test/acl
1
0
Fork 0
mirror of https://gitee.com/acl-dev/acl.git synced 2024-12-14 17:00:52 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity
1222309a1d
acl/lib_acl_cpp/samples/ssl/ssl_server2/ssl_server.cf

126 lines
4.1 KiB
CFEngine3
Raw Normal View History

完善了针对 Polarssl 的支持 升级 polarssl 至1.3.8版本；支持服务端模式的 ssl 通信方式；增加了 SSL 的服务端测试用例
2014-08-20 22:31:35 +08:00
service http_server {
# <09><><EFBFBD><EFBFBD><EFBFBD>Ƿ<EFBFBD><C7B7><EFBFBD>ֹ<EFBFBD><D6B9><EFBFBD><EFBFBD>
master_disable = no
# <09><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ַ<EFBFBD><D6B7><EFBFBD>˿ں<CBBF>
# for master_type = inet
# master_service = 127.0.0.1:5001
# for master_type = unix
# master_service = echo.sock
# for master_type = sock
master_service = 1443
# <09><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ϊ<EFBFBD><CEAA><EFBFBD>׽ӿ<D7BD>
# master_service = aio_echo.sock
# <09><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
# master_type = inet
# master_type = unix
master_type = sock
# <09><><EFBFBD>ӽ<EFBFBD><D3BD><EFBFBD><EFBFBD>쳣<EFBFBD>˳<EFBFBD>ʱ<EFBFBD><CAB1><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ֵ<EFBFBD>ǿգ<C7BF><D5A3><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ӽ<EFBFBD><D3BD><EFBFBD><EFBFBD>쳣<EFBFBD>˳<EFBFBD><CBB3><EFBFBD><EFBFBD><EFBFBD>Ϣ֪ͨ<CDA8>÷<EFBFBD><C3B7><EFBFBD>
# master_notify_addr = 127.0.0.1:5801
# <09>ʼ<EFBFBD>֪ͨ<CDA8><D6AA><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
# master_notify_recipients = zhengshuxin@hotmail.com
# <09>Ƿ<EFBFBD><C7B7><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ӳٽ<D3B3><D9BD>ܿͻ<DCBF><CDBB><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ӣ<EFBFBD><D3A3><EFBFBD><EFBFBD><EFBFBD>Ϊ0<CEAA><30><EFBFBD><EFBFBD>ʾ<EFBFBD>رոù<D5B8><C3B9>ܣ<EFBFBD><DCA3><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>0<EFBFBD><30><EFBFBD><EFBFBD>ʾ<EFBFBD>򿪴˹<F2BFAAB4><CBB9><EFBFBD>
# <09><><EFBFBD>Ҵ<EFBFBD>ֵ<EFBFBD><D6B5><EFBFBD><EFBFBD><EFBFBD>ӳٽ<D3B3><D9BD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ӵij<D3B5>ʱֵ<CAB1><D6B5><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ֵʱ<D6B5><CAB1><EFBFBD><EFBFBD><EFBFBD>ͻ<EFBFBD><CDBB><EFBFBD><EFBFBD><EFBFBD>Ȼû<C8BB>з<EFBFBD><D0B7><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ݣ<EFBFBD><DDA3><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
# ϵͳ<CFB5><CDB3><EFBFBD><EFBFBD>ϵͳ<CFB5><CDB3>ֱ<EFBFBD>ӹرո<D8B1><D5B8><EFBFBD><EFBFBD><EFBFBD>
# master_defer_accept = 0
# <09>Ƿ<EFBFBD>ֻ<EFBFBD><D6BB><EFBFBD><EFBFBD>˽<EFBFBD>з<EFBFBD><D0B7><EFBFBD>, <20><><EFBFBD><EFBFBD>Ϊ y, <20><><EFBFBD><EFBFBD><EFBFBD>׽ӿڴ<D3BF><DAB4><EFBFBD><EFBFBD><EFBFBD> {install_path}/var/log/private/ Ŀ¼<C4BF><C2BC>,
# <09><><EFBFBD><EFBFBD>Ϊ n, <20><><EFBFBD><EFBFBD><EFBFBD>׽ӿڴ<D3BF><DAB4><EFBFBD><EFBFBD><EFBFBD> {install_path}/var/log/public/ Ŀ¼<C4BF><C2BC>,
master_private = n
master_unpriv = n
# <09>Ƿ<EFBFBD><C7B7><EFBFBD>Ҫ chroot: n -- no, y -- yes
master_chroot = n
# ÿ<><C3BF><EFBFBD>೤ʱ<E0B3A4>䴥<EFBFBD><E4B4A5>һ<EFBFBD>Σ<EFBFBD><CEA3><EFBFBD>λΪ<CEBB><CEAA>(<28><><EFBFBD><EFBFBD> trigger ģʽ<C4A3><CABD>Ч)
master_wakeup = -
