1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
|
package autocert
import (
"context"
"sync"
"code.crute.us/mcrute/golib/clients/dns"
glautocert "code.crute.us/mcrute/golib/crypto/acme/autocert"
"code.crute.us/mcrute/golib/log"
"code.crute.us/mcrute/golib/service"
"golang.org/x/crypto/acme/autocert"
)
type AutocertConfig struct {
ApiKey string
Hosts []string
Email string
CertHost string
}
type AutocertWrapper struct {
*autocert.Manager
hl *glautocert.ACMEHostList
pr chan string
}
func MustNewAutocertWrapper(ctx context.Context, c AutocertConfig) *AutocertWrapper {
w, err := NewAutocertWrapper(ctx, c)
if err != nil {
panic(err)
}
return w
}
func NewAutocertWrapper(ctx context.Context, c AutocertConfig) (*AutocertWrapper, error) {
hl := glautocert.NewACMEHostList(c.Hosts...)
return &AutocertWrapper{
hl: hl,
pr: make(chan string, 10),
Manager: &autocert.Manager{
Cache: autocert.DirCache("ssl/"),
Prompt: autocert.AcceptTOS,
HostPolicy: hl.HostPolicy,
Email: c.Email,
StapleOCSP: true,
DNSManager: &dns.AcmeDNSServiceClient{
URL: c.CertHost,
ApiKey: c.ApiKey,
},
},
}, nil
}
func (w *AutocertWrapper) PrimeCache() error {
return w.hl.PrimeCache(w.Manager, w.pr)
}
func (w *AutocertWrapper) PrimingReporter(l log.LeveledLogger) service.RunnerFunc {
return func(c context.Context, wg *sync.WaitGroup) error {
wg.Add(1)
defer wg.Done()
select {
case m := <-w.pr:
l.Info(m)
case <-c.Done():
return nil
}
return nil
}
}
var _ glautocert.PrimingCertProvider = (*AutocertWrapper)(nil)
|
