89 lines
3.4 KiB
C#
89 lines
3.4 KiB
C#
using FastGithub.ReverseProxy;
|
|
using Microsoft.AspNetCore.Hosting;
|
|
using Microsoft.AspNetCore.Server.Kestrel.Core;
|
|
using Microsoft.Extensions.DependencyInjection;
|
|
using Microsoft.Extensions.Logging;
|
|
using System;
|
|
using System.Collections.Concurrent;
|
|
using System.Security.Cryptography.X509Certificates;
|
|
|
|
namespace FastGithub
|
|
{
|
|
/// <summary>
|
|
/// Kestrel扩展
|
|
/// </summary>
|
|
public static class KestrelServerOptionsExtensions
|
|
{
|
|
/// <summary>
|
|
/// 监听github的反向代理
|
|
/// </summary>
|
|
/// <param name="kestrel"></param>
|
|
/// <param name="caPublicCerPath"></param>
|
|
/// <param name="caPrivateKeyPath"></param>
|
|
public static void ListenGithubReverseProxy(this KestrelServerOptions kestrel, string caPublicCerPath, string caPrivateKeyPath)
|
|
{
|
|
var loggerFactory = kestrel.ApplicationServices.GetRequiredService<ILoggerFactory>();
|
|
var logger = loggerFactory.CreateLogger($"{nameof(FastGithub)}{nameof(ReverseProxy)}");
|
|
TryInstallCaCert(caPublicCerPath, logger);
|
|
|
|
kestrel.ListenAnyIP(443, listen => listen.UseGithubHttps(caPublicCerPath, caPrivateKeyPath));
|
|
logger.LogInformation("反向代理服务启动成功");
|
|
}
|
|
|
|
/// <summary>
|
|
/// 安装根证书
|
|
/// </summary>
|
|
/// <param name="caPublicCerPath"></param>
|
|
/// <param name="logger"></param>
|
|
private static void TryInstallCaCert(string caPublicCerPath, ILogger logger)
|
|
{
|
|
if (OperatingSystem.IsWindows())
|
|
{
|
|
try
|
|
{
|
|
var caCert = new X509Certificate2(caPublicCerPath);
|
|
using var store = new X509Store(StoreName.Root, StoreLocation.LocalMachine);
|
|
store.Open(OpenFlags.ReadWrite);
|
|
if (store.Certificates.Find(X509FindType.FindByThumbprint, caCert.Thumbprint, true).Count == 0)
|
|
{
|
|
store.Add(caCert);
|
|
store.Close();
|
|
}
|
|
}
|
|
catch (Exception ex)
|
|
{
|
|
logger.LogError($"安装根证书{caPublicCerPath}失败：{ex.Message}");
|
|
}
|
|
}
|
|
}
|
|
|
|
/// <summary>
|
|
/// 应用fastGihub的https
|
|
/// </summary>
|
|
/// <param name="listenOptions"></param>
|
|
/// <param name="caPublicCerPath"></param>
|
|
/// <param name="caPrivateKeyPath"></param>
|
|
/// <returns></returns>
|
|
private static ListenOptions UseGithubHttps(this ListenOptions listenOptions, string caPublicCerPath, string caPrivateKeyPath)
|
|
{
|
|
return listenOptions.UseHttps(https =>
|
|
{
|
|
var certs = new ConcurrentDictionary<string, X509Certificate2>();
|
|
https.ServerCertificateSelector = (ctx, domain) => certs.GetOrAdd(domain, CreateCert);
|
|
});
|
|
|
|
X509Certificate2 CreateCert(string domain)
|
|
{
|
|
if (domain == string.Empty)
|
|
{
|
|
domain = "github.com";
|
|
}
|
|
var domains = new[] { domain };
|
|
var validFrom = DateTime.Today.AddYears(-1);
|
|
var validTo = DateTime.Today.AddYears(10);
|
|
return CertGenerator.Generate(domains, 2048, validFrom, validTo, caPublicCerPath, caPrivateKeyPath);
|
|
}
|
|
}
|
|
}
|
|
}
|