mirror of
https://github.com/opencloud-eu/opencloud.git
synced 2026-01-10 06:10:05 -06:00
b24d126b30
TLS for the services can be configure by setting the "OCIS_HTTP_TLS_ENABLED", "OCIS_HTTP_TLS_CERTIFICATE" and "OCIS_HTTP_TLS_KEY" environment variables. Currently the ocis proxy is this only service that directly accesses backend services. It determines whether to use TLS or not by looking a the new registry metadata "use_tls". As specific CA Cert for certificate verification can be set with the "PROXY_HTTPS_CACERT" environment variable.
63 lines
1.8 KiB
Go
63 lines
1.8 KiB
Go
package http
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
|
|
pkgcrypto "github.com/owncloud/ocis/v2/ocis-pkg/crypto"
|
|
"github.com/owncloud/ocis/v2/ocis-pkg/service/http"
|
|
svc "github.com/owncloud/ocis/v2/ocis-pkg/service/http"
|
|
"github.com/owncloud/ocis/v2/ocis-pkg/shared"
|
|
"github.com/owncloud/ocis/v2/ocis-pkg/version"
|
|
"go-micro.dev/v4"
|
|
)
|
|
|
|
// Server initializes the http service and server.
|
|
func Server(opts ...Option) (svc.Service, error) {
|
|
options := newOptions(opts...)
|
|
l := options.Logger
|
|
httpCfg := options.Config.HTTP
|
|
|
|
if options.Config.HTTP.TLS {
|
|
l.Warn().Msgf("No tls certificate provided, using a generated one")
|
|
_, certErr := os.Stat(httpCfg.TLSCert)
|
|
_, keyErr := os.Stat(httpCfg.TLSKey)
|
|
|
|
if os.IsNotExist(certErr) || os.IsNotExist(keyErr) {
|
|
// GenCert has side effects as it writes 2 files to the binary running location
|
|
if err := pkgcrypto.GenCert(httpCfg.TLSCert, httpCfg.TLSKey, l); err != nil {
|
|
l.Fatal().Err(err).Msgf("Could not generate test-certificate")
|
|
os.Exit(1)
|
|
}
|
|
}
|
|
}
|
|
chain := options.Middlewares.Then(options.Handler)
|
|
|
|
service, err := svc.NewService(
|
|
svc.Name(options.Config.Service.Name),
|
|
svc.Version(version.GetString()),
|
|
http.TLSConfig(shared.HTTPServiceTLS{
|
|
Enabled: options.Config.HTTP.TLS,
|
|
Cert: options.Config.HTTP.TLSCert,
|
|
Key: options.Config.HTTP.TLSKey,
|
|
}),
|
|
svc.Logger(options.Logger),
|
|
svc.Address(options.Config.HTTP.Addr),
|
|
svc.Namespace(options.Config.HTTP.Namespace),
|
|
svc.Context(options.Context),
|
|
svc.Flags(options.Flags...),
|
|
)
|
|
if err != nil {
|
|
options.Logger.Error().
|
|
Err(err).
|
|
Msg("Error initializing http service")
|
|
return http.Service{}, fmt.Errorf("could not initialize http service: %w", err)
|
|
}
|
|
|
|
if err := micro.RegisterHandler(service.Server(), chain); err != nil {
|
|
return svc.Service{}, err
|
|
}
|
|
|
|
return service, nil
|
|
}
|