Add native SSL/TLS listener support from @enmand for our new config

irc/config.go

@@ -1,6 +1,7 @@
 package irc
 
 import (
+	"crypto/tls"
 	"errors"
 	"io/ioutil"
 	"log"
@@ -12,6 +13,24 @@ type PassConfig struct {
 	Password string
 }
 
+// SSLListenConfig defines configuration options for listening on SSL
+type SSLListenConfig struct {
+	Cert string
+	Key  string
+}
+
+// Certificate returns the SSL certificate assicated with this SSLListenConfig
+func (conf *SSLListenConfig) Config() (*tls.Config, error) {
+	cert, err := tls.LoadX509KeyPair(conf.Cert, conf.Key)
+	if err != nil {
+		return nil, errors.New("ssl cert+key: invalid pair")
+	}
+
+	return &tls.Config{
+		Certificates: []tls.Certificate{cert},
+	}, err
+}
+
 func (conf *PassConfig) PasswordBytes() []byte {
 	bytes, err := DecodePassword(conf.Password)
 	if err != nil {
@@ -35,6 +54,8 @@ type Config struct {
 		MOTD     string
 	}
 
+	SSLListener map[string]*SSLListenConfig
+
 	Operator map[string]*PassConfig
 
 	Theater map[string]*PassConfig
@@ -60,6 +81,18 @@ func (conf *Config) Theaters() map[Name][]byte {
 	return theaters
 }
 
+func (conf *Config) SSLListeners() map[Name]*tls.Config {
+	sslListeners := make(map[Name]*tls.Config)
+	for s, sslListenersConf := range conf.SSLListener {
+		config, err := sslListenersConf.Config()
+		if err != nil {
+			log.Fatal(err)
+		}
+		sslListeners[NewName(s)] = config
+	}
+	return sslListeners
+}
+
 func LoadConfig(filename string) (config *Config, err error) {
 	data, err := ioutil.ReadFile(filename)
 	if err != nil {

irc/server.go

@@ -2,6 +2,7 @@ package irc
 
 import (
 	"bufio"
+	"crypto/tls"
 	"database/sql"
 	"fmt"
 	"log"
@@ -88,7 +89,7 @@ func NewServer(config *Config) *Server {
 	server.loadChannels()
 
 	for _, addr := range config.Server.Listen {
-		server.listen(addr)
+		server.listen(addr, config.SSLListeners())
 	}
 
 	if config.Server.Wslisten != "" {
@@ -223,13 +224,18 @@ func (server *Server) Run() {
 // listen goroutine
 //
 
-func (s *Server) listen(addr string) {
+func (s *Server) listen(addr string, ssl map[Name]*tls.Config) {
+	config, listenSSL := ssl[NewName(addr)]
+
 	listener, err := net.Listen("tcp", addr)
 	if err != nil {
 		log.Fatal(s, "listen error: ", err)
 	}
 
-	Log.info.Printf("%s listening on %s", s, addr)
+	if listenSSL {
+		listener = tls.NewListener(listener, config)
+	}
+	Log.info.Printf("%s listening on %s. ssl: %t", s, addr, listenSSL)
 
 	go func() {
 		for {
@@ -250,6 +256,7 @@ func (s *Server) listen(addr string) {
 //
 
 func (s *Server) wslisten(addr string) {
+	//TODO(dan): open a https websocket here if ssl/tls details are setup in the config for the wslistener
 	http.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
 		if r.Method != "GET" {
 			Log.error.Printf("%s method not allowed", s)