Skip to content

Instantly share code, notes, and snippets.

@samthor
Last active April 15, 2024 15:47
Show Gist options
  • Save samthor/5ff8cfac1f80b03dfe5a9be62b29d7f2 to your computer and use it in GitHub Desktop.
Save samthor/5ff8cfac1f80b03dfe5a9be62b29d7f2 to your computer and use it in GitHub Desktop.
Demo autocert server in Go
package main
import (
"crypto/tls"
"flag"
"fmt"
"log"
"net/http"
"os"
"os/user"
"path/filepath"
"golang.org/x/crypto/acme/autocert"
)
func main() {
// setup a simple handler which sends a HTHS header for six months (!)
http.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
w.Header().Set("Strict-Transport-Security", "max-age=15768000 ; includeSubDomains")
fmt.Fprintf(w, "Hello, HTTPS world!")
})
// look for the domains to be served from command line args
flag.Parse()
domains := flag.Args()
if len(domains) == 0 {
log.Fatalf("fatal; specify domains as arguments")
}
// create the autocert.Manager with domains and path to the cache
certManager := autocert.Manager{
Prompt: autocert.AcceptTOS,
HostPolicy: autocert.HostWhitelist(domains...),
}
// optionally use a cache dir
dir := cacheDir()
if dir != "" {
certManager.Cache = autocert.DirCache(dir)
}
// create the server itself
server := &http.Server{
Addr: ":https",
TLSConfig: &tls.Config{
GetCertificate: certManager.GetCertificate,
},
}
log.Printf("Serving http/https for domains: %+v", domains)
go func() {
// serve HTTP, which will redirect automatically to HTTPS
h := certManager.HTTPHandler(nil)
log.Fatal(http.ListenAndServe(":http", h))
}()
// serve HTTPS!
log.Fatal(server.ListenAndServeTLS("", ""))
}
// cacheDir makes a consistent cache directory inside /tmp. Returns "" on error.
func cacheDir() (dir string) {
if u, _ := user.Current(); u != nil {
dir = filepath.Join(os.TempDir(), "cache-golang-autocert-"+u.Username)
if err := os.MkdirAll(dir, 0700); err == nil {
return dir
}
}
return ""
}
@Plaenkler
Copy link

@arshpreetsingh If you want to run your application locally you should use a self signed certificate.
Check this out -> https://pkg.go.dev/crypto/x509

@jesson3264
Copy link

How to test? Why I enter http://xyzabc.com in browser, It not show any something right.
I have configured a domain in host file.

127.0.0.1 xyzabc.com

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment