blob: 556c28b84c9f4732a62382e15be8768bc5ee56b5 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
|
require "socket"
require "thread"
require "openssl"
require File.join(File.dirname(__FILE__), "utils.rb")
def get_pem(io=$stdin)
buf = ""
while line = io.gets
if /^-----BEGIN / =~ line
buf << line
break
end
end
while line = io.gets
buf << line
if /^-----END / =~ line
break
end
end
return buf
end
def make_key(pem)
begin
return OpenSSL::PKey::RSA.new(pem)
rescue
return OpenSSL::PKey::DSA.new(pem)
end
end
ca_cert = OpenSSL::X509::Certificate.new(get_pem)
ssl_cert = OpenSSL::X509::Certificate.new(get_pem)
ssl_key = make_key(get_pem)
port = Integer(ARGV.shift)
verify_mode = Integer(ARGV.shift)
start_immediately = (/yes/ =~ ARGV.shift)
store = OpenSSL::X509::Store.new
store.add_cert(ca_cert)
store.purpose = OpenSSL::X509::PURPOSE_SSL_CLIENT
ctx = OpenSSL::SSL::SSLContext.new
ctx.cert_store = store
#ctx.extra_chain_cert = [ ca_cert ]
ctx.cert = ssl_cert
ctx.key = ssl_key
ctx.verify_mode = verify_mode
Socket.do_not_reverse_lookup = true
tcps = nil
100.times{|i|
begin
tcps = TCPServer.new("0.0.0.0", port+i)
port = port + i
break
rescue Errno::EADDRINUSE
next
end
}
ssls = OpenSSL::SSL::SSLServer.new(tcps, ctx)
ssls.start_immediately = start_immediately
$stdout.sync = true
$stdout.puts Process.pid
$stdout.puts port
loop do
Thread.start(ssls.accept) {|ssl|
q = Queue.new
th = Thread.start{ ssl.write(q.shift) while true }
while line = ssl.gets
if line =~ /^STARTTLS$/
ssl.accept
next
end
q.push(line)
end
th.kill if q.empty?
ssl.close
}
end
|
