1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
#
# Copyright (c) 2014 ThoughtWorks, Inc.
#
# Pixelated is free software: you can redistribute it and/or modify
# it under the terms of the GNU Affero General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.
#
# Pixelated is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public License
# along with Pixelated. If not, see <http://www.gnu.org/licenses/>.
from functools import partial
import sys
from pixelated.config import app_factory
from pixelated.config.args import parse_user_agent_args
from pixelated.config.loading_page import LoadingResource
from pixelated.config.register import register
from pixelated.config.logging_setup import init_logging
from twisted.internet import reactor
from twisted.internet.threads import deferToThread
from twisted.internet import defer
from twisted.web.server import Site
from pixelated.config.initialize_leap import initialize_leap
@defer.inlineCallbacks
def start_user_agent(loading_app, host, port, sslkey, sslcert, leap_home, leap_session):
yield loading_app.stopListening()
resource = app_factory.init_app(leap_home, leap_session)
if sslkey and sslcert:
reactor.listenSSL(port, Site(resource), _ssl_options(sslkey, sslcert), interface=host)
else:
reactor.listenTCP(port, Site(resource), interface=host)
reactor.threadpool.adjustPoolsize(20, 40)
reactor.stop = stop_incoming_mail_fetcher(reactor.stop, leap_session)
def stop_incoming_mail_fetcher(reactor_stop_function, leap_session):
def wrapper():
leap_session.stop_background_jobs()
reactor.threadpool.stop()
reactor_stop_function()
return wrapper
def _ssl_options(sslkey, sslcert):
with open(sslkey) as keyfile:
pkey = crypto.load_privatekey(crypto.FILETYPE_PEM, keyfile.read())
with open(sslcert) as certfile:
cert = crypto.load_certificate(crypto.FILETYPE_PEM, certfile.read())
acceptable = ssl.AcceptableCiphers.fromOpenSSLCipherString(
u'ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:!RC4:HIGH:!MD5:!aNULL:!EDH')
options = ssl.CertificateOptions(privateKey=pkey,
certificate=cert,
method=SSL.TLSv1_2_METHOD,
acceptableCiphers=acceptable)
return options
def initialize():
args = parse_user_agent_args()
init_logging(debug=args.debug)
if args.register:
register(*args.register)
sys.exit(0)
loading_app = reactor.listenTCP(args.port, Site(LoadingResource()), interface=args.host)
deferred = deferToThread(
lambda: initialize_leap(
args.leap_provider_cert,
args.leap_provider_cert_fingerprint,
args.config_file,
args.dispatcher,
args.dispatcher_stdin,
args.leap_home))
deferred.addCallback(
lambda leap_session: start_user_agent(
loading_app,
args.host,
args.port,
args.sslkey,
args.sslcert,
args.leap_home,
leap_session))
reactor.run()
|
