Making Minimalist HTTPS Server in C on Linux

Поділитися
Вставка

КОМЕНТАРІ • 66

  • @nirlichtman
    @nirlichtman  Рік тому +11

    - Notice that if you run the server quickly after running it before, bind might fail since the port may not be cleaned up yet, so I recommend running the server with ltrace/strace so you can actually see what is going on under the hood, my new video about the importance of error handling in c also talks about this specifically

    • @enesalbay9707
      @enesalbay9707 6 місяців тому

      Add setsockopt(sockfd, SOL_SOCKET, SO_REUSEADDR, &(int){1}, sizeof(int)) before bind to overcome this problem.

  • @space9824
    @space9824 Рік тому +32

    These videos are so insightful, especially the way you show the man pages where you can find all this information. I literally didn't even know C library functions had man pages until I starting watching your content.

  • @iamspeed1405
    @iamspeed1405 Рік тому +18

    Geez I opened the video and BOOM! it was straight into the action no silly 1 minute long intro. Love it ❤!

  • @Dysl3xicDog
    @Dysl3xicDog 11 місяців тому +10

    The way you put the documentation digging into the videos is super helpful. The thing that's lost on me at this point is how you discover the functions you need to use before you hit the docs for each item.

    • @nirlichtman
      @nirlichtman  11 місяців тому +2

      Thanks for the feedback I will try talking more about the discovery as well on future videos, check out my man pages tips video for general tips about finding man pages.

  • @bromophenol2469
    @bromophenol2469 Рік тому +7

    Nir, your distinct no nonsense style is very refreshing

  • @Maagiicc
    @Maagiicc Рік тому +18

    Thanks for the longer video and more complicated program. Do you have any plans on doing anything non-minimalist?

    • @nirlichtman
      @nirlichtman  Рік тому +11

      Yes, I am planning on perhaps fully implementing one of the unix commands :)

    • @StefanWelebny
      @StefanWelebny Рік тому +2

      Could you show how to handle concurrent requests and concurrent listeners?

    • @AlTiri-rd7ly
      @AlTiri-rd7ly Рік тому

      ​​@reapiu8316yeah I would love to see that, although I really loke these semi short videos.

    • @hermessantos181
      @hermessantos181 Рік тому

      awesome!@reapiu8316

  • @Kim-e4g4w
    @Kim-e4g4w Рік тому

    Wow I guess Christmas came early this year. This opens up many possibilities with all kinds of web services. Only imagination is the limit! Thank you soo much!

  • @spacewad8745
    @spacewad8745 Рік тому +1

    Ah you've read my mind! I just started messing around with sockets and was about to try my hand at developing a simple http server.

  • @ItsCOMMANDer_
    @ItsCOMMANDer_ Рік тому +2

    My wish has been heared, thx

  • @luadicrous
    @luadicrous 11 місяців тому

    I found out that if you hold F5 in the browser for a while it can make it 'crash'. It's not a real crash however, it's the SIGPIPE signal that is being fired and it happens when a pipe gets broken. You can capture this event with the 'signal' function if you are on Unix based systems, but no idea what the equivalent on Windows is. Once you've captured this signal, you can just ignore it and the server keeps running.

  • @Temon0942
    @Temon0942 Рік тому

    Hey bro your videos are amazing keep making them

  • @rogo7330
    @rogo7330 Рік тому +1

    I believe it's better to use separate TLS reverse proxies that will do TLS stuff and then pass the connection to next program by just connecting to localhost port or unix socket. It makes programs much simplier and can become a problem only on high load servers, where you don't want too many calls to write and read from programs because it's more user-kernel context switching.

    • @nirlichtman
      @nirlichtman  Рік тому +2

      I agree about this point, for actual production it would be better to separate the HTTP server and the SSL server, or to just use nginx :)

  • @davidgillies620
    @davidgillies620 Рік тому +1

    If you need to implement a production-grade HTTPS server in C++, Vinnie Falco's Beast library is the way to go.

  • @pavfrang
    @pavfrang Рік тому

    WOW - that is original hack stuff. Love it. Carry on!

  • @quezinmark8225
    @quezinmark8225 Рік тому

    Making short videos are good but giving overview about what you're going to do would make it better I mean explaining flow!

  • @pogchamper228
    @pogchamper228 3 місяці тому

    How do you know, or where did you learned which functions to use? I also use man pages but always struggle to begin with.

  • @tan4296
    @tan4296 Рік тому

    I really like your thumbnails

  • @hulio3994
    @hulio3994 5 місяців тому

    I love your workflow, I'd really love to program using man pages and simple text editors but I always feel stuck when programming without a proper IDE. How did you practice C programming when you started?

    • @nirlichtman
      @nirlichtman  5 місяців тому +1

      Thanks! I started with IDEs (mostly Visual Studio) and then gradually moved over to Vim, first by using a Vim plugin on the IDE and then after feeling comfortable enough, I moved to Vim vanilla.

  • @Humble_Electronic_Musician
    @Humble_Electronic_Musician Рік тому +1

    This is good stuff!
    Awesome!

  • @mrlistenerr
    @mrlistenerr 7 місяців тому

    Well, wouldn't it be better to send a corresponding HTTP error code (instead of 200 OK each time) when you return a "not found" error?

  • @sashakuznechkin
    @sashakuznechkin Рік тому

    Thanks for video! Happy new year!

