cHTTP/examples/server/060_virtual_hosts_over_https.c

#include <stddef.h>
#include <chttp.h>

// This is an example of how to serve different websites
// over a single HTTPS server instance.

int setup_test_certificates(void);

int main(void)
{
    http_global_init();

    // To test this program you need to add the following
    // lines to your hosts file:
    //
    //   127.0.0.1    websiteA.com
    //   127.0.0.1    websiteB.com
    //   127.0.0.1    websiteC.com
    //
    // That you can find at /etc/hosts on Linux and
    // C:\Windows\System32\drivers\etc\hosts on Windows

    // First, create three certificates for the domains:
    //
    //   websiteA.com
    //   websiteB.com
    //   websiteC.com
    //
    // This will create a number of certificate files
    // and private key files
    //
    //   websiteA_cert.pem   websiteA_key.pem
    //   websiteB_cert.pem   websiteB_key.pem
    //   websiteC_cert.pem   websiteC_key.pem
    //
    // Of course this is just for testing. It is expected
    // you have your own.
    int ret = setup_test_certificates();
    if (ret < 0)
        return -1;

    // First, set up an HTTPS server instance with one
    // of the certificate. This will act as default certificate
    // when ecrypted connections don't target a specific domain.
    HTTP_Server *server = http_server_init_ex(
        HTTP_STR("127.0.0.1"), 8080, 8443,
        HTTP_STR("websiteA_cert.pem"),
        HTTP_STR("websiteA_key.pem")
    );
    if (server == NULL)
        return -1;

    // Then we can add an arbitrary number of additional
    // certificates using the add_website function

    ret = http_server_add_website(server,
        HTTP_STR("websiteB.com"),
        HTTP_STR("websiteB_cert.pem"),
        HTTP_STR("websiteB_key.pem")
    );
    if (ret < 0)
        return -1;

    ret = http_server_add_website(server,
        HTTP_STR("websiteC.com"),
        HTTP_STR("websiteC_cert.pem"),
        HTTP_STR("websiteC_key.pem")
    );
    if (ret < 0)
        return -1;

    // Now the server is ready to accept incoming HTTP
    // or HTTPS connections.
    //
    // Note that the add_website function is only used
    // to serve the correct certificate to the client.
    // The HTTP request itself may very well hold a
    // different domain name in the host header:
    //
    // [client]                           [server]
    //    |                                  |
    //    |   TLS hanshake to domain1.com    |
    //    | -------------------------------> |
    //    |                                  |
    //    |       cert for domain1.com       |
    //    | <------------------------------- |
    //    |                                  |
    //    |    HTTP request to domain2.com   |
    //    |   over the encrypted connection  |
    //    |   established with domain1.com   |
    //    | -------------------------------> |
    //    |                                  |
    //    |      response as domain2.com     |
    //    | <------------------------------- |
    //    |                                  |

    for (;;) {

        HTTP_Request *req;
        HTTP_ResponseBuilder builder;
        ret = http_server_wait(server, &req, &builder);
        if (ret < 0)
            break;

        if (http_match_host(req, HTTP_STR("websiteB.com"), 8080) ||
            http_match_host(req, HTTP_STR("websiteB.com"), 8443)) {

            http_response_builder_status(builder, 200);
            http_response_builder_body(builder, HTTP_STR("Hello from websiteB.com!"));
            http_response_builder_done(builder);

        } else if (http_match_host(req, HTTP_STR("websiteC.com"), 8080) ||
                   http_match_host(req, HTTP_STR("websiteC.com"), 8443)) {

            http_response_builder_status(builder, 200);
            http_response_builder_body(builder, HTTP_STR("Hello from websiteC.com!"));
            http_response_builder_done(builder);

        } else {

            // Serve websiteA.com by default to be consistent
            // with the certificate setup

            http_response_builder_status(builder, 200);
            http_response_builder_body(builder, HTTP_STR("Hello from websiteA.com!"));
            http_response_builder_done(builder);
        }
    }

    http_server_free(server);
    http_global_free();
    return 0;
}

int setup_test_certificates(void)
{
    int ret = http_create_test_certificate(
        HTTP_STR("IT"),
        HTTP_STR("Organization A"),
        HTTP_STR("websiteA.com"),
        HTTP_STR("websiteA_cert.pem"),
        HTTP_STR("websiteA_key.pem")
    );
    if (ret < 0)
        return -1;

    ret = http_create_test_certificate(
        HTTP_STR("IT"),
        HTTP_STR("Organization B"),
        HTTP_STR("websiteB.com"),
        HTTP_STR("websiteB_cert.pem"),
        HTTP_STR("websiteB_key.pem")
    );
    if (ret < 0)
        return -1;

    ret = http_create_test_certificate(
        HTTP_STR("IT"),
        HTTP_STR("Organization C"),
        HTTP_STR("websiteC.com"),
        HTTP_STR("websiteC_cert.pem"),
        HTTP_STR("websiteC_key.pem")
    );
    if (ret < 0)
        return -1;

    return 0;
}