fix: add default TLS cert

We need at least a single TLS cert or else the TLS listener will not
properly respond to TLS requests causing the client to timeout.

Author: chetan

.gitignore

@@ -2,6 +2,7 @@
 *.o
 *.a
 *.so
+bin/vproxy/__debug_bin
 
 # Folders
 _obj

logged_handler.go

@@ -12,12 +12,18 @@ import (
 	"time"
 )
 
+var defaultTLSHost = "vproxy.local"
+
 // LoggedHandler is an http.Server implementation which multiplexes requests to the
 // vhost backends (via a handler) and logs each request.
 type LoggedHandler struct {
 	*http.ServeMux
 	VhostLogListeners map[string]chan string
 	vhostMux          *VhostMux
+
+	defaultHost string
+	defaultCert string
+	defaultKey  string
 }
 
 // NewLoggedHandler wraps the given handler with a request/response logger
@@ -27,10 +33,23 @@ func NewLoggedHandler(vm *VhostMux) *LoggedHandler {
 		VhostLogListeners: make(map[string]chan string),
 		vhostMux:          vm,
 	}
+
+	lh.defaultHost = defaultTLSHost
+	lh.createDefaultCert()
+
+	// Map all requests, by default, to the appropriate vhost
 	lh.Handle("/", vm)
 	return lh
 }
 
+func (lh *LoggedHandler) createDefaultCert() {
+	var err error
+	lh.defaultCert, lh.defaultKey, err = MakeCert(lh.defaultHost)
+	if err != nil {
+		log.Fatalf("failed to create default cert for vproxy.local: %s", err)
+	}
+}
+
 func (lh *LoggedHandler) AddVhost(vhost *Vhost, listener chan string) {
 	lh.VhostLogListeners[vhost.Host] = listener
 	lh.vhostMux.Servers[vhost.Host] = vhost
@@ -52,13 +71,24 @@ func (lh *LoggedHandler) DumpServers(w io.Writer) {
 // Create multi-certificate TLS config from vhost config
 func (lh *LoggedHandler) CreateTLSConfig() *tls.Config {
 	cfg := &tls.Config{}
+
+	// Add default internal cert
+	cert, err := tls.LoadX509KeyPair(lh.defaultCert, lh.defaultKey)
+	if err != nil {
+		log.Fatal("failed to load keypair:", err)
+	}
+	cfg.Certificates = append(cfg.Certificates, cert)
+
+	// add cert for each vhost
 	for _, server := range lh.vhostMux.Servers {
 		cert, err := tls.LoadX509KeyPair(server.Cert, server.Key)
 		if err != nil {
 			log.Fatal("failed to load keypair:", err)
 		}
 		cfg.Certificates = append(cfg.Certificates, cert)
 	}
+
+	// build cn and return
 	cfg.BuildNameToCertificate()
 	return cfg
 }