/
stapled.go
73 lines (65 loc) · 1.66 KB
/
stapled.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
package main
import (
"fmt"
"net/http"
"time"
"github.com/jmhodges/clock"
"github.com/rolandshoemaker/stapled/log"
"github.com/rolandshoemaker/stapled/mcache"
)
type stapled struct {
log *log.Logger
clk clock.Clock
c *mcache.EntryCache
responder *http.Server
certFolderWatcher *dirWatcher
client *http.Client
entryMonitorTick time.Duration
upstreamResponders []string
}
func New(c *mcache.EntryCache, logger *log.Logger, clk clock.Clock, httpAddr string, responders []string, certFolder string) (*stapled, error) {
s := &stapled{
log: logger,
clk: clk,
c: c,
upstreamResponders: responders,
certFolderWatcher: newDirWatcher(certFolder),
}
s.initResponder(httpAddr, logger)
return s, nil
}
// this should probably live on cache
func (s *stapled) checkCertDirectory() {
added, removed, err := s.certFolderWatcher.check()
if err != nil {
// log
s.log.Err("Failed to poll certificate directory: %s", err)
return
}
for _, a := range added {
err = s.c.AddFromCertificate(a, nil, s.upstreamResponders)
if err != nil {
s.log.Err("Failed to add entry to cache for new certificate '%s': %s", a, err)
}
}
for _, r := range removed {
s.c.Remove(r)
}
}
func (s *stapled) watchCertDirectory() {
ticker := time.NewTicker(time.Second * 15)
for _ = range ticker.C {
s.checkCertDirectory()
}
}
func (s *stapled) Run() error {
if s.certFolderWatcher != nil {
s.checkCertDirectory()
go s.watchCertDirectory()
}
err := s.responder.ListenAndServe()
if err != nil {
return fmt.Errorf("HTTP server died: %s", err)
}
return nil
}