support ssl (amberframework#152)

kellytaylor · Aug 1, 2017 · ad1a9da · ad1a9da
1 parent 26fba1c
commit ad1a9da
Show file tree

Hide file tree

Showing 5 changed files with 114 additions and 1 deletion.
diff --git a/spec/amber/ssl/cert.pem b/spec/amber/ssl/cert.pem
@@ -0,0 +1,31 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/spec/amber/ssl/key.pem b/spec/amber/ssl/key.pem
@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----
diff --git a/spec/amber/ssl/ssl_spec.cr b/spec/amber/ssl/ssl_spec.cr
@@ -0,0 +1,10 @@
+require "../../../spec_helper"
+
+module Amber
+  describe SSL do
+    it "generates tls" do
+      tls = SSL.new(File.join(__DIR__, "key.pem"), File.join(__DIR__, "cert.pem")).generate_tls
+      tls.should be_a(OpenSSL::SSL::Context::Server)
+    end
+  end
+end
diff --git a/src/amber.cr b/src/amber.cr
@@ -43,6 +43,8 @@ module Amber
     property pubsub_adapter : WebSockets::Adapters::RedisAdapter.class | WebSockets::Adapters::MemoryAdapter.class
     property redis_url : String
     property session : Hash(Symbol, Symbol | Int32 | String)
+    property ssl_key_file : String?
+    property ssl_cert_file : String?
 
     def initialize
       @app_path = __FILE__
@@ -89,14 +91,17 @@ module Amber
 
     def start
       time = Time.now
-      str_host = "http://#{host}:#{port}".colorize(:light_cyan).underline
+      ssl_enabled = ssl_key_file && ssl_cert_file
+      scheme = ssl_enabled ? "https" : "http"
+      str_host = "#{scheme}://#{host}:#{port}".colorize(:light_cyan).underline
       version = "[Amber #{Amber::VERSION}]".colorize(:light_cyan).to_s
       log.info "#{version} serving application \"#{name}\" at #{str_host}".to_s
 
       # prepare pipelines for processing and memoize them to gain a little performance
       handler.prepare_pipelines
 
       server = HTTP::Server.new(host, port, handler)
+      server.tls = Amber::SSL.new(ssl_key_file.not_nil!, ssl_cert_file.not_nil!).generate_tls if ssl_enabled
 
       Signal::INT.trap do
         puts "Shutting down Amber"

diff --git a/src/amber/ssl.cr b/src/amber/ssl.cr
@@ -0,0 +1,15 @@
+require "openssl"
+
+module Amber
+  class SSL
+    def initialize(@key_file : String, @cert_file : String)
+    end
+
+    def generate_tls
+      tls = OpenSSL::SSL::Context::Server.new
+      tls.private_key = @key_file
+      tls.certificate_chain = @cert_file
+      tls
+    end
+  end
+end