75 wiersze
2.8 KiB
JavaScript
75 wiersze
2.8 KiB
JavaScript
"use strict";
|
|
|
|
module.exports.init = function(sharedOpts) {
|
|
var worker = require("../worker").create({
|
|
debug: true,
|
|
|
|
// We want both to renew well before the expiration date
|
|
// and also to stagger the renewals, just a touch
|
|
// here we specify to renew between 10 and 15 days
|
|
renewWithin: sharedOpts.renewWithin,
|
|
renewBy: 10 * 24 * 60 * 60 * 1000, // optional
|
|
|
|
webrootPath: sharedOpts.webrootPath,
|
|
|
|
/*
|
|
challenge: {
|
|
get: function (ignored, domain, token, cb) {
|
|
cb(null, keyAuthorization);
|
|
}
|
|
}
|
|
, getChallenge: function (domain, token, cb) {
|
|
// the default behavior is to use le-challenge-fs
|
|
// TODO maybe provide a built-in option to pass a message to master to use its
|
|
// but you could overwrite that with a function to pass a message to master or,
|
|
// but if needed for performance, that can be overwritten here
|
|
cb(null, );
|
|
}
|
|
*/
|
|
|
|
// There are two approval processes:
|
|
// 1. emails are tied to private keys (accounts) which must agree to the tos url
|
|
// 2. domains are tied to accounts (and should be verifiable via loopback)
|
|
approveDomains: function(workerOptions, certs, cb) {
|
|
// opts = { domains, email, agreeTos, tosUrl }
|
|
// certs = { subject, altnames, expiresAt, issuedAt }
|
|
var results = {
|
|
domain: workerOptions.domains[0],
|
|
options: {
|
|
domains: (certs && certs.altnames) || workerOptions.domains,
|
|
email: "john.doe@example.com",
|
|
agreeTos: true
|
|
},
|
|
certs: certs
|
|
};
|
|
|
|
// We might want to do a check to make sure that all of the domains
|
|
// specified in altnames are still approved to be renewed and have
|
|
// the correct dns entries, but generally speaking it's probably okay
|
|
// for renewals to be automatic
|
|
if (certs) {
|
|
// modify opts.domains to overwrite certs.altnames in renewal
|
|
cb(null, results);
|
|
return;
|
|
}
|
|
|
|
// This is where we would check our database to make sure that
|
|
// this user (specified by email address) has agreed to the terms
|
|
// and do some check that they have access to this domain
|
|
cb(null, results);
|
|
}
|
|
});
|
|
|
|
function app(req, res) {
|
|
res.end("Hello, World!");
|
|
}
|
|
|
|
// worker.handleAcmeOrRedirectToHttps()
|
|
// worker.handleAcmeOrUse(app)
|
|
var redirectHttps = require("redirect-https")();
|
|
var plainServer = require("http").createServer(worker.middleware(redirectHttps));
|
|
var server = require("https").createServer(worker.httpsOptions, worker.middleware(app));
|
|
plainServer.listen(80);
|
|
server.listen(443);
|
|
};
|