func main() { root := flag.String("root", "files/", "file server root") flag.Parse() fileServer := http.StripPrefix("/files/", http.FileServer(http.Dir(*root))) wl.Add(net.IP{127, 0, 0, 1}) adminWL := whitelist.NewBasic() adminWL.Add(net.IP{127, 0, 0, 1}) adminWL.Add(net.ParseIP("::1")) protFiles, err := whitelist.NewHandler(fileServer, nil, wl) if err != nil { log.Fatalf("%v", err) } addHandler, err := whitelist.NewHandlerFunc(addIP, nil, adminWL) if err != nil { log.Fatalf("%v", err) } delHandler, err := whitelist.NewHandlerFunc(delIP, nil, adminWL) if err != nil { log.Fatalf("%v", err) } dumpHandler, err := whitelist.NewHandlerFunc(dumpWhitelist, nil, adminWL) if err != nil { log.Fatalf("%v", err) } http.Handle("/files/", protFiles) http.Handle("/add", addHandler) http.Handle("/del", delHandler) http.Handle("/dump", dumpHandler) log.Println("Serving files on :8080") log.Fatal(http.ListenAndServe(":8080", nil)) }
func main() { flagAddr := flag.String("a", ":8888", "listening address") flagRootFile := flag.String("roots", "", "configuration file specifying root keys") flagDefaultLabel := flag.String("l", "", "specify a default label") flag.IntVar(&log.Level, "loglevel", log.LevelInfo, "log level (0 = DEBUG, 4 = ERROR)") flag.Parse() if *flagRootFile == "" { log.Criticalf("no root file specified") os.Exit(1) } roots, err := config.Parse(*flagRootFile) if err != nil { log.Criticalf("%v", err) os.Exit(1) } for label, root := range roots { s, err := parseSigner(root) if err != nil { log.Criticalf("%v", err) } signers[label] = s log.Info("loaded signer ", label) } defaultLabel = *flagDefaultLabel initStats() infoHandler, err := info.NewMultiHandler(signers, defaultLabel) if err != nil { log.Criticalf("%v", err) } var localhost = whitelist.NewBasic() localhost.Add(net.ParseIP("127.0.0.1")) localhost.Add(net.ParseIP("::1")) metrics, err := whitelist.NewHandlerFunc(dumpMetrics, metricsDisallowed, localhost) if err != nil { log.Criticalf("failed to set up the metrics whitelist: %v", err) } http.HandleFunc("/api/v1/cfssl/authsign", dispatchRequest) http.Handle("/api/v1/cfssl/info", infoHandler) http.Handle("/api/v1/cfssl/metrics", metrics) log.Info("listening on ", *flagAddr) log.Error(http.ListenAndServe(*flagAddr, nil)) }