Re: [MirageOS-devel] An HTTP server with TLS

[Thomas Leonard <talex5@xxxxxxxxx>]

On 7 January 2015 at 10:42, Anil Madhavapeddy <anil@xxxxxxxxxx> wrote:
> On 5 Jan 2015, at 09:53, Thomas Leonard <talex5@xxxxxxxxx> wrote:
>>
>> I'd like to add TLS to my Mirage web server. What's the best way to do this?
>>
>> My Unikernel.Main functor currently takes a (H : Cohttp_lwt.Server)
>> argument. I see that main.ml configures this using:
>>
>> module Conduit1 = Conduit_mirage.Make(Stackv41)(Vchan1)
>> module Http1 = HTTP.Make(Conduit1)
>>
>> Can conduit deal with TLS for me? The conduit docs say "The reason
>> this library exists is to provide a degree of abstraction from the
>> precise SSL library used", which suggests that it should.
>
> Conduit_mirage doesn't support this yet -- just Conduit_lwt_unix.
> Before adding it in, I was waiting for xentropyd and the C bindings
> to work, which should all be in the trees.  If we could now get a
> mirage-skeleton example of a manual SSL server using the TCP/IP
> stack directly, then the Conduit_mirage version won't be too far
> behind.

tls/mirage/example has a direct example that works on Xen. I'm going
to look at getting HTTPS support working now, unless you want to do it
first.


-- 
Dr Thomas Leonard        http://0install.net/
GPG: 9242 9807 C985 3C07 44A6  8B9A AE07 8280 59A5 3CC1
GPG: DA98 25AE CAD0 8975 7CDA  BD8E 0713 3F96 CA74 D8BA

_______________________________________________
MirageOS-devel mailing list
MirageOS-devel@xxxxxxxxxxxxxxxxxxxx
http://lists.xenproject.org/cgi-bin/mailman/listinfo/mirageos-devel