[proxy] Add tls support

Caveats:
* TLS files must be present on the target server (and readable)
* TLS file paths cannot contain spaces
* TLS file paths must be absolute (i.e. cannot be relative)
* Bash argument parsing is terrible

prog/weaveproxy/main.go

@@ -16,13 +16,25 @@ var (
 )
 
 func main() {
-	var target, listen string
-	var withDNS, withIPAM, debug, justVersion bool
+	var (
+		debug       bool
+		justVersion bool
+		listen      string
+		target      string
+		tlsConfig   proxy.TLSConfig
+		withDNS     bool
+		withIPAM    bool
+	)
 
 	getopt.BoolVarLong(&debug, "debug", 'd', "log debugging information")
 	getopt.BoolVarLong(&justVersion, "version", 0, "print version and exit")
-	getopt.StringVar(&target, 'H', fmt.Sprintf("docker daemon URL to proxy (default %s)", defaultTarget))
 	getopt.StringVar(&listen, 'L', fmt.Sprintf("address on which to listen (default %s)", defaultListen))
+	getopt.StringVar(&target, 'H', fmt.Sprintf("docker daemon URL to proxy (default %s)", defaultTarget))
+	getopt.StringVarLong(&tlsConfig.CACert, "tlscacert", 0, "Trust certs signed only by this CA")
+	getopt.StringVarLong(&tlsConfig.Cert, "tlscert", 0, "Path to TLS certificate file")
+	getopt.BoolVarLong(&tlsConfig.Enabled, "tls", 0, "Use TLS; implied by --tlsverify")
+	getopt.StringVarLong(&tlsConfig.Key, "tlskey", 0, "Path to TLS key file")
+	getopt.BoolVarLong(&tlsConfig.Verify, "tlsverify", 0, "Use TLS and verify the remote")
 	getopt.BoolVarLong(&withDNS, "with-dns", 'w', "instruct created containers to use weaveDNS as their nameserver")
 	getopt.BoolVarLong(&withIPAM, "with-ipam", 'i', "automatically allocate addresses for containers without a WEAVE_CIDR")
 	getopt.Parse()
@@ -32,6 +44,10 @@ func main() {
 		os.Exit(0)
 	}
 
+	if debug {
+		InitDefaultLogging(true)
+	}
+
 	if target == "" {
 		target = defaultTarget
 	}
@@ -40,18 +56,18 @@ func main() {
 		listen = defaultListen
 	}
 
-	if debug {
-		InitDefaultLogging(true)
-	}
-
-	p, err := proxy.NewProxy(version, target, listen, withDNS, withIPAM)
+	p, err := proxy.NewProxy(
+		version,
+		target,
+		listen,
+		withDNS,
+		withIPAM,
+		&tlsConfig,
+	)
 	if err != nil {
 		Error.Fatalf("Could not start proxy: %s", err)
 	}
 
-	Info.Printf("Listening on %s", listen)
-	Info.Printf("Proxying %s", target)
-
 	if err := p.ListenAndServe(); err != nil {
 		Error.Fatalf("Could not listen on %s: %s", listen, err)
 	}