/// <summary>
/// Configure HTTPS certificates dynamically with an implementation of <see cref="IServerCertificateSelector"/>.
/// </summary>
/// <param name="httpsOptions">The HTTPS configuration</param>
/// <param name="certificateSelector">The server certificate selector.</param>
/// <returns>The HTTPS configuration</returns>
public static HttpsConnectionAdapterOptions UseServerCertificateSelector(
this HttpsConnectionAdapterOptions httpsOptions,
IServerCertificateSelector certificateSelector)
{
httpsOptions.ServerCertificateSelector = certificateSelector.Select;
return(httpsOptions);
}
internal static HttpsConnectionAdapterOptions UseLettuceEncrypt(
this HttpsConnectionAdapterOptions httpsOptions,
IServerCertificateSelector selector,
TlsAlpnChallengeResponder tlsAlpnChallengeResponder
)
{
httpsOptions.OnAuthenticate = tlsAlpnChallengeResponder.OnSslAuthenticate;
httpsOptions.UseServerCertificateSelector(selector);
return(httpsOptions);
}
internal static HttpsConnectionAdapterOptions UseLettuceEncrypt(
this HttpsConnectionAdapterOptions httpsOptions,
IServerCertificateSelector selector,
TlsAlpnChallengeResponder tlsAlpnChallengeResponder
)
{
// Check if this handler is already set. If so, chain our handler before it.
var otherHandler = httpsOptions.OnAuthenticate;
httpsOptions.OnAuthenticate = (ctx, options) =>
{
tlsAlpnChallengeResponder.OnSslAuthenticate(ctx, options);
otherHandler?.Invoke(ctx, options);
};
httpsOptions.UseServerCertificateSelector(selector);
return(httpsOptions);
}
public KestrelOptionsSetup(IServerCertificateSelector certificateSelector)
{
_certificateSelector = certificateSelector ?? throw new ArgumentNullException(nameof(certificateSelector));
}
public KestrelOptionsSetup(IServerCertificateSelector serverCertificateSelector)
{
this.serverCertificateSelector = serverCertificateSelector;
}
public KestrelOptionsSetup(IServerCertificateSelector certificateSelector, TlsAlpnChallengeResponder tlsAlpnChallengeResponder)
{
_certificateSelector = certificateSelector ?? throw new ArgumentNullException(nameof(certificateSelector));
_tlsAlpnChallengeResponder = tlsAlpnChallengeResponder ?? throw new ArgumentNullException(nameof(tlsAlpnChallengeResponder));
}
public CertificateService(ICertificateProvider certificateProvider, IServerCertificateSelector serverCertificateSelector)
{
this.certificateProvider = certificateProvider;
this.serverCertificateSelector = serverCertificateSelector;
}