# <09><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
master_maxproc = 1
# Ԥ<><D4A4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ֵ<EFBFBD><D6B5><EFBFBD>ô<EFBFBD><C3B4><EFBFBD> master_maxproc
master_prefork = 1
# <09><><EFBFBD>̳<EFBFBD><CCB3><EFBFBD><EFBFBD><EFBFBD>
整理工程，优化代码
2014-12-07 23:48:11 +08:00
master_command = ssl_server
完善了针对 Polarssl 的支持 升级 polarssl 至1.3.8版本；支持服务端模式的 ssl 通信方式；增加了 SSL 的服务端测试用例
2014-08-20 22:31:35 +08:00
# <09><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>־<EFBFBD><D6BE>¼<EFBFBD>ļ<EFBFBD>
整理工程，优化代码
2014-12-07 23:48:11 +08:00
master_log = {install_path}/var/log/ssl_server
完善了针对 Polarssl 的支持 升级 polarssl 至1.3.8版本；支持服务端模式的 ssl 通信方式；增加了 SSL 的服务端测试用例
2014-08-20 22:31:35 +08:00
# <09><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>־<EFBFBD><D6BE>ʽ<EFBFBD><CABD><EFBFBD><EFBFBD>ʽ<EFBFBD><CABD>tag:level; tag:level; tab:level, <20>磺all:1; 101:2
# master_debug =
# <09><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ֻ<EFBFBD><D6BB>Ϊ: -u [<5B>Ƿ<EFBFBD><C7B7><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ij<EFBFBD><C4B3>ͨ<EFBFBD>û<EFBFBD><C3BB><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>]
# master_args =
# <09><><EFBFBD>ݸ<EFBFBD><DDB8><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ӽ<EFBFBD><D3BD>̵Ļ<CCB5><C4BB><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20><><EFBFBD><EFBFBD>ͨ<EFBFBD><CDA8> getenv("SERVICE_ENV") <20><><EFBFBD>ô<EFBFBD>ֵ
# master_env = mempool_limit:512000000
# master_env = logme:FALSE, priority:E_LOG_INFO, action:E_LOG_PER_DAY, flush:sync_flush, imit_size:512,\
# sync_action:E_LOG_SEM, sem_name:/tmp/ioctl_echo.sem
# <09><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ӽ<EFBFBD><D3BD><EFBFBD>ʵ<EFBFBD><CAB5>ʱ<EFBFBD><CAB1><EFBFBD>ÿ<EFBFBD><C3BF>ؿ<EFBFBD><D8BF>ƶ<EFBFBD><C6B6><EFBFBD><EFBFBD>ӽ<EFBFBD><D3BD><EFBFBD><EFBFBD>ڽ<EFBFBD><DABD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ʱ<EFBFBD>Ƿ<EFBFBD><C7B7><EFBFBD> acl_master <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ϣ<EFBFBD><CFA2><EFBFBD><EFBFBD><EFBFBD>Լ<EFBFBD><D4BC><EFBFBD>״̬
# master_status_notify = 1
# <09>Ƿ<EFBFBD><C7B7><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> core <20>ļ<EFBFBD>
# ioctl_enable_core = 1
# ÿ<><C3BF><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ʵ<EFBFBD><CAB5><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ֵ<EFBFBD><D6B5><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ʵ<EFBFBD><CAB5><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>˳<EFBFBD>
test acl using mbedtls ok!
2020-01-02 23:29:06 +08:00
ioctl_use_limit = 0
完善了针对 Polarssl 的支持 升级 polarssl 至1.3.8版本；支持服务端模式的 ssl 通信方式；增加了 SSL 的服务端测试用例
2014-08-20 22:31:35 +08:00
# ÿ<><C3BF><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ʵ<EFBFBD><CAB5><EFBFBD>Ŀ<EFBFBD><C4BF>г<EFBFBD>ʱʱ<CAB1>䣬<EFBFBD><E4A3AC><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ֵ<EFBFBD><D6B5><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ʵ<EFBFBD><CAB5><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>˳<EFBFBD>
test acl using mbedtls ok!
