ref!: supply a full *tls.Config for each connection

cmd/sclient/main.go

@@ -1,6 +1,7 @@
 package main
 
 import (
+	"crypto/tls"
 	"flag"
 	"fmt"
 	"os"
@@ -81,10 +82,14 @@ func main() {
 	sclient := &sclient.Tunnel{
 		RemotePort:   443,
 		LocalAddress: "localhost",
-		InsecureSkipVerify: insecure,
-		ServerName:         servername,
 		Silent:       silent,
+		GetTLSConfig: func() *tls.Config {
+			return &tls.Config{
+				ServerName:         servername,
 				NextProtos:         alpns,
+				InsecureSkipVerify: insecure,
+			}
+		},
 	}
 
 	remote := strings.Split(remotestr, ":")

sclient.go

@@ -16,9 +16,7 @@ type Tunnel struct {
 	RemotePort    int
 	LocalAddress  string
 	LocalPort     int
-	InsecureSkipVerify bool
+	GetTLSConfig  func() *tls.Config
-	NextProtos         []string
-	ServerName         string
 	Silent        bool
 }
 
@@ -26,12 +24,7 @@ type Tunnel struct {
 // begin listening locally. Each local connection will result in a separate remote connection.
 func (t *Tunnel) DialAndListen() error {
 	remote := t.RemoteAddress + ":" + strconv.Itoa(t.RemotePort)
-	conn, err := tls.Dial("tcp", remote,
+	conn, err := tls.Dial("tcp", remote, t.GetTLSConfig())
-		&tls.Config{
-			ServerName:         t.ServerName,
-			InsecureSkipVerify: t.InsecureSkipVerify,
-			NextProtos:         t.NextProtos,
-		})
 
 	if err != nil {
 		fmt.Fprintf(os.Stderr, "[warn] '%s' may not be accepting connections: %s\n", remote, err)
@@ -142,11 +135,7 @@ func pipe(r netReadWriteCloser, w netReadWriteCloser, t string) {
 }
 
 func (t *Tunnel) handleConnection(remote string, conn netReadWriteCloser) {
-	sclient, err := tls.Dial("tcp", remote,
+	sclient, err := tls.Dial("tcp", remote, t.GetTLSConfig())
-		&tls.Config{
-			ServerName:         t.ServerName,
-			InsecureSkipVerify: t.InsecureSkipVerify,
-		})
 
 	if err != nil {
 		fmt.Fprintf(os.Stderr, "[error] (remote) %s\n", err)