mirror of
https://github.com/mickael-kerjean/filestash.git
synced 2025-11-02 20:23:32 +08:00
111 lines
2.6 KiB
Go
111 lines
2.6 KiB
Go
package plg_starter_http2
|
|
|
|
/*
|
|
* In golang, HTTP2 server are written in the same way as HTTPS server, the only difference beeing
|
|
* describe in the documentation: https://golang.org/src/net/http/doc.go#L81
|
|
* In our implementation, we use the 'TLSNextProto' trick
|
|
*/
|
|
|
|
import (
|
|
"crypto/tls"
|
|
"fmt"
|
|
"github.com/gorilla/mux"
|
|
. "github.com/mickael-kerjean/filestash/server/common"
|
|
"github.com/mickael-kerjean/filestash/server/common/ssl"
|
|
"golang.org/x/crypto/acme/autocert"
|
|
"net/http"
|
|
"path/filepath"
|
|
"time"
|
|
)
|
|
|
|
var SSL_PATH string = filepath.Join(GetCurrentDir(), CERT_PATH, "ssl")
|
|
|
|
func init() {
|
|
os.MkdirAll(SSL_PATH, os.ModePerm)
|
|
domain := Config.Get("general.host").String()
|
|
|
|
Hooks.Register.Starter(func (r *mux.Router) {
|
|
Log.Info("[https] starting ...%s", domain)
|
|
srv := &http.Server{
|
|
Addr: fmt.Sprintf(":https"),
|
|
Handler: r,
|
|
TLSConfig: &DefaultTLSConfig,
|
|
ErrorLog: NewNilLogger(),
|
|
}
|
|
|
|
switch domain {
|
|
case "":
|
|
TLSCert, roots, err := ssl.GenerateSelfSigned()
|
|
if err != nil {
|
|
return
|
|
}
|
|
srv.TLSConfig.Certificates = []tls.Certificate{ TLSCert }
|
|
HTTPClient.Transport.(*TransformedTransport).Orig.(*http.Transport).TLSClientConfig = &tls.Config{
|
|
RootCAs: roots,
|
|
}
|
|
HTTP.Transport.(*TransformedTransport).Orig.(*http.Transport).TLSClientConfig = &tls.Config{
|
|
RootCAs: roots,
|
|
}
|
|
default:
|
|
mngr := autocert.Manager{
|
|
Prompt: autocert.AcceptTOS,
|
|
HostPolicy: autocert.HostWhitelist(domain),
|
|
Cache: autocert.DirCache(SSL_PATH),
|
|
}
|
|
srv.TLSConfig.GetCertificate = mngr.GetCertificate
|
|
}
|
|
|
|
go func() {
|
|
if err := srv.ListenAndServeTLS("", ""); err != nil {
|
|
Log.Error("[https]: listen_serve %v", err)
|
|
return
|
|
}
|
|
}()
|
|
go func() {
|
|
srv := http.Server{
|
|
Addr: fmt.Sprintf(":http"),
|
|
ReadTimeout: 5 * time.Second,
|
|
WriteTimeout: 5 * time.Second,
|
|
Handler: http.HandlerFunc(func(w http.ResponseWriter, req *http.Request) {
|
|
w.Header().Set("Connection", "close")
|
|
http.Redirect(
|
|
w,
|
|
req,
|
|
"https://" + req.Host + req.URL.String(),
|
|
http.StatusMovedPermanently,
|
|
)
|
|
}),
|
|
}
|
|
if err := srv.ListenAndServe(); err != nil {
|
|
Log.Error("[https]: http_redirect %v", err)
|
|
return
|
|
}
|
|
}()
|
|
go ensureAppHasBooted("https://127.0.0.1/about", fmt.Sprintf("[https] started"))
|
|
})
|
|
}
|
|
|
|
|
|
func ensureAppHasBooted(address string, message string) {
|
|
i := 0
|
|
for {
|
|
if i > 10 {
|
|
Log.Warning("[https] no boot")
|
|
break
|
|
}
|
|
time.Sleep(250 * time.Millisecond)
|
|
res, err := HTTPClient.Get(address)
|
|
if err != nil {
|
|
i += 1
|
|
continue
|
|
}
|
|
res.Body.Close()
|
|
if res.StatusCode != http.StatusOK {
|
|
i += 1
|
|
continue
|
|
}
|
|
Log.Info(message)
|
|
break
|
|
}
|
|
}
|