2020-01-02 23:29:06 +08:00
ioctl_idle_limit = 0
完善了针对 Polarssl 的支持 升级 polarssl 至1.3.8版本；支持服务端模式的 ssl 通信方式；增加了 SSL 的服务端测试用例
2014-08-20 22:31:35 +08:00
# <09><>¼<EFBFBD><C2BC><EFBFBD><EFBFBD>PID<49><44>λ<EFBFBD><CEBB>(<28><><EFBFBD>ڶ<EFBFBD><DAB6><EFBFBD><EFBFBD><EFBFBD>ʵ<EFBFBD><CAB5><EFBFBD><EFBFBD>˵û<CBB5><C3BB><EFBFBD><EFBFBD><EFBFBD><EFBFBD>)
ioctl_pid_dir = {install_path}/var/pid
# <09><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ʱ<EFBFBD><CAB1><EFBFBD>ڵ<EFBFBD>·<EFBFBD><C2B7>
ioctl_queue_dir = {install_path}/var
# <09><>д<EFBFBD><D0B4>ʱʱ<CAB1><CAB1>, <20><>λΪ<CEBB><CEAA>
ioctl_rw_timeout = 120
# <09><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ļ<EFBFBD><C4BB><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>С
ioctl_buf_size = 8192
# ÿ<><C3BF> accept ʱ<><CAB1>ѭ<EFBFBD><D1AD><EFBFBD><EFBFBD><EFBFBD>յ<EFBFBD><D5B5><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
ioctl_max_accept = 25
# <09>ڲ<EFBFBD><DAB2><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>dz<EFBFBD><C7B3>͵<EFBFBD><CDB5><EFBFBD><EFBFBD><EFBFBD><EFBFBD>£<EFBFBD><C2A3><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> 10 <20><>/<2F><> <20><><EFBFBD><EFBFBD>ʱ<EFBFBD><CAB1><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ҿ<EFBFBD><D2BF><EFBFBD>ֵ(<28><><EFBFBD><EFBFBD>Ϊ1)<29><>
# <09>Լ<EFBFBD><D4BC><EFBFBD><EFBFBD>¼<EFBFBD>ѭ<EFBFBD><D1AD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>, <20>Ӷ<EFBFBD><D3B6><EFBFBD>ֹ<EFBFBD><D6B9><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> select <20>ϵ<EFBFBD>ʱ<EFBFBD><CAB1><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ӱ<EFBFBD><D3B0><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ٶ<EFBFBD>
# ioctl_enable_dog = 1
# <09><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ʱ<EFBFBD><CAB1><EFBFBD>û<EFBFBD><C3BB><EFBFBD><EFBFBD><EFBFBD>
ioctl_owner = root
# <09><> select <20><><EFBFBD><EFBFBD>ѭ<EFBFBD><D1AD>ʱ<EFBFBD><CAB1>ʱ<EFBFBD><CAB1><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
# <09><>λΪ<CEBB><CEAA>
ioctl_delay_sec = 1
# <09><>λΪ΢<CEAA><CEA2>
ioctl_delay_usec = 500
# <20><><EFBFBD><EFBFBD><EFBFBD>¼<EFBFBD>ѭ<EFBFBD><D1AD><EFBFBD>ķ<EFBFBD>ʽ: select(default), poll, kernel(epoll/devpoll/kqueue)
ioctl_event_mode = kernel
# <09>¼<EFBFBD><C2BC><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>п<EFBFBD><D0BF><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ʱ<EFBFBD><CAB1><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28><><EFBFBD><EFBFBD>)
# ioctl_check_inter = 100
# <09><><EFBFBD><EFBFBD><EFBFBD><EFBFBD> master_dispatch <20><><EFBFBD>ӷֿ<D3B7><D6BF><EFBFBD><EFBFBD><EFBFBD><EFBFBD>󣬸<EFBFBD><F3A3ACB8><EFBFBD><EFBFBD><EFBFBD>ָ<EFBFBD><D6B8> master_dispatch <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
# <09><><EFBFBD>׽ӿڵ<D3BF>ȫ·<C8AB><C2B7><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ӽ<EFBFBD><D3BD>̾Ϳ<CCBE><CDBF>Դ<EFBFBD> master_dispatch <20><><EFBFBD>ÿͻ<C3BF><CDBB><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>
# ioctl_dispatch_addr = {install_path}/var/private/dispatch.sock
# <09><> ioctl_dispatch_addr <20><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ʊ<EFBFBD><C6B1><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>̷<EFBFBD><CCB7><EFBFBD>ǰ<EFBFBD><C7B0> master_dispatch <20>ķ<EFBFBD><C4B7><EFBFBD><EFBFBD><EFBFBD>ʶ<EFBFBD><CAB6>Ϣ
# ioctl_dispatch_type = default
# <09>̳߳ص<CCB3><D8B5><EFBFBD><EFBFBD><EFBFBD><EFBFBD>߳<EFBFBD><DFB3><EFBFBD>
test mbedtls module
2020-01-03 15:57:34 +08:00
ioctl_max_threads = 20
完善了针对 Polarssl 的支持 升级 polarssl 至1.3.8版本；支持服务端模式的 ssl 通信方式；增加了 SSL 的服务端测试用例
2014-08-20 22:31:35 +08:00
# <09>̳߳<DFB3><CCB3>й<EFBFBD><D0B9><EFBFBD><EFBFBD>̵߳ȴ<CCB5><C8B4><EFBFBD><EFBFBD><EFBFBD>ʱ<EFBFBD><CAB1><EFBFBD><EFBFBD><EFBFBD><EFBFBD>(<28><><EFBFBD><EFBFBD>)
# ioctl_schedule_wait = 50
# <09>߳<EFBFBD><DFB3><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ȵ<EFBFBD>ʱ<EFBFBD><CAB1><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ڴ<EFBFBD>ֵ(<28><><EFBFBD><EFBFBD>)<29><><EFBFBD>Ǿ<EFBFBD><C7BE><EFBFBD><EFBFBD><EFBFBD>־
# ioctl_schedule_warn = 100
# <09>̴߳<DFB3><CCB4><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ӵ<EFBFBD><D3B5><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>˷<EFBFBD>ֵ<EFBFBD><D6B5><EFBFBD>Ǿ<EFBFBD><C7BE><EFBFBD><EFBFBD><EFBFBD>־<EFBFBD><D6BE><EFBFBD><EFBFBD>Ϊ 0 <20><><EFBFBD>ڲ<EFBFBD>ֻ<EFBFBD>е<EFBFBD>ӵ<EFBFBD><D3B5><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>߳<EFBFBD><DFB3><EFBFBD><EFBFBD><EFBFBD> 10 <20><>ʱ<EFBFBD>ű<EFBFBD><C5B1><EFBFBD>
# ioctl_qlen_warn = 0
# <09>̵߳Ķ<CCB5>ջ<EFBFBD>ռ<EFBFBD><D5BC><EFBFBD>С<EFBFBD><D0A1><EFBFBD><EFBFBD>λΪ<CEBB>ֽڣ<D6BD>0<EFBFBD><30>ʾʹ<CABE><CAB9>ϵͳȱʡֵ
ioctl_stacksize = 0
# <09><><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD> udserver <20>Ŀͻ<C4BF><CDBB><EFBFBD>IP<49><50>ַ<EFBFBD><D6B7>Χ
ioctl_access_allow = all
# <09><> acl_master <20>˳<EFBFBD>ʱ<EFBFBD><CAB1><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ֵ<EFBFBD><D6B5>1<EFBFBD><31><EFBFBD>ó<EFBFBD><C3B3>򲻵<EFBFBD><F2B2BBB5><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Ӵ<EFBFBD><D3B4><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ϱ<EFBFBD><CFB1><EFBFBD><EFBFBD><EFBFBD><EFBFBD>˳<EFBFBD>
ioctl_quick_abort = 1
############################################################################
# Ӧ<><D3A6><EFBFBD>Լ<EFBFBD><D4BC><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>ѡ<EFBFBD><D1A1>
test acl using mbedtls ok!
2020-01-02 23:29:06 +08:00
use_mbedtls = 1
# for Mac OS
# ssl_path = ../libmbedtls_all.dylib
# ssl_path = ../libpolarssl.dylib
# for Linux OS
# ssl_path = ../libmbedtls_all.so
# ssl_path = ../libpolarssl.so
整理工程，优化代码
2014-12-07 23:48:11 +08:00
# crt_file = {install_path}/conf/ssl/imap.crt
# key_file = {install_path}/conf/ssl/imap.key
test acl using mbedtls ok!
2020-01-02 23:29:06 +08:00
crt_file = ../ssl_crt.pem
key_file = ../ssl_key.pem
完善了针对 Polarssl 的支持 升级 polarssl 至1.3.8版本；支持服务端模式的 ssl 通信方式；增加了 SSL 的服务端测试用例
2014-08-20 22:31:35 +08:00
}
Reference in New Issue Copy Permalink