110 lines
3.9 KiB
Go
110 lines
3.9 KiB
Go
// Copyright 2014 ISRG. All rights reserved
|
|
// This Source Code Form is subject to the terms of the Mozilla Public
|
|
// License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
// file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
|
|
package main
|
|
|
|
import (
|
|
"fmt"
|
|
"net/http"
|
|
"time"
|
|
|
|
"github.com/letsencrypt/boulder/Godeps/_workspace/src/github.com/cactus/go-statsd-client/statsd"
|
|
"github.com/letsencrypt/boulder/Godeps/_workspace/src/github.com/codegangsta/cli"
|
|
"github.com/letsencrypt/boulder/Godeps/_workspace/src/github.com/facebookgo/httpdown"
|
|
"github.com/letsencrypt/boulder/Godeps/_workspace/src/github.com/jmhodges/clock"
|
|
|
|
"github.com/letsencrypt/boulder/cmd"
|
|
blog "github.com/letsencrypt/boulder/log"
|
|
"github.com/letsencrypt/boulder/metrics"
|
|
"github.com/letsencrypt/boulder/rpc"
|
|
"github.com/letsencrypt/boulder/wfe"
|
|
)
|
|
|
|
const clientName = "WFE"
|
|
|
|
func setupWFE(c cmd.Config, logger *blog.AuditLogger, stats statsd.Statter) (*rpc.RegistrationAuthorityClient, *rpc.StorageAuthorityClient) {
|
|
amqpConf := c.WFE.AMQP
|
|
rac, err := rpc.NewRegistrationAuthorityClient(clientName, amqpConf, stats)
|
|
cmd.FailOnError(err, "Unable to create RA client")
|
|
|
|
sac, err := rpc.NewStorageAuthorityClient(clientName, amqpConf, stats)
|
|
cmd.FailOnError(err, "Unable to create SA client")
|
|
|
|
return rac, sac
|
|
}
|
|
|
|
func main() {
|
|
app := cmd.NewAppShell("boulder-wfe", "Handles HTTP API requests")
|
|
addrFlag := cli.StringFlag{
|
|
Name: "addr",
|
|
Value: "",
|
|
Usage: "if set, overrides the listenAddr setting in the WFE config",
|
|
EnvVar: "WFE_LISTEN_ADDR",
|
|
}
|
|
app.App.Flags = append(app.App.Flags, addrFlag)
|
|
app.Config = func(c *cli.Context, config cmd.Config) cmd.Config {
|
|
if c.GlobalString("addr") != "" {
|
|
config.WFE.ListenAddress = c.GlobalString("addr")
|
|
}
|
|
return config
|
|
}
|
|
app.Action = func(c cmd.Config, stats statsd.Statter, auditlogger *blog.AuditLogger) {
|
|
go cmd.DebugServer(c.WFE.DebugAddr)
|
|
|
|
wfe, err := wfe.NewWebFrontEndImpl(stats, clock.Default(), c.KeyPolicy())
|
|
cmd.FailOnError(err, "Unable to create WFE")
|
|
rac, sac := setupWFE(c, auditlogger, stats)
|
|
wfe.RA = rac
|
|
wfe.SA = sac
|
|
wfe.SubscriberAgreementURL = c.SubscriberAgreementURL
|
|
|
|
wfe.AllowOrigins = c.WFE.AllowOrigins
|
|
|
|
wfe.CertCacheDuration, err = time.ParseDuration(c.WFE.CertCacheDuration)
|
|
cmd.FailOnError(err, "Couldn't parse certificate caching duration")
|
|
wfe.CertNoCacheExpirationWindow, err = time.ParseDuration(c.WFE.CertNoCacheExpirationWindow)
|
|
cmd.FailOnError(err, "Couldn't parse certificate expiration no-cache window")
|
|
wfe.IndexCacheDuration, err = time.ParseDuration(c.WFE.IndexCacheDuration)
|
|
cmd.FailOnError(err, "Couldn't parse index caching duration")
|
|
wfe.IssuerCacheDuration, err = time.ParseDuration(c.WFE.IssuerCacheDuration)
|
|
cmd.FailOnError(err, "Couldn't parse issuer caching duration")
|
|
|
|
wfe.ShutdownStopTimeout, err = time.ParseDuration(c.WFE.ShutdownStopTimeout)
|
|
cmd.FailOnError(err, "Couldn't parse shutdown stop timeout")
|
|
wfe.ShutdownKillTimeout, err = time.ParseDuration(c.WFE.ShutdownKillTimeout)
|
|
cmd.FailOnError(err, "Couldn't parse shutdown kill timeout")
|
|
|
|
wfe.IssuerCert, err = cmd.LoadCert(c.Common.IssuerCert)
|
|
cmd.FailOnError(err, fmt.Sprintf("Couldn't read issuer cert [%s]", c.Common.IssuerCert))
|
|
|
|
auditlogger.Info(fmt.Sprintf("WFE using key policy: %#v", c.KeyPolicy()))
|
|
|
|
go cmd.ProfileCmd("WFE", stats)
|
|
|
|
// Set up paths
|
|
wfe.BaseURL = c.Common.BaseURL
|
|
h, err := wfe.Handler()
|
|
cmd.FailOnError(err, "Problem setting up HTTP handlers")
|
|
|
|
httpMonitor := metrics.NewHTTPMonitor(stats, h, "WFE")
|
|
|
|
auditlogger.Info(fmt.Sprintf("Server running, listening on %s...\n", c.WFE.ListenAddress))
|
|
srv := &http.Server{
|
|
Addr: c.WFE.ListenAddress,
|
|
Handler: httpMonitor.Handle(),
|
|
}
|
|
|
|
hd := &httpdown.HTTP{
|
|
StopTimeout: wfe.ShutdownStopTimeout,
|
|
KillTimeout: wfe.ShutdownKillTimeout,
|
|
Stats: metrics.NewFBAdapter(stats, "WFE", clock.Default()),
|
|
}
|
|
err = httpdown.ListenAndServe(srv, hd)
|
|
cmd.FailOnError(err, "Error starting HTTP server")
|
|
}
|
|
|
|
app.Run()
|
|
}
|