mirror of
https://github.com/facebook/sapling.git
synced 2024-10-11 17:27:53 +03:00
33b8a6aa62
Summary: Avoid using plain HTTP and use HTTPS instead. To do this config needs to provide paths to server certificate and private key files in PEM format. Then they will be converted to Pkcs12 archive. This diff adds authentication of server i.e. client can check that it talks to a real server. Next diff adds authentication of a client. Lower-level `hyper::server::Http::bind_connection()` is used instead of `hyper::server::Http::bind()` method in order to add TLS support. See code comments for more details. Implementation is more complicated than I expected it to be. I need to use 3 more new crates. Lmk if there is a better way to do this. Reviewed By: jsgf Differential Revision: D6323440 fbshipit-source-id: 544f27e6ec210ddf840212b0c0c94145980e8be3
22 lines
1.2 KiB
Plaintext
22 lines
1.2 KiB
Plaintext
-----BEGIN CERTIFICATE-----
|
|
MIIDfzCCAmegAwIBAgIJAJ9JCSIKw+gmMA0GCSqGSIb3DQEBCwUAMFYxCzAJBgNV
|
|
BAYTAnVrMRUwEwYDVQQHDAxEZWZhdWx0IENpdHkxHDAaBgNVBAoME0RlZmF1bHQg
|
|
Q29tcGFueSBMdGQxEjAQBgNVBAMMCWxvY2FsaG9zdDAeFw0xNzExMTQyMTIzMjRa
|
|
Fw0xODExMTQyMTIzMjRaMFYxCzAJBgNVBAYTAnVrMRUwEwYDVQQHDAxEZWZhdWx0
|
|
IENpdHkxHDAaBgNVBAoME0RlZmF1bHQgQ29tcGFueSBMdGQxEjAQBgNVBAMMCWxv
|
|
Y2FsaG9zdDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALg4esLQCvsM
|
|
Dl7Oqjll5YtPLFbhkk0Xuq3+mv/zBfNMKUG6oeTRYsxVFzNCEypnxjgKL3P+AwkF
|
|
1Qi+BqApWapwdF7zfenPgtHSB3KmM485iEq2O8Z1mnQkpEYAXeRrOi/PmJuJvOuW
|
|
VtailcLcCZxVxclCxJuzRGGrYfr6/gnrk5dlWNa18RNkOAmxwmSK4/HqGkN/sgrD
|
|
L5gm/R05duhQtv9o6BCNqrrnQanpDc4EJEhFsoulW30Z/KyGT3eYoG6bTYZckhoN
|
|
tFrxWczv9KmtLFAnWknW4+bmKLJ4jXm/sTmngoXBnAJAlK/V8hln6HbJXawWNDXk
|
|
HwJZZ8myua8CAwEAAaNQME4wHQYDVR0OBBYEFJnLi3c8ekawXg4Rj80bfqhCovz6
|
|
MB8GA1UdIwQYMBaAFJnLi3c8ekawXg4Rj80bfqhCovz6MAwGA1UdEwQFMAMBAf8w
|
|
DQYJKoZIhvcNAQELBQADggEBACGh4DBS0SabKNNCwLrE9fNrHpngKw46YUaprTo0
|
|
l7w2+jbQ0EvcmW48pwSHhRaM3ZZb5dml31OvU28XnlGxSgJ+JBvIZ39qAeHw1eYR
|
|
AB6PHy+mtHsl+NOIadBc8AIgmG1D5LZ8TktqKAcqRf5cWi1QAyaBFlQO9C9IMfpS
|
|
qaaGKfLxdC6a4Tg4+Vq/DFmYW9mK9QFyJy2VejkrzNp7XltGqeoAhNtfFvUfKPci
|
|
xSUIHrPNK6V+gmFDpHc2E+5MgvHMIDbw7Ic4YK1//9BuHMOv7/9miVXztFD3UEkx
|
|
RXEu+AreAEGBOf5f2rizkzKNAeh7QfItcv/YFLYOfi4Y1jU=
|
|
-----END CERTIFICATE-----
|