rwf2
/
Rocket
mirror of https://github.com/rwf2/Rocket.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
Rocket/examples/tls/Rocket.toml

10 lines
439 B
TOML
Raw Normal View History

Update cert in 'tls' example for new 'rustls'. The latest version of `rustls` acts on the SNI extension to TLS without the apparent ability to disable the behavior. `rustls` requires that the server's certificate match the client's requested server. The matching is done by looking at DNS names in the `subjectAltName` extension and checking if the requested server name is present. Since the certificate in the `tls` example did not have the `subjectAltName` extension, this check always failed, and the TLS connection was aborted. This commit adds the extension to the certificate with a DNS name of `localhost`, ensuring that TLS succeeds on `localhost`.
2017-09-01 10:11:48 +00:00
# The certificate/private key pair used here was generated via openssl using the
# `gen_cert.sh` script located in the `private/` subdirectory.
Initial TLS support. This commit introduces TLS support, provided by `rustls` and a fork of `hyper-rustls`. TLS support is enabled via the `tls` feature and activated when the `tls` configuration parameter is set. A new `hello_tls` example illustrates its usage. This commit also introduces more robust and complete configuration settings via environment variables. In particular, quoted string, array, and table (dictionaries) based configuration parameters can now be set via environment variables. Resolves #28.
2017-04-13 07:18:31 +00:00
#
# The certificate is self-signed. As such, you will need to trust it directly
# for your browser to refer to the connection as secure. You should NEVER use
# this certificate/key pair. It is here for DEMONSTRATION PURPOSES ONLY.
[global.tls]
certs = "private/cert.pem"
key = "private/key.pem"