SSL support pushed out to unicorn.git :x

Eric Wong normalperson at yhbt.net
Thu Sep 15 18:46:09 EDT 2011


Consider this a joke until somebody who knows crypto well can review it
(_and_ kgio-monkey[1]).  I know it works with curl (test case included)
and I can't see plain-text when I strace/tcpdump, that's about it :)

Subject: [PATCH] add preliminary SSL support

This will also be the foundation of SSL support in Rainbows!
and Zbatery.  Some users may also want to use this in
Unicorn on LANs to meet certain security/auditing requirements.
Of course, Nightmare! (in whatever form) should also be able to
use it.
---
  The patch is a big, so you can view it here
  http://bogomips.org/unicorn.git/patch?id=ac346b5abc

  [1] - http://bogomips.org/kgio-monkey/
        git clone git://bogomips.org/kgio-monkey.git

  This is absolutely NOT intended to be an endorsement of the current
  certificate authority system.  Don't support or encourage it.

 lib/unicorn/configurator.rb     |   13 +++--
 lib/unicorn/http_server.rb      |    3 +
 lib/unicorn/ssl_client.rb       |    6 ++
 lib/unicorn/ssl_configurator.rb |  104 +++++++++++++++++++++++++++++++++++++++
 lib/unicorn/ssl_server.rb       |   42 ++++++++++++++++
 script/isolate_for_tests        |    1 +
 t/.gitignore                    |    2 +
 t/sslgen.sh                     |   63 +++++++++++++++++++++++
 t/t0600-https-server-basic.sh   |   48 ++++++++++++++++++
 test/unit/test_sni_hostnames.rb |   47 +++++++++++++++++
 10 files changed, 325 insertions(+), 4 deletions(-)
 create mode 100644 lib/unicorn/ssl_client.rb
 create mode 100644 lib/unicorn/ssl_configurator.rb
 create mode 100644 lib/unicorn/ssl_server.rb
 create mode 100755 t/sslgen.sh
 create mode 100755 t/t0600-https-server-basic.sh
 create mode 100644 test/unit/test_sni_hostnames.rb

-- 
Eric Wong


More information about the mongrel-unicorn mailing list