← Back to branch summary

~ubuntu-branches/ubuntu/hardy/ruby1.8/hardy-updates

« back to all changes in this revision

Viewing changes to sample/openssl/echo_svr.rb

  • Committer: Bazaar Package Importer
  • Author(s): akira yamada
  • Date: 2007-03-13 22:11:58 UTC
  • mfrom: (1.1.5 upstream)
  • Revision ID: james.westby@ubuntu.com-20070313221158-h3oql37brlaf2go2
Tags: 1.8.6-1
http://bugs.debian.org/410018
* new upstream version, 1.8.6.
* libruby1.8 conflicts with libopenssl-ruby1.8 (< 1.8.6) (closes: #410018)
* changed packaging style to cdbs from dbs.

Show diffs side-by-side

added added

removed removed

Lines of Context:
sample/openssl/echo_svr.rb
 
1
#!/usr/bin/env ruby
 
2
 
 
3
require 'socket'
 
4
require 'openssl'
 
5
require 'getopts'
 
6
 
 
7
getopts nil, "p:2000", "c:", "k:", "C:"
 
8
 
 
9
port      = $OPT_p
 
10
cert_file = $OPT_c
 
11
key_file  = $OPT_k
 
12
ca_path   = $OPT_C
 
13
 
 
14
if cert_file && key_file
 
15
  cert = OpenSSL::X509::Certificate.new(File::read(cert_file))
 
16
  key  = OpenSSL::PKey::RSA.new(File::read(key_file))
 
17
else
 
18
  key = OpenSSL::PKey::RSA.new(512){ print "." }
 
19
  puts
 
20
  cert = OpenSSL::X509::Certificate.new
 
21
  cert.version = 2
 
22
  cert.serial = 0
 
23
  name = OpenSSL::X509::Name.new([["C","JP"],["O","TEST"],["CN","localhost"]])
 
24
  cert.subject = name
 
25
  cert.issuer = name
 
26
  cert.not_before = Time.now
 
27
  cert.not_after = Time.now + 3600
 
28
  cert.public_key = key.public_key
 
29
  ef = OpenSSL::X509::ExtensionFactory.new(nil,cert)
 
30
  cert.extensions = [
 
31
    ef.create_extension("basicConstraints","CA:FALSE"),
 
32
    ef.create_extension("subjectKeyIdentifier","hash"),
 
33
    ef.create_extension("extendedKeyUsage","serverAuth"),
 
34
    ef.create_extension("keyUsage",
 
35
                        "keyEncipherment,dataEncipherment,digitalSignature")
 
36
  ]
 
37
  ef.issuer_certificate = cert
 
38
  cert.add_extension ef.create_extension("authorityKeyIdentifier",
 
39
                                         "keyid:always,issuer:always")
 
40
  cert.sign(key, OpenSSL::Digest::SHA1.new)
 
41
end
 
42
 
 
43
ctx = OpenSSL::SSL::SSLContext.new()
 
44
ctx.key = key
 
45
ctx.cert = cert
 
46
if ca_path
 
47
  ctx.verify_mode =
 
48
    OpenSSL::SSL::VERIFY_PEER|OpenSSL::SSL::VERIFY_FAIL_IF_NO_PEER_CERT
 
49
  ctx.ca_path = ca_path
 
50
else
 
51
  $stderr.puts "!!! WARNING: PEER CERTIFICATE WON'T BE VERIFIED !!!"
 
52
end
 
53
 
 
54
tcps = TCPServer.new(port)
 
55
ssls = OpenSSL::SSL::SSLServer.new(tcps, ctx)
 
56
loop do
 
57
  ns = ssls.accept
 
58
  while line = ns.gets
 
59
    ns.write line
 
60
  end
 
61
  ns.close
 
62
end