From 3db56b2d83f73a2763a6ad2a0a505bc646ec0573 Mon Sep 17 00:00:00 2001
From: "James E.H. Turner" <jturner@gemini.edu>
Date: Wed, 28 Sep 2016 17:53:53 -0300
Subject: Very simple script to serve local tarballs for the build process with
 HTTPS.

---
 scripts/ac_source_server | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100755 scripts/ac_source_server

diff --git a/scripts/ac_source_server b/scripts/ac_source_server
new file mode 100755
index 0000000..d7fb0f3
--- /dev/null
+++ b/scripts/ac_source_server
@@ -0,0 +1,34 @@
+#!/usr/bin/python
+
+# A minimal Web server to provide local source tarballs to AstroConda package
+# builds, using the same hostname alias ("astroconda-source") across sites.
+#
+# To get this working:
+# - Define an "astroconda-source" alias for the host where the local tarballs
+#   are located.
+# - Place an SSL certificate file, "astroconda.pem", in the same directory as
+#   the source tarballs.
+# - Start this script in the directory containing the source tarballs.
+# - Point each client build machine to a copy of the SSL certificate like so:
+#     conda config --set ssl_verify /path/to/astroconda.pem.
+
+import BaseHTTPServer
+import SimpleHTTPServer
+import ssl
+
+# It seems common practice to use port 4443 for unprivileged HTTPS services but
+# 4440 is unassigned and less likely to conflict with any other HTTPS service:
+port=4440
+
+httpd = BaseHTTPServer.HTTPServer(
+    ('', port), SimpleHTTPServer.SimpleHTTPRequestHandler
+)
+
+httpd.socket = ssl.wrap_socket(
+    httpd.socket,
+    certfile='astroconda.pem',    # cert. kept in CWD with source tarballs
+    server_side=True
+)
+
+httpd.serve_forever()
+
-- 
cgit