TLS client certificates

[tofuproxy.git] / cmd / tofuproxy / main.go

diff --git a/cmd/tofuproxy/main.go b/cmd/tofuproxy/main.go
index 5335ffb0f911358a647a23d562a97a554f190f74..8a0be00267f4cc17c191ecbea841c65aac0fd3bb 100644 (file)
--- a/cmd/tofuproxy/main.go
+++ b/cmd/tofuproxy/main.go
@@ -33,6 +33,7 @@ func main() {
        prvPath := flag.String("key", "prv.pem", "Path to server PKCS#8 private key")
        bind := flag.String("bind", "[::1]:8080", "Bind address")
        certs := flag.String("certs", "./certs", "Directory with pinned certificates")
+       ccerts := flag.String("ccerts", "./ccerts", "Directory with client certificates")
        dnsSrv := flag.String("dns", "[::1]:53", "DNS server")
        fifosDir := flag.String("fifos", "fifos", "Directory with FIFOs")
        notai := flag.Bool("notai", false, "Do not prepend TAI64N to logs")
@@ -53,6 +54,7 @@ func main() {
        fifos.FIFOs = *fifosDir
        fifos.Init()
        tofuproxy.Certs = *certs
+       tofuproxy.CCerts = *ccerts
        tofuproxy.DNSSrv = *dnsSrv
        tofuproxy.CACert = caCert
        tofuproxy.CAPrv = caPrv
@@ -65,7 +67,7 @@ func main() {
                Handler:      &tofuproxy.Handler{},
                TLSNextProto: tofuproxy.TLSNextProtoS,
        }
-       log.Println("listening:", *bind, "certs:", *certs)
+       log.Println("listening:", *bind, "dns:", *dnsSrv, "certs:", *certs, "ccerts:", *ccerts)
        if err := srv.Serve(ln); err != nil {
                log.Fatalln(err)
        }