Haskell Warp/Wai and HTTPS -- how to make them work?

Question

I have a basic hello-world application in Haskell Servant and Warp. This is not real code but for the sake of simplicity let's say I'm using it:

import Network.Wai
import Network.Wai.Handler.Warp
import Servant


personAPI :: Proxy PersonAPI
personAPI = Proxy

server :: Server PersonAPI
server = return people

app :: Application
app = serve personAPI server

serveApp :: IO ()
serveApp = run 80 app

It works fine on a server. With http.

I'm not using nginx or apache, I run it as-is and at this point it's fine for me.

But with https it won't load the page. I've installed https certificate but I gathered that I should somehow setup warp/wai to use it, because by default it won't use it. There's shortage of information about this - warp/wai and SSL, I haven't found anything. Could anyone help me?

score 12 · Accepted Answer · answered Apr 17 '16 at 11:43

12

I guess the easiest way is using the warp-tls library - settup your certificate files in the TLSSettings (I would try tlsSettings first) and use runTLS instead of run:

serveApp :: IO ()
serveApp = do
   let tls = tlsSettings "pathToCert" "pathToKey"
   runTLS tls (setPort 443 defaultSettings) app

answered Apr 17 '16 at 11:43

Random Dev

51,810
9
92
119

you know everything! – Jushiti Apr 17 '16 at 11:53
but at warp-tls it says "Support for SSL is now obsoleted. " and SSL is what I need. – Jushiti Apr 17 '16 at 11:54
I can assure you I know very little (beside how to enter queries into Hayoo ;)) – Random Dev Apr 17 '16 at 11:55
I've never heard of Hayoo before, that's not me. – Jushiti Apr 17 '16 at 11:57
well maybe they moved it somewhere else but it should still work – Random Dev Apr 17 '16 at 11:58
it's like Hoogle but searches more packages by default – Random Dev Apr 17 '16 at 11:59
1

I looked around a bit and I think the comment in the package is a bit misleading: http://www.yesodweb.com/blog/2015/07/http2 (if I get it correctly it means that current browsers will establish TLS over the headers so you probably don't need the open 443 port anymore and can use 80(?) - as I said: I am no expert on this) – Random Dev Apr 17 '16 at 12:08

Haskell Warp/Wai and HTTPS -- how to make them work?

1 Answers1