ssl.go

package main

import (
	"crypto/tls"
	"log"
	"net/http"
)

func redirectSSL(rsp http.ResponseWriter, req *http.Request) {
	target := "https://" + req.Host + req.URL.Path
	if len(req.URL.RawQuery) > 0 {
		target += "?" + req.URL.RawQuery
	}
	http.Redirect(rsp, req, target,
		http.StatusTemporaryRedirect)
}

func buildSSLServer() http.Server {
	cfg := &tls.Config{}

	// remove the following line and configure the certificates
	log.Fatal("Please configure uberproxy SSL certificates at infra/uberproxy/ssl.go")
	/*
		Example:

		var err error
		cfg.Certificates = make([]tls.Certificate, 3)
		cfg.Certificates[0], err = tls.LoadX509KeyPair(os.Args[2]+"/geegle.org.pem", os.Args[2]+"/geegle.org.key")
		if err != nil {
			log.Fatal(err)
		}
		cfg.Certificates[1], err = tls.LoadX509KeyPair(os.Args[2]+"/corp.geegle.org.pem", os.Args[2]+"/corp.geegle.org.key")
		if err != nil {
			log.Fatal(err)
		}
		cfg.Certificates[2], err = tls.LoadX509KeyPair(os.Args[2]+"/apps.geegle.org.pem", os.Args[2]+"/apps.geegle.org.key")
		if err != nil {
			log.Fatal(err)
		}
	*/

	cfg.BuildNameToCertificate()

	server := http.Server{
		Addr:      ":443",
		Handler:   WrapHandlerWithLogging(http.HandlerFunc(handleUP)),
		TLSConfig: cfg,
	}
	return server
}