X-Git-Url: http://www.git.stargrave.org/?a=blobdiff_plain;f=cmd%2Ftofuproxy%2Fmain.go;fp=cmd%2Ftofuproxy%2Fmain.go;h=8a0be00267f4cc17c191ecbea841c65aac0fd3bb;hb=678feeff35d0ff6dff2908ba19f99c8324046190;hp=5335ffb0f911358a647a23d562a97a554f190f74;hpb=245f8770d1815ef2adc14b0ce7c7bd22c13b3873;p=tofuproxy.git

diff --git a/cmd/tofuproxy/main.go b/cmd/tofuproxy/main.go
index 5335ffb..8a0be00 100644
--- a/cmd/tofuproxy/main.go
+++ b/cmd/tofuproxy/main.go
@@ -33,6 +33,7 @@ func main() {
 	prvPath := flag.String("key", "prv.pem", "Path to server PKCS#8 private key")
 	bind := flag.String("bind", "[::1]:8080", "Bind address")
 	certs := flag.String("certs", "./certs", "Directory with pinned certificates")
+	ccerts := flag.String("ccerts", "./ccerts", "Directory with client certificates")
 	dnsSrv := flag.String("dns", "[::1]:53", "DNS server")
 	fifosDir := flag.String("fifos", "fifos", "Directory with FIFOs")
 	notai := flag.Bool("notai", false, "Do not prepend TAI64N to logs")
@@ -53,6 +54,7 @@ func main() {
 	fifos.FIFOs = *fifosDir
 	fifos.Init()
 	tofuproxy.Certs = *certs
+	tofuproxy.CCerts = *ccerts
 	tofuproxy.DNSSrv = *dnsSrv
 	tofuproxy.CACert = caCert
 	tofuproxy.CAPrv = caPrv
@@ -65,7 +67,7 @@ func main() {
 		Handler:      &tofuproxy.Handler{},
 		TLSNextProto: tofuproxy.TLSNextProtoS,
 	}
-	log.Println("listening:", *bind, "certs:", *certs)
+	log.Println("listening:", *bind, "dns:", *dnsSrv, "certs:", *certs, "ccerts:", *ccerts)
 	if err := srv.Serve(ln); err != nil {
 		log.Fatalln(err)
 	}