dev-environment: listen-tls

dev-environments/listen-tls/Makefile

@@ -0,0 +1,18 @@
+SHELL = /usr/bin/env bash -o pipefail
+.SHELLFLAGS = -ec
+.DEFAULT_GOAL := gateway
+MKFILE_PATH := $(abspath $(lastword $(MAKEFILE_LIST)))
+WORKDIR := $(patsubst %/,%,$(dir $(MKFILE_PATH)))
+DOCKER ?= $(shell which docker 2> /dev/null || echo "docker")
+
+gateway: ## run gateway configured to access upstream powered with TLS
+	$(DOCKER) compose -f docker-compose.yml run --service-ports gateway
+
+clean:
+	$(DOCKER) compose down --volumes --remove-orphans
+	$(DOCKER) compose -f docker-compose.yml down --volumes --remove-orphans
+
+certs:
+	$(MAKE) clean -C $(WORKDIR)/cert -f $(WORKDIR)/cert/Makefile
+	$(MAKE) ca -C $(WORKDIR)/cert -f $(WORKDIR)/cert/Makefile
+	$(MAKE) clientcerts -C $(WORKDIR)/cert -f $(WORKDIR)/cert/Makefile DOMAIN=example.com

dev-environments/listen-tls/README.md

@@ -0,0 +1,15 @@
+# Making APIcast listen on HTTPS
+
+Run `make gateway`
+
+## Testing
+
+```sh
+curl --resolve example.com:8443:127.0.0.1 -v --cacert cert/rootCA.pem "https://example.com:8443/?user_key=123"
+```
+
+## SSL Certificates
+
+```sh
+make certs
+```

dev-environments/listen-tls/apicast-config.json

@@ -0,0 +1,31 @@
+{
+  "services": [
+    {
+      "id": "1",
+      "backend_version": "1",
+      "proxy": {
+        "hosts": ["example.com"],
+        "api_backend": "http://one.upstream/get",
+        "backend": {
+          "endpoint": "http://127.0.0.1:8081",
+          "host": "backend"
+        },
+        "policy_chain": [
+          {
+            "name": "apicast.policy.apicast"
+          }
+        ],
+        "proxy_rules": [
+          {
+            "http_method": "GET",
+            "pattern": "/",
+            "metric_system_name": "hits",
+            "delta": 1,
+            "parameters": [],
+            "querystring_parameters": {}
+          }
+        ]
+      }
+    }
+  ]
+}

dev-environments/listen-tls/cert/Makefile

@@ -0,0 +1,15 @@
+clean:
+	- rm *.crt *.key *.pem *.csr
+
+ca: 
+	openssl genrsa -out rootCA.key 2048 
+	openssl req -batch -new -x509 -nodes -key rootCA.key -sha256 -days 1024 -out rootCA.pem
+
+clientcerts:	
+	openssl req -subj '/CN=$(DOMAIN)'  -newkey rsa:4096 -nodes \
+			-sha256 \
+			-days 3650 \
+			-keyout $(DOMAIN).key \
+			-out $(DOMAIN).csr 
+	chmod +r $(DOMAIN).key
+	openssl x509 -req -in $(DOMAIN).csr -CA rootCA.pem -CAkey rootCA.key -CAcreateserial -out $(DOMAIN).crt -days 500 -sha256

dev-environments/listen-tls/cert/example.com.crt

@@ -0,0 +1,23 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

dev-environments/listen-tls/cert/example.com.csr

@@ -0,0 +1,26 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

dev-environments/listen-tls/cert/example.com.key

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

dev-environments/listen-tls/cert/rootCA.key

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

dev-environments/listen-tls/cert/rootCA.pem

@@ -0,0 +1,21 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

dev-environments/listen-tls/docker-compose.yml

@@ -0,0 +1,38 @@
+---
+version: '3.8'
+services:
+  gateway:
+    image: ${IMAGE_NAME:-apicast-test}
+    depends_on:
+    - one.upstream
+    - two.upstream
+    environment:
+      APICAST_HTTPS_PORT: 8443
+      APICAST_HTTPS_CERTIFICATE: /var/run/secrets/apicast/example.com.crt
+      APICAST_HTTPS_CERTIFICATE_KEY: /var/run/secrets/apicast/example.com.key
+      THREESCALE_CONFIG_FILE: /tmp/config.json
+      THREESCALE_DEPLOYMENT_ENV: staging
+      APICAST_CONFIGURATION_LOADER: lazy
+      APICAST_WORKERS: 1
+      APICAST_LOG_LEVEL: debug
+      APICAST_CONFIGURATION_CACHE: "0"
+    expose:
+      - "8443"
+      - "8090"
+    ports:
+      - "8443:8443"
+      - "8090:8090"
+    volumes:
+      - ./apicast-config.json:/tmp/config.json
+      - ./cert:/var/run/secrets/apicast
+  one.upstream:
+    image: alpine/socat:1.7.4.4
+    container_name: one.upstream
+    command: "-d -v -d TCP-LISTEN:80,reuseaddr,fork TCP:two.upstream:80"
+    expose:
+      - "80"
+    restart: unless-stopped
+  two.upstream:
+    image: kennethreitz/httpbin
+    expose:
+      - "80"