  • @Garfield_Minecraft
    @Garfield_Minecraft 2 місяці тому +1

    Can I follow the tutorial on windows?
    and can you make a tutorial that the user can be host? kinda like a room system or group chat with this would be cool

    • @nirlichtman
      @nirlichtman  2 місяці тому

      I haven't tested on Windows, but I assume that it would be a similar deal, I do have a video of making a simple http server with winsock, so that can be a starting point. About the second point, I have a video about making a simple HTTP chat system :)

  • @justcurious1940
    @justcurious1940 6 місяців тому

    Great videos bro, Thanks.

  • @dkkogmaw1311
    @dkkogmaw1311 7 місяців тому

    How can you link it static … im stuck at this point

  • @honeymak
    @honeymak 9 місяців тому

    i just wonder how you know the sequence of function calls beforehand

    • @nirlichtman
      @nirlichtman  9 місяців тому +1

      On most cases the man pages/docs are sufficient to help me do the preliminary research, but specifically in the case of OpenSSL, which has quite poor docs in my opinion, I had to also do online research

  • @samjiman
    @samjiman Рік тому +1

    Nice videos. What is the window manager you are using on Windows?

    • @nirlichtman
      @nirlichtman  Рік тому +1

      I am using dwm-win32, more info about the setup in the welcome link in the channel description

    • @samjiman
      @samjiman Рік тому

      @@nirlichtman Thanks, Nir.

  • @ttrss
    @ttrss Рік тому +11

    aw your not writing a c implement of tls in 15 minutes

  • @ItsCOMMANDer_
    @ItsCOMMANDer_ Рік тому

    Hey Nir, i used openssl commandline utility to generate key and cert. i changed "SSL_use_certificate_chain_file(ssl, "fullChain");" to "SSL_use_certificate_file(ssl, "key.pem", SSL_FILETYPE_PEM);" and ajusted file name.I compiled and ran it gave me an "The connection was reset
    The connection to the server was reset while the page was loading." error. can you help?

    • @nirlichtman
      @nirlichtman  Рік тому

      Is that the error you got from the web browser? Reason is probably because the certificate is self-signed, and the browser is rejecting the connection, if you want to try out the server you can use wget with the ignore cert option or try configurating the browser to accept the self-signed cert. If you want it to work out of the box you need to get a certificate signed by a certificate authority, on my setup in the video for example I used my certificate and private generated by let's encrypt which is a service that lets you easily get a certificate for your server

    • @ItsCOMMANDer_
      @ItsCOMMANDer_ Рік тому

      ​@@nirlichtman, update, i added an printf debug statement to nearly every function call wich prints its return value, and i found out that `bind()` returns an error (-1) when it doesnt work and success if it works (to download) could the reason be that in the code (because its not "production ready") an "un-bind" is missing?

    • @Acorn_Anomaly
      @Acorn_Anomaly Рік тому

      @@ItsCOMMANDer_ There's no need to "unbind". The binding of the socket is released when the server socket is closed.
      If bind() is returning -1, then as you said, something is going wrong. When you get a failure, you should add code to print out the value of the errno special variable, to see what the error is. (See the bind(2) man page for more info.)

  • @kimlehtinen
    @kimlehtinen Рік тому

    Interesting! Is this what NGINX does under the hood when configured as reverse proxy with SSL?

    • @nirlichtman
      @nirlichtman  Рік тому

      I haven't explored the NGINX source code yet, but I assume it works pretty similar, I am pretty sure it also uses OpenSSL :)

    • @soniablanche5672
      @soniablanche5672 Рік тому

      I don't think it's as simple as that. NGINX could be running TLS with http version 2 and it is redirecting the http request to a local web server that is not using TLS and is using http version 1.

  • @bob-007
    @bob-007 Рік тому +1

    great stuff thanks, any chance of something similar but in Python?

  • @MarcoLeong
    @MarcoLeong Рік тому

    What is that {0} terminator for?

    • @nirlichtman
      @nirlichtman  Рік тому +1

      That is standard C syntax to initialize all array members with 0, as long as you are not using an old/weird C compiler, it works nicely :) devdocs.io/c/language/array_initialization

  • @erbenton07
    @erbenton07 11 місяців тому

    Hi, what editor are you using? I'd like to try it out.

    • @nirlichtman
      @nirlichtman  11 місяців тому

      I am using Vim, many of my older videos are about it if you want more info

  • @DrDulos
    @DrDulos 10 місяців тому

    Thanks, good work

  • @zedeleyici.1337
    @zedeleyici.1337 3 місяці тому

    I liked that.

  • @yargonslavter
    @yargonslavter Рік тому +1

    Narration: Great
    Content: Great
    Code Editor: C'mon man, use Visual Code

    • @nirlichtman
      @nirlichtman  Рік тому

      My favorite editor is Vim, in some of my older videos I explain why :)

  • @leonss2356
    @leonss2356 Рік тому

    noice

  • @rian0xFFF
    @rian0xFFF Рік тому

    Do some basic OpenGL stuff or some UI

    • @nirlichtman
      @nirlichtman  Рік тому +1

      I am planning a future UI video about making a minimalist paint app for Windows. OpenGL is a good idea, noted :)

    • @rian0xFFF
      @rian0xFFF Рік тому

      @@nirlichtman 😊

  • @rajveer_2009
    @rajveer_2009 9 місяців тому

    upgrade your vim

  • @rickdearman9992
    @rickdearman9992 Рік тому

    It annoys me you use void for main. That is very C++ not C. 😂

    • @benhetland576
      @benhetland576 11 місяців тому +2

      It is not very C++ either.