Enable multiple SSL certificates (issue 27)

src/ssl.lua

@@ -74,25 +74,39 @@ local function newcontext(cfg)
    -- Mode
    succ, msg = context.setmode(ctx, cfg.mode)
    if not succ then return nil, msg end
-   -- Load the key
+   -- Wrap singular certificate, key, etc in tables if necessary
-   if cfg.key then
+   for _, prop in pairs({ "key", "certificate", "password" }) do
-      if cfg.password and
+      if not cfg[prop .. "s"] then
-         type(cfg.password) ~= "function" and
+         if cfg[prop] then
-         type(cfg.password) ~= "string"
+            cfg[prop .. "s"] = { cfg[prop] }
-      then
+         else
-         return nil, "invalid password type"
+            cfg[prop .. "s"] = {}
+         end
       end
-      succ, msg = context.loadkey(ctx, cfg.key, cfg.password)
-      if not succ then return nil, msg end
    end
-   -- Load the certificate
+   for i, certificate in pairs(cfg.certificates) do
-   if cfg.certificate then
+      local password = cfg.passwords[i]
-     succ, msg = context.loadcert(ctx, cfg.certificate)
+      local key = cfg.keys[i]
-     if not succ then return nil, msg end
+      -- Load the key
-     if cfg.key and context.checkkey then
+      if key then
-       succ = context.checkkey(ctx)
+         if password and
-       if not succ then return nil, "private key does not match public key" end
+            type(password) ~= "function" and
-     end
+            type(password) ~= "string"
+         then
+            return nil, "invalid password type"
+         end
+         succ, msg = context.loadkey(ctx, key, password)
+         if not succ then return nil, msg end
+      end
+      -- Load the certificate(s)
+      if certificate then
+        succ, msg = context.loadcert(ctx, certificate)
+        if not succ then return nil, msg end
+        if key and context.checkkey then
+          succ = context.checkkey(ctx)
+          if not succ then return nil, "private key does not match public key" end
+        end
+      end
    end
    -- Load the CA certificates
    if cfg.cafile or cfg.capath then