(address, port, @logger)
      if @config[:SSLEnable]
        unless ssl_context
          @ssl_context = setup_ssl_context(@config)
          @logger.info("\n" + @config[:SSLCertificate].to_text)
        end
        listeners.collect!{|svr|
          ssvr = ::OpenSSL::SSL::SSLServer.new(svr, ssl_context)
          ssvr.start_immediately = @config[:SSLStartImmediately]
          ssvr
        }
      end
      @listeners += listeners
    end

def setup_ssl_context(config)
      unless config[:SSLCertificate]
        cn = config[:SSLCertName]
        comment = config[:SSLCertComment]
        cert, key = Utils::create_self_signed_cert(1024, cn, comment)
        config[:SSLCertificate] = cert
        config[:SSLPrivateKey] = key
      end
      ctx = OpenSSL::SSL::SSLContext.new
      ctx.key = config[:SSLPrivateKey]
      ctx.cert = config[:SSLCertificate]
      ctx.client_ca = config[:SSLClientCA]
      ctx.extra_chain_cert = config[:SSLExtraChainCert]
      ctx.ca_file = config[:SSLCACertificateFile]
      ctx.ca_path = config[:SSLCACertificatePath]
      ctx.cert_store = config[:SSLCertificateStore]
      ctx.verify_mode = config[:SSLVerifyClient]
      ctx.verify_depth = config[:SSLVerifyDepth]
      ctx.verify_callback = config[:SSLVerifyCallback]
      ctx.timeout = config[:SSLTimeout]
      ctx.options = config[:SSLOptions]
      ctx
    end
  end
end