ntex-tls 4.0.0

An implementation of SSL streams for ntex backed by OpenSSL
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57

use std::io;

use log::info;
use ntex::http::{HttpService, HttpServiceConfig, Response, header::HeaderValue};
use ntex::{SharedCfg, http, server, time::Seconds};
use tls_openssl::ssl::{self, SslFiletype, SslMethod};

#[ntex::main]
async fn main() -> io::Result<()> {
    let _ = env_logger::try_init();

    println!("Started openssl web server: 127.0.0.1:8443");

    // load ssl keys
    let mut builder = ssl::SslAcceptor::mozilla_intermediate(SslMethod::tls()).unwrap();
    builder
        .set_private_key_file("./examples/key.pem", SslFiletype::PEM)
        .unwrap();
    builder
        .set_certificate_chain_file("./examples/cert.pem")
        .unwrap();

    // h2 alpn config
    builder.set_alpn_select_callback(|_, protos| {
        const H2: &[u8] = b"\x02h2";
        if protos.windows(3).any(|window| window == H2) {
            Ok(b"h2")
        } else {
            Err(ssl::AlpnError::NOACK)
        }
    });
    builder.set_alpn_protos(b"\x02h2").unwrap();

    let acceptor = builder.build();

    // start server
    server::ServerBuilder::default()
        .bind(
            "basic",
            "127.0.0.1:8443",
            SharedCfg::new("EXAMPLE").add(HttpServiceConfig::new().set_client_timeout(Seconds(1))),
            async move |_| {
                http::openssl(
                    acceptor.clone(),
                    HttpService::new(async |req| {
                        info!("{:?}", req);
                        let mut res = Response::Ok();
                        res.header("x-head", HeaderValue::from_static("dummy value!"));
                        Ok::<_, io::Error>(res.body("Hello world!"))
                    }),
                )
            },
        )?
        .workers(1)
        .run()
        .await
}