YGGverse/agate
1
0
Fork 0
mirror of https://github.com/YGGverse/agate.git synced 2026-04-08 20:45:29 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

add flag for only TLSv1.3

Browse source 
closes #12
This commit is contained in:
Johann150 2021-02-09 11:26:55 +01:00
parent 670ccaab73
commit 03325ba1a4
No known key found for this signature in database
GPG key ID: 9EE6577A2A06F8F1
2 changed files with 10 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
README.md
View file

@ -52,6 +52,10 @@ When a client requests the URL `gemini://example.com/foo/bar`, Agate will respon
## Configuration ## Configuration
### TLS versions
Agate by default supports TLSv1.2 and TLSv1.3. You can disable support for TLSv1.2 by using the flag `--only-tls13` (or its short version `-3`). This is *NOT RECOMMENDED* as it may break compatibility with some clients. The Gemini specification requires compatibility with TLSv1.2 "for now" because not all platforms have good support for TLSv1.3 (cf. §4.1 of the specification).
### Directory listing ### Directory listing
You can enable a basic directory listing for a directory by putting a file called `.directory-listing-ok` in that directory. This does not have an effect on subdirectories. You can enable a basic directory listing for a directory by putting a file called `.directory-listing-ok` in that directory. This does not have an effect on subdirectories.

6
src/main.rs
View file

@ -74,6 +74,7 @@ struct Args {
silent: bool, silent: bool,
serve_secret: bool, serve_secret: bool,
log_ips: bool, log_ips: bool,
only_tls13: bool,
} }
fn args() -> Result<Args> { fn args() -> Result<Args> {
@ -117,6 +118,7 @@ fn args() -> Result<Args> {
); );
opts.optflag("s", "silent", "Disable logging output"); opts.optflag("s", "silent", "Disable logging output");
opts.optflag("h", "help", "Print this help menu"); opts.optflag("h", "help", "Print this help menu");
opts.optflag("3", "only-tls13", "Only use TLSv1.3 (default also allows TLSv1.2)");
opts.optflag( opts.optflag(
"", "",
"serve-secret", "serve-secret",
@ -153,6 +155,7 @@ fn args() -> Result<Args> {
silent: matches.opt_present("s"), silent: matches.opt_present("s"),
serve_secret: matches.opt_present("serve-secret"), serve_secret: matches.opt_present("serve-secret"),
log_ips: matches.opt_present("log-ip"), log_ips: matches.opt_present("log-ip"),
only_tls13: matches.opt_present("only-tls13"),
}) })
} }
@ -175,6 +178,9 @@ fn acceptor() -> Result<TlsAcceptor> {
let mut keys = pkcs8_private_keys(&mut BufReader::new(key_file)).or(Err("bad key"))?; let mut keys = pkcs8_private_keys(&mut BufReader::new(key_file)).or(Err("bad key"))?;
let mut config = ServerConfig::new(NoClientAuth::new()); let mut config = ServerConfig::new(NoClientAuth::new());
if ARGS.only_tls13 {
config.versions = vec![rustls::ProtocolVersion::TLSv1_3];
}
config.set_single_cert(certs, keys.remove(0))?; config.set_single_cert(certs, keys.remove(0))?;
Ok(TlsAcceptor::from(Arc::new(config))) Ok(TlsAcceptor::from(Arc::new(config)))
} }