Merge pull request #804 from meejah/tls-example

make pubsub TLS example work properly out-of-the-box

examples/router/.crossbar/config.json

@@ -147,6 +147,17 @@
                             }
                         }
                     }
+                },
+                {
+                    "type": "websocket",
+                    "endpoint": {
+                        "type": "tcp",
+                        "port": 8083,
+                        "tls": {
+                            "key": "server.key",
+                            "certificate": "server.crt"
+                        }
+                    }
                 }
             ]
         }

examples/router/.crossbar/server.crt

@@ -0,0 +1,22 @@
+-----BEGIN CERTIFICATE-----
+MIIDlTCCAn2gAwIBAgIJAKkagqXmV6JSMA0GCSqGSIb3DQEBCwUAMGExCzAJBgNV
+BAYTAkRFMRAwDgYDVQQIDAdCYXZhcmlhMREwDwYDVQQHDAhFcmxhbmdlbjEZMBcG
+A1UECgwQQ3Jvc3NiYXIuaW8gR21iSDESMBAGA1UEAwwJbG9jYWxob3N0MB4XDTE3
+MDMzMTAzMzY1MloXDTE3MDQzMDAzMzY1MlowYTELMAkGA1UEBhMCREUxEDAOBgNV
+BAgMB0JhdmFyaWExETAPBgNVBAcMCEVybGFuZ2VuMRkwFwYDVQQKDBBDcm9zc2Jh
+ci5pbyBHbWJIMRIwEAYDVQQDDAlsb2NhbGhvc3QwggEiMA0GCSqGSIb3DQEBAQUA
+A4IBDwAwggEKAoIBAQDfJWhr4HYhTLpm7ihDjaThKWt4Qs7uXjmexzY4Ke54ns52
+W6viMVILZ8YHpWoJdmBuXycR3Rutw2TazNcuZKMlxWD2k7OCoJm44Z8MOqe2er1J
+uZ8xVFr/Y/sAiyBgyZ/NRy/FIYcggjQywqmQ8OSzfYwUYFo7NYm5DqbQFLJYnxqA
+p8tf2jEJURc1OIHDf2OvOxsb9OnqkhcyjVzpqfDX6cx904k5o9QP35I2yYmIsgen
+cK6IYaUF3nl02xU8aTQefINIPYa+bPUWBzZNc5OBdOk4P601hesfz8X/UVakdmSW
+HU3jbOA+yzAMeTpHvylyw7KIGGAf9Cv15wyAYpRlAgMBAAGjUDBOMB0GA1UdDgQW
+BBQSt25uCominXIeBbBg+TxYGCSvwDAfBgNVHSMEGDAWgBQSt25uCominXIeBbBg
++TxYGCSvwDAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBCwUAA4IBAQBTUUSgsYUc
+bt2ZObrifsOiXbu2oD5/yjVqAhxmG/EHAcW7g7zMQ9CJQiId9DS3IKWSwwsIL694
+4qoAi29jPYGtanIlqY9aniGdj2Pspw7DkavQx8Nzx7T72daWdJKnmon9SN0wHczK
+ZAbIn3LDqNbq/TCSV19zfq7fvFRsoMwp17icWZn4D5QijCsGqh+oAs3LNJoS63rJ
+YvoC2kVDXizSkK+Z6Glut6WyywuFwsC/wLsVi0kAFNVd34MMKt2qAI9a8geefzHu
+grGkWckNC6yoo0D81xEJGaIS8fUQW4DBOXk1T1xeu2NkNBFR+FGPYZhcd+ybk6hn
+RafuEU5hCde/
+-----END CERTIFICATE-----

examples/router/.crossbar/server.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

examples/twisted/wamp/pubsub/tls/backend_selfsigned.py

@@ -27,6 +27,7 @@
 from __future__ import print_function
 
 from os import environ
+from os.path import join, split
 import six
 
 from autobahn.twisted.util import sleep
@@ -55,9 +56,11 @@ def onJoin(self, details):
 
 if __name__ == '__main__':
     # load the self-signed cert the server is using
+    examples_dir = join(split(__file__)[0], '..', '..', '..', '..')
+    cert_fname = join(examples_dir, 'router', '.crossbar', 'server.crt')
     cert = crypto.load_certificate(
         crypto.FILETYPE_PEM,
-        six.u(open('./server.crt', 'r').read())
+        six.u(open(cert_fname, 'r').read())
     )
     # tell Twisted to use just the one certificate we loaded to verify connections
     options = CertificateOptions(