2013-10-16

ssl with chicagoboss

https://github.com/evanmiller/ChicagoBoss/wiki/Https-example-setup

--------------------------------------------
boss.config
-----------

    {ssl_enable, true},
    {ssl_options, [
                {cacertfile, "./ssl/EssentialSSLCA_2.crt"},
                {certfile, "./ssl/kcake_tv.crt"},
                {keyfile, "./ssl/privkey.pem"},
                {verify, verify_peer},
                {fail_if_no_peer_cert, false},
                {ciphers, [{rsa, aes_128_cbc, sha}]}
        ]},

* ciphers 를 특정하지 않으면, firefox, chrome, safari에서 ssl 연결이 안됨.

--------------------------------------------
src/*.app.src 의 applications 에 inets, ssl 추가할 것.

deps/boss/priv/rebar/boss_rebar.erl
-----------
change the following 
-boot start_sasl -config boss -s reloader -s boss 
to-boot start_sasl -config boss -s reloader -s inets -s ssl -s boss 
on line 136 for regular (production) start and/or line 160 for development start.