add tls support client

conf/config.default.ini

@@ -7,4 +7,7 @@ root_key=e3w_test
 dir_value=
 addr=etcd:2379,etcd:22379,etcd:32379
 username=
-password=
+password=
+cert_file=
+key_file=
+ca_file=

conf/config.go

@@ -12,6 +12,9 @@ type Config struct {
 	EtcdEndPoints []string
 	EtcdUsername  string
 	EtcdPassword  string
+	CertFile      string
+	KeyFile       string
+	CAFile        string
 }
 
 func Init(filepath string) (*Config, error) {
@@ -32,6 +35,9 @@ func Init(filepath string) (*Config, error) {
 	c.EtcdEndPoints = etcdSec.Key("addr").Strings(",")
 	c.EtcdUsername = etcdSec.Key("username").Value()
 	c.EtcdPassword = etcdSec.Key("password").Value()
+	c.CertFile = etcdSec.Key("cert_file").Value()
+	c.KeyFile = etcdSec.Key("key_file").Value()
+	c.CAFile = etcdSec.Key("ca_file").Value()
 
 	return c, nil
 }

e3ch/e3ch.go

@@ -1,16 +1,33 @@
 package e3ch
 
 import (
+	"crypto/tls"
 	"github.com/coreos/etcd/clientv3"
+	"github.com/coreos/etcd/pkg/transport"
 	"github.com/soyking/e3ch"
 	"github.com/soyking/e3w/conf"
 )
 
 func NewE3chClient(config *conf.Config) (*client.EtcdHRCHYClient, error) {
+	var tlsConfig *tls.Config
+	var err error
+	if config.CertFile != "" && config.KeyFile != "" && config.CAFile != "" {
+		tlsInfo := transport.TLSInfo{
+			CertFile:      config.CertFile,
+			KeyFile:       config.KeyFile,
+			TrustedCAFile: config.CAFile,
+		}
+		tlsConfig, err = tlsInfo.ClientConfig()
+		if err != nil {
+			return nil, err
+		}
+	}
+
 	clt, err := clientv3.New(clientv3.Config{
 		Endpoints: config.EtcdEndPoints,
 		Username:  config.EtcdUsername,
 		Password:  config.EtcdPassword,
+		TLS:       tlsConfig,
 	})
 	if err != nil {
 		return nil, err