add ssl support to goliath, closespostrank-labs#24

Author: igrigorik

lib/goliath/runner.rb

@@ -100,19 +100,30 @@ def options_parser
 opts.separator"Server options:"
 
 opts.on('-e','--environment NAME',"Set the execution environment (prod, dev or test) (default: #{@options[:env]})"){ |val| @options[:env]=val}
-
 opts.on('-a','--address HOST',"Bind to HOST address (default: #{@options[:address]})"){ |addr| @options[:address]=addr}
 opts.on('-p','--port PORT',"Use PORT (default: #{@options[:port]})"){ |port| @options[:port]=port.to_i}
 
+opts.separator""
+opts.separator"Daemon options:"
+
 opts.on('-u','--user USER',"Run as specified user"){|v| @options[:user]=v}
+opts.on('-c','--config FILE',"Config file (default: ./config/<server>.rb)"){ |v| @options[:config]=v}
+opts.on('-d','--daemonize',"Run daemonized in the background (default: #{@options[:daemonize]})"){ |v| @options[:daemonize]=v}
 opts.on('-l','--log FILE',"Log to file (default: off)"){ |file| @options[:log_file]=file}
 opts.on('-s','--stdout',"Log to stdout (default: #{@options[:log_stdout]})"){ |v| @options[:log_stdout]=v}
-
-opts.on('-c','--config FILE',"Config file (default: ./config/<server>.rb)"){ |v| @options[:config]=v}
 opts.on('-P','--pid FILE',"Pid file (default: off)"){ |file| @options[:pid_file]=file}
-opts.on('-d','--daemonize',"Run daemonized in the background (default: #{@options[:daemonize]})"){ |v| @options[:daemonize]=v}
-opts.on('-v','--verbose',"Enable verbose logging (default: #{@options[:verbose]})"){ |v| @options[:verbose]=v}
 
+opts.separator""
+opts.separator"SSL options:"
+opts.on('--ssl','Enables SSL (default: off)'){|v| @options[:ssl]=v}
+opts.on('--ssl-key FILE','Path to private key'){|v| @options[:ssl_key]=v}
+opts.on('--ssl-cert FILE','Path to certificate'){|v| @options[:ssl_cert]=v}
+opts.on('--ssl-verify','Enables SSL certificate verification'){|v| @options[:ssl_verify]=v}
+
+opts.separator""
+opts.separator"Common options:"
+
+opts.on('-v','--verbose',"Enable verbose logging (default: #{@options[:verbose]})"){ |v| @options[:verbose]=v}
 opts.on('-h','--help','Display help message'){show_options(opts)}
 end
 end

lib/goliath/server.rb

@@ -80,6 +80,12 @@ def start(&blk)
 EM.set_effective_user(options[:user])ifoptions[:user]
 
 EM.start_server(address,port,Goliath::Connection)do |conn|
+conn.start_tls(
+:private_key_file=>options[:ssl_key],
+:cert_chain_file=>options[:ssl_cert],
+:verify_peer=>options[:ssl_verify]
+)ifoptions[:ssl]
+
 conn.port=port
 conn.app=app
 conn.api=api