fuuu

Author: JeanSebTr

app.js

@@ -0,0 +1,38 @@
+
+var http = require('http');
+var tls = require('tls');
+var crypto = require('crypto');
+var fs = require('fs');
+
+var key = fs.readFileSync('./server.key');
+var cert = fs.readFileSync('./server.crt');
+
+// Create an HTTP server
+var srv = http.createServer(function (req, res) {
+  res.writeHead(200, {'Content-Type': 'text/plain'});
+  res.end('okay');
+});
+srv.on('upgrade', function(req, socket, head) {
+  socket.write('HTTP/1.1 101 Web Socket Protocol Handshake\r\n' +
+               'Upgrade: WebSocket\r\n' +
+               'Connection: Upgrade\r\n' +
+               '\r\n');
+
+  console.log('Got an upgrade request!');
+  var pair = tls.createSecurePair(crypto.createCredentials({
+      key: key,
+      cert: cert
+  }), true, false);
+  // echo back
+  socket.pipe(pair.encrypted);
+  pair.encrypted.pipe(socket);
+  pair.cleartext.pipe(pair.cleartext);
+  pair.on('secure', function() {
+      console.log('Dude that works!');
+  });
+});
+
+// now that server is running
+srv.listen(process.env.PORT, function() {
+    console.log('server started on port %d', srv.address().port);
+});

client.js

@@ -0,0 +1,45 @@
+
+var http = require('http');
+var tls = require('tls');
+var crypto = require('crypto');
+var fs = require('fs');
+
+var key = fs.readFileSync('./server.key');
+var cert = fs.readFileSync('./server.crt');
+
+// make a request
+var options = {
+    port: 80,
+    host: 'jeansebtr.upgrade.jit.su',
+    headers: {
+        'Connection': 'Upgrade',
+        'Upgrade': 'websocket'
+    }
+};
+
+var req = http.request(options);
+req.end();
+
+req.on('upgrade', function(res, socket, upgradeHead) {
+    console.log('got upgraded!');
+
+    var pair = tls.createSecurePair(crypto.createCredentials({
+      key: key,
+      cert: cert
+    }), false, false);
+    // ...
+    socket.pipe(pair.encrypted);
+    pair.encrypted.pipe(socket);
+
+    pair.cleartext.pipe(process.stdout);
+    process.stdin.pipe(pair.cleartext);
+    process.stdin.resume();
+    pair.on('secure', function() {
+      console.log('-> Dude that works!');
+    });
+});
+
+req.on('error', function(err) {
+    console.error('WTF:', err);
+    console.error(err.stack);
+});

package.json

@@ -0,0 +1,14 @@
+{
+  "name": "upgrade",
+  "version": "0.0.1-5",
+  "main": "index.js",
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1",
+    "start": "app.js"
+  },
+  "license": "BSD",
+  "subdomain": "jeansebtr.upgrade",
+  "engines": {
+    "node": "0.8.x"
+  }
+}

server.crt

@@ -0,0 +1,16 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

server.csr

@@ -0,0 +1,12 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

server.key

@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----