bjorn-acme 0.3.0

Building blocks for an ACME server
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57

#![allow(incomplete_features)]
#![feature(decl_macro)]
#![feature(unsized_locals)]

#[macro_use]
extern crate rocket;
#[macro_use]
extern crate serde_derive;

#[derive(Deserialize)]
struct OCSPIssuerConfig {
    issuer_cert_file: String,
    signer_pkcs12_file: String,
    grpc_uri: String,
    cert_id: String,
}

#[launch]
fn rocket() -> _ {
    pretty_env_logger::init();

    rocket::build()
        .attach(rocket::fairing::AdHoc::try_on_ignite("OCSP Issuer Config", |rocket| async move {
            let issuers_conf = rocket.figment()
                .extract_inner::<Vec<OCSPIssuerConfig>>("ocsp_issuers")
                .expect("'ocsp_issuers' not configured");

            let issuers = issuers_conf.into_iter()
                .map(move |issuer| {
                    let issuer_cert = openssl::x509::X509::from_pem(
                        &std::fs::read(issuer.issuer_cert_file).expect("Unable to read issuer certificate")
                    ).expect("Unable to parse issuer certificate");
                    let signer = openssl::pkcs12::Pkcs12::from_der(
                        &std::fs::read(issuer.signer_pkcs12_file).expect("Unable to read signing keys")
                    ).expect("Unable to parse signing keys").parse2("").expect("Unable to parse signing keys");

                    let ocsp_client = bjorn::ocsp::processing::BlockingOCSPClient::connect(issuer.grpc_uri)
                        .expect("Unable to connect to upstream CA");

                    bjorn::ocsp::OCSPIssuer::new(
                        issuer_cert,
                        signer,
                        ocsp_client,
                        issuer.cert_id,
                    )
                })
                .collect::<Vec<_>>();

            Ok(rocket.manage(bjorn::ocsp::OCSPIssuers::new(issuers)))
        }))
        .mount("/", routes![
            bjorn::ocsp::index,
            bjorn::ocsp::ocsp_head,
            bjorn::ocsp::ocsp_get,
            bjorn::ocsp::ocsp_post,
        ])
}