|
|
@@ -0,0 +1,89 @@
|
|
|
+%%--------------------------------------------------------------------
|
|
|
+%% Copyright (c) 2021 EMQ Technologies Co., Ltd. All Rights Reserved.
|
|
|
+%%
|
|
|
+%% Licensed under the Apache License, Version 2.0 (the "License");
|
|
|
+%% you may not use this file except in compliance with the License.
|
|
|
+%% You may obtain a copy of the License at
|
|
|
+%%
|
|
|
+%% http://www.apache.org/licenses/LICENSE-2.0
|
|
|
+%%
|
|
|
+%% Unless required by applicable law or agreed to in writing, software
|
|
|
+%% distributed under the License is distributed on an "AS IS" BASIS,
|
|
|
+%% WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
|
+%% See the License for the specific language governing permissions and
|
|
|
+%% limitations under the License.
|
|
|
+%%--------------------------------------------------------------------
|
|
|
+
|
|
|
+-module(emqx_plugin_libs_ssl).
|
|
|
+
|
|
|
+-export([save_files_return_opts/2]).
|
|
|
+
|
|
|
+-type file_input_key() :: binary(). %% <<"file">> | <<"filename">>
|
|
|
+-type file_input() :: #{file_input_key() => binary()}.
|
|
|
+
|
|
|
+%% options are below paris
|
|
|
+%% <<"keyfile">> => file_input()
|
|
|
+%% <<"certfile">> => file_input()
|
|
|
+%% <<"cafile">> => file_input() %% backward compatible
|
|
|
+%% <<"cacertfile">> => file_input()
|
|
|
+%% <<"verify">> => boolean()
|
|
|
+%% <<"tls_versions">> => binary()
|
|
|
+%% <<"ciphers">> => binary()
|
|
|
+-type opts_key() :: binary().
|
|
|
+-type opts_input() :: #{opts_key() => file_input() | boolean() | binary()}.
|
|
|
+
|
|
|
+-type opt_key() :: keyfile | certfile | cacertfile | verify | versions | ciphers.
|
|
|
+-type opt_value() :: term().
|
|
|
+-type opts() :: [{opt_key(), opt_value()}].
|
|
|
+
|
|
|
+%% @doc Parse ssl options input.
|
|
|
+%% If the input contains file content, save the files in the given dir.
|
|
|
+%% Returns ssl options for Erlang's ssl application.
|
|
|
+-spec save_files_return_opts(opts_input(), file:name_all()) -> opts().
|
|
|
+save_files_return_opts(Options, Dir) ->
|
|
|
+ GetD = fun(Key, Default) -> maps:get(Key, Options, Default) end,
|
|
|
+ Get = fun(Key) -> GetD(Key, undefined) end,
|
|
|
+ KeyFile = Get(<<"keyfile">>),
|
|
|
+ CertFile = Get(<<"certfile">>),
|
|
|
+ CAFile = GetD(<<"cacertfile">>, Get(<<"cafile">>)),
|
|
|
+ Key = save_file(KeyFile, Dir),
|
|
|
+ Cert = save_file(CertFile, Dir),
|
|
|
+ CA = save_file(CAFile, Dir),
|
|
|
+ Verify = case GetD(<<"verify">>, false) of
|
|
|
+ false -> verify_none;
|
|
|
+ _ -> verify_peer
|
|
|
+ end,
|
|
|
+ Versions = emqx_tls_lib:integral_versions(Get(<<"tls_versions">>)),
|
|
|
+ Ciphers = emqx_tls_lib:integral_ciphers(Versions, Get(<<"ciphers">>)),
|
|
|
+ filter([{keyfile, Key}, {certfile, Cert}, {cacertfile, CA},
|
|
|
+ {verify, Verify}, {versions, Versions}, {ciphers, Ciphers}]).
|
|
|
+
|
|
|
+filter([]) -> [];
|
|
|
+filter([{_, ""} | T]) -> filter(T);
|
|
|
+filter([H | T]) -> [H | filter(T)].
|
|
|
+
|
|
|
+save_file(#{<<"filename">> := FileName, <<"file">> := Content}, Dir)
|
|
|
+ when FileName =/= undefined andalso Content =/= undefined ->
|
|
|
+ save_file(ensure_str(FileName), iolist_to_binary(Content), Dir);
|
|
|
+save_file(FilePath, _) when is_binary(FilePath) ->
|
|
|
+ ensure_str(FilePath);
|
|
|
+save_file(FilePath, _) when is_list(FilePath) ->
|
|
|
+ FilePath;
|
|
|
+save_file(_, _) -> "".
|
|
|
+
|
|
|
+save_file("", _, _Dir) -> ""; %% ignore
|
|
|
+save_file(_, <<>>, _Dir) -> ""; %% ignore
|
|
|
+save_file(FileName, Content, Dir) ->
|
|
|
+ FullFilename = filename:join([Dir, FileName]),
|
|
|
+ ok = filelib:ensure_dir(FullFilename),
|
|
|
+ case file:write_file(FullFilename, Content) of
|
|
|
+ ok ->
|
|
|
+ ensure_str(FullFilename);
|
|
|
+ {error, Reason} ->
|
|
|
+ logger:error("failed_to_save_ssl_file ~s: ~0p", [FullFilename, Reason]),
|
|
|
+ error({"failed_to_save_ssl_file", FullFilename, Reason})
|
|
|
+ end.
|
|
|
+
|
|
|
+ensure_str(L) when is_list(L) -> L;
|
|
|
+ensure_str(B) when is_binary(B) -> unicode:characters_to_list(B, utf8).
|
|
|
+
|
Zaiming Shi