enable TLS as option

Former-commit-id: 508a5ad64d9b75f34474ab631a6126db78618ec4 [formerly 0f4d3525998db6a60343c64e40589cf7ddad804c] [formerly 1d29ed0259dff609ee49c384d9ed80bd1057ae0a [formerly e927b6861b59f72be54822fde9dc674e748aeba4 [formerly ec2c759178]]]
Former-commit-id: 9f3fafe9d9b9e5965fe2854b748579042e9f7639 [formerly 3d1a563666349cdef7e96d0e4dc2bf1ce7024511]
Former-commit-id: fe0b27a75cf202add6ba8b2da4a793414588c868
Former-commit-id: 41a6745016

main.go

@@ -42,6 +42,7 @@ run this to start the server and then visit localhost at the port you specify
 Example: 'cowyo localhost'
 Example: 'cowyo -p :8080 localhost'
 Example: 'cowyo -db /var/lib/cowyo/db.bolt localhost'
+Example: 'cowyo -p :8080 -crt ssl/server.crt -key ssl/server.key localhost'
 Options:`)
 		flag.CommandLine.PrintDefaults()
 	}
@@ -64,5 +65,10 @@ Options:`)
 	r.GET("/:title", editNote)
 	r.GET("/:title/*option", everythingElse)
 	r.DELETE("/listitem", deleteListItem)
-	r.Run(RuntimeArgs.Port)
+	if RuntimeArgs.ServerCRT != "" && RuntimeArgs.ServerKey != "" {
+		r.RunTLS(RuntimeArgs.Port, RuntimeArgs.ServerCRT, RuntimeArgs.ServerKey)
+	} else {
+		log.Println("No crt/key found, running non-https")
+		r.Run(RuntimeArgs.Port)
+	}
 }

ssl/README.md

@@ -0,0 +1,10 @@
+# To create sample keys:
+
+```
+openssl genrsa -out server.key 2048
+openssl req -new -x509 -key server.key -days 3650 -nodes -out server.crt -keyout server.crt
+```
+
+## TODO
+
+* check if ed25519 keys work