mirror of https://github.com/caddyserver/caddy.git
80 lines
1.9 KiB
Go
80 lines
1.9 KiB
Go
|
package caddytls
|
||
|
|
|
||
|
|
import (
|
||
|
|
"crypto/tls"
|
||
|
|
|
||
|
|
"bitbucket.org/lightcodelabs/caddy2"
|
||
|
|
)
|
||
|
|
|
||
|
|
type (
|
||
|
|
MatchServerName []string
|
||
|
|
|
||
|
|
// TODO: these others should be enterprise-only, probably
|
||
|
|
MatchProtocol []string // TODO: version or protocol?
|
||
|
|
MatchClientCert struct{} // TODO: client certificate options
|
||
|
|
MatchRemote []string
|
||
|
|
MatchStarlark string
|
||
|
|
)
|
||
|
|
|
||
|
|
func init() {
|
||
|
|
caddy2.RegisterModule(caddy2.Module{
|
||
|
|
Name: "tls.handshake_match.host",
|
||
|
|
New: func() (interface{}, error) { return MatchServerName{}, nil },
|
||
|
|
})
|
||
|
|
caddy2.RegisterModule(caddy2.Module{
|
||
|
|
Name: "tls.handshake_match.protocol",
|
||
|
|
New: func() (interface{}, error) { return MatchProtocol{}, nil },
|
||
|
|
})
|
||
|
|
caddy2.RegisterModule(caddy2.Module{
|
||
|
|
Name: "tls.handshake_match.client_cert",
|
||
|
|
New: func() (interface{}, error) { return MatchClientCert{}, nil },
|
||
|
|
})
|
||
|
|
caddy2.RegisterModule(caddy2.Module{
|
||
|
|
Name: "tls.handshake_match.remote",
|
||
|
|
New: func() (interface{}, error) { return MatchRemote{}, nil },
|
||
|
|
})
|
||
|
|
caddy2.RegisterModule(caddy2.Module{
|
||
|
|
Name: "tls.handshake_match.starlark",
|
||
|
|
New: func() (interface{}, error) { return new(MatchStarlark), nil },
|
||
|
|
})
|
||
|
|
}
|
||
|
|
|
||
|
|
func (m MatchServerName) Match(hello *tls.ClientHelloInfo) bool {
|
||
|
|
for _, name := range m {
|
||
|
|
// TODO: support wildcards (and regex?)
|
||
|
|
if hello.ServerName == name {
|
||
|
|
return true
|
||
|
|
}
|
||
|
|
}
|
||
|
|
return false
|
||
|
|
}
|
||
|
|
|
||
|
|
func (m MatchProtocol) Match(hello *tls.ClientHelloInfo) bool {
|
||
|
|
// TODO: not implemented
|
||
|
|
return false
|
||
|
|
}
|
||
|
|
|
||
|
|
func (m MatchClientCert) Match(hello *tls.ClientHelloInfo) bool {
|
||
|
|
// TODO: not implemented
|
||
|
|
return false
|
||
|
|
}
|
||
|
|
|
||
|
|
func (m MatchRemote) Match(hello *tls.ClientHelloInfo) bool {
|
||
|
|
// TODO: not implemented
|
||
|
|
return false
|
||
|
|
}
|
||
|
|
|
||
|
|
func (m MatchStarlark) Match(hello *tls.ClientHelloInfo) bool {
|
||
|
|
// TODO: not implemented
|
||
|
|
return false
|
||
|
|
}
|
||
|
|
|
||
|
|
// Interface guards
|
||
|
|
var (
|
||
|
|
_ ConnectionMatcher = MatchServerName{}
|
||
|
|
_ ConnectionMatcher = MatchProtocol{}
|
||
|
|
_ ConnectionMatcher = MatchClientCert{}
|
||
|
|
_ ConnectionMatcher = MatchRemote{}
|
||
|
|
_ ConnectionMatcher = new(MatchStarlark)
|
||
|
|
)
|