Re: Using OpenSSL for making a network TLS server

2011/12/2 John Downey <[e-mail]>:
> Ruby's OpenSSL library has an SSLServer class that will do exactly what
> you're asking. Here is just some quick example code (most of the code is
> just building a self-signed cert, you could just as easily load this from=
 a
> file):
>
> require 'openssl'
> require 'socket'
>
> tcp_server =3D TCPServer.new 8080
>
> ctx =3D OpenSSL::SSL::SSLContext.new
> ctx.key =3D OpenSSL::PKey::RSA.new 2048
> ctx.cert =3D OpenSSL::X509::Certificate.new
> ctx.cert.subject =3D OpenSSL::X509::Name.new [['CN', 'localhost']]
> ctx.cert.issuer =3D ctx.cert.subject
> ctx.cert.public_key =3D ctx.key
> ctx.cert.not_before =3D Time.now
> ctx.cert.not_after =3D Time.now + 60 * 60 * 24
> ctx.cert.sign ctx.key, OpenSSL::Digest::SHA1.new
>
> server =3D OpenSSL::SSL::SSLServer.new tcp_server, ctx
> socket =3D server.accept
> puts socket.gets
>
> With anything having to do with crypto I would highly recommend not tryin=
g
> to create the solution yourself (it is far to easy to screw up). Instead
> you should take time to review existing solutions that have been "battle
> hardened."

Really thanks a lot.

--=20
I=C3=B1aki Baz Castillo
<[e-mail]>