🍁 A very simple static Gemini server, now with Titan support!
cpp
gemini
titan
gemini-protocol
titan-protocol
refactor(maple): move ssl work to function
+71
-60
+70
-60
maple/maple.cc
+70
-60
maple/maple.cc
···
33
33
#include "titan.hh"
34
34
35
35
auto main() -> int {
36
-
sockaddr_in socket_address {};
37
36
std::vector<std::string> gemini_files;
38
37
bool titan = false;
39
38
std::string titan_token;
···
43
42
maple::setup_environment(titan, titan_token, titan_max_size);
44
43
45
44
// Try a graceful shutdown when a SIGINT is detected
46
-
signal(SIGINT, [](int signal_) -> void {
47
-
std::cout << "shutdown(" << signal_ << ")" << std::endl;
45
+
signal(SIGINT, [](int _signal) -> void {
46
+
std::cout << "shutdown(" << _signal << ")" << std::endl;
48
47
49
48
close(maple::maple_socket);
50
49
SSL_CTX_free(maple::ssl_context);
···
77
76
std::cout << "serving " << file << std::endl;
78
77
}
79
78
80
-
// Setup OpenSSL
81
-
SSL_library_init();
82
-
SSL_load_error_strings();
83
-
84
-
maple::ssl_context = SSL_CTX_new(TLS_server_method());
85
-
if (!maple::ssl_context) {
86
-
maple::exit_with("unable to create ssl context", true);
87
-
}
88
-
89
-
if (SSL_CTX_use_certificate_file(
90
-
maple::ssl_context,
91
-
".maple/public.pem",
92
-
SSL_FILETYPE_PEM
93
-
) <= 0) {
94
-
maple::exit_with("unable to use certificate file", true);
95
-
}
96
-
if (SSL_CTX_use_PrivateKey_file(
97
-
maple::ssl_context,
98
-
".maple/private.pem",
99
-
SSL_FILETYPE_PEM
100
-
) <= 0) {
101
-
maple::exit_with("unable to use private key file", true);
102
-
}
103
-
104
-
socket_address.sin_family = AF_INET;
105
-
socket_address.sin_port = htons(1965);
106
-
socket_address.sin_addr.s_addr = htonl(INADDR_ANY);
107
-
108
-
maple::maple_socket = socket(AF_INET, SOCK_STREAM, 0);
109
-
110
-
if (maple::maple_socket < 0) {
111
-
maple::exit_with("unable to create socket", false);
112
-
}
113
-
114
-
// Reuse address. Allows the use of the address instantly after a SIGINT
115
-
// without having to wait for the socket to die.
116
-
int reuse_addr = 1;
117
-
if (setsockopt(
118
-
maple::maple_socket,
119
-
SOL_SOCKET,
120
-
SO_REUSEADDR,
121
-
&reuse_addr,
122
-
sizeof(int)
123
-
) < 0) {
124
-
maple::exit_with("unable to set socket options (SO_LINGER)", false);
125
-
}
126
-
127
-
if (bind(
128
-
maple::maple_socket,
129
-
reinterpret_cast<sockaddr *>(&socket_address),
130
-
sizeof(socket_address)
131
-
) < 0) {
132
-
maple::exit_with("unable to bind", false);
133
-
}
134
-
if (listen(maple::maple_socket, 1) < 0) {
135
-
maple::exit_with("unable to listen", false);
136
-
}
79
+
// Setup SSL
80
+
maple::setup_ssl();
137
81
138
82
// Listen and serve connections
139
83
for (;;) {
···
149
93
if (client < 0) { maple::exit_with("unable to accept", false); }
150
94
151
95
ssl = SSL_new(maple::ssl_context);
96
+
152
97
SSL_set_fd(ssl, client);
153
98
154
99
if (SSL_accept(ssl) <= 0) {
···
189
134
// Try to remove the host, if you cannot; it must be a trailing
190
135
// slash-less hostname, so we will respond with the index.
191
136
size_t found_first = path.find_first_of('/');
137
+
192
138
if (found_first != std::string::npos) {
193
139
path = path.substr(
194
140
found_first,
···
201
147
if (request_scheme == 1) {
202
148
// Remove junk, if any
203
149
index_of_junk = path.find_first_of('\n');
150
+
204
151
if (index_of_junk != std::string::npos) {
205
152
path.erase(
206
153
path.find_first_of('\n') - 1,
···
300
247
301
248
titan = true;
302
249
}
250
+
}
251
+
}
252
+
253
+
auto setup_ssl() -> void {
254
+
sockaddr_in socket_address {};
255
+
256
+
// Setup OpenSSL
257
+
SSL_library_init();
258
+
SSL_load_error_strings();
259
+
260
+
maple::ssl_context = SSL_CTX_new(TLS_server_method());
261
+
262
+
if (!maple::ssl_context) {
263
+
maple::exit_with("unable to create ssl context", true);
264
+
}
265
+
266
+
if (SSL_CTX_use_certificate_file(
267
+
maple::ssl_context,
268
+
".maple/public.pem",
269
+
SSL_FILETYPE_PEM
270
+
) <= 0) {
271
+
maple::exit_with("unable to use certificate file", true);
272
+
}
273
+
if (SSL_CTX_use_PrivateKey_file(
274
+
maple::ssl_context,
275
+
".maple/private.pem",
276
+
SSL_FILETYPE_PEM
277
+
) <= 0) {
278
+
maple::exit_with("unable to use private key file", true);
279
+
}
280
+
281
+
socket_address.sin_family = AF_INET;
282
+
socket_address.sin_port = htons(1965);
283
+
socket_address.sin_addr.s_addr = htonl(INADDR_ANY);
284
+
285
+
maple::maple_socket = socket(AF_INET, SOCK_STREAM, 0);
286
+
287
+
if (maple::maple_socket < 0) {
288
+
maple::exit_with("unable to create socket", false);
289
+
}
290
+
291
+
// Reuse address. Allows the use of the address instantly after a SIGINT
292
+
// without having to wait for the socket to die.
293
+
int reuse_addr = 1;
294
+
if (setsockopt(
295
+
maple::maple_socket,
296
+
SOL_SOCKET,
297
+
SO_REUSEADDR,
298
+
&reuse_addr,
299
+
sizeof(int)
300
+
) < 0) {
301
+
maple::exit_with("unable to set socket options (SO_LINGER)", false);
302
+
}
303
+
304
+
if (bind(
305
+
maple::maple_socket,
306
+
reinterpret_cast<sockaddr *>(&socket_address),
307
+
sizeof(socket_address)
308
+
) < 0) {
309
+
maple::exit_with("unable to bind", false);
310
+
}
311
+
if (listen(maple::maple_socket, 1) < 0) {
312
+
maple::exit_with("unable to listen", false);
303
313
}
304
314
}
305
315
}