feat(virtual-hosts): add TLS option for HTTPS/443 backends

- Changelog: document TLS (secure connection) option under new features
- Remove scripts/test-https-server.js and .test-https cert dir

.test-https/cert.pem

@@ -1,19 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDCTCCAfGgAwIBAgIUbxh+gtbXSMor+OHxk7Da+by1tNgwDQYJKoZIhvcNAQEL
-BQAwFDESMBAGA1UEAwwJbG9jYWxob3N0MB4XDTI2MDMwMzA5MDEwOFoXDTI2MDMw
-NDA5MDEwOFowFDESMBAGA1UEAwwJbG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEF
-AAOCAQ8AMIIBCgKCAQEA6Nlz7Pe24ChBfLwHhBo2QupuBw2ouF2Jz7C+9MoMZqu1
-D1pc+Mqju8QhYngoYR8Jjqat4YarGMPIsOWBzfUmHzylxG7VXC4YKMnF4CI7pLnf
-V/uPLx/sU6urBmnShOoCWoSD4cZwBwfYXg5hvyjeylNxughJH/HPvbkn9M5aeFtV
-LXujlUh+v54A278jU1a1HFGICuA95bQgsEK5DyLdAUfh9blsSUUTPzikYk5Bu4SC
-970Sq1TOHh0t2f+8JCAiU7W187E449wphNaMjege+DOzCECTi51JLBPDoBg2S3q+
-nmPZ2m3//2BJCABHOFNBUzJc0xHi18r1Pi8IChAw+wIDAQABo1MwUTAdBgNVHQ4E
-FgQUuadaY+tCpsA97GdF5VzRWmb1QbQwHwYDVR0jBBgwFoAUuadaY+tCpsA97GdF
-5VzRWmb1QbQwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAsfH1
-s78YE7KC28YjJ3J4/0/0u8HeiiklLRQJEeKVzBGifPcrLxYVb+aDR5V8pyGD2/p1
-DnwoQS5g9wZUAHtVVScgW34/rPp4Qz1N7U1i8kYMQrsHM65jf1sDdDoh7vzuv1tx
-t+JKOkBvewRiWzmnR1CIEyIgqlNBJ/ia77C3I3B/9VRVXS/z117Dl/lQAUNYjB1M
-LX4bFfviRvlhwWI17P/QYuZp6MQ6C7tKuILH9JVH9Bj7EXK3/Wi+8ANTVqyH2vaF
-yJGjtnAjIZdrnP8Kk0kU6C5Y/k3IdxW+RraTkhHHR7WjfPlR3uQXXGfnnD2h36xQ
-ufQ6NaV0l5QE7mX3oQ==
------END CERTIFICATE-----

.test-https/key.pem

@@ -1,28 +0,0 @@
------BEGIN PRIVATE KEY-----
-MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQDo2XPs97bgKEF8
-vAeEGjZC6m4HDai4XYnPsL70ygxmq7UPWlz4yqO7xCFieChhHwmOpq3hhqsYw8iw
-5YHN9SYfPKXEbtVcLhgoycXgIjukud9X+48vH+xTq6sGadKE6gJahIPhxnAHB9he
-DmG/KN7KU3G6CEkf8c+9uSf0zlp4W1Ute6OVSH6/ngDbvyNTVrUcUYgK4D3ltCCw
-QrkPIt0BR+H1uWxJRRM/OKRiTkG7hIL3vRKrVM4eHS3Z/7wkICJTtbXzsTjj3CmE
-1oyN6B74M7MIQJOLnUksE8OgGDZLer6eY9nabf//YEkIAEc4U0FTMlzTEeLXyvU+
-LwgKEDD7AgMBAAECggEABg5VygV9T6IsZdqcFW77F01ylCNiTn08TtcJeGNi5C62
-FFKk1WGr1X/Z4G5AmpoMjRW/svxmKcw5xYQKlrk4Bxr0MsIxMWcPgMwSpewuAfBF
-o0urIy4g3uI5nf6Vl5hgfEszBOW81yn4kiWsnCSreral4BFEGZ0X6pbMt7zANJ4a
-yigg/7KbvS7sNF1xvBO2+KcgciU+bog5LV6GBisyPG9tP6kwXGZvfRO3wdynge4r
-+UYb6LvQYZ+tcYMAG1sN9fQpP7ItrSJ+OxSz6jhY+rjC8td6GMHZFL5ueTsoqIqA
-tZt0R8xsPNPQo0vNWQOBXCSwB9YeHGmsjOvMQO3fCQKBgQD6xAinYW5uymx0lwCV
-BdPrZ4iJnOweiVC9cANwvMAlvXtBf4eXVUAVrbys43WHuriLu4+l2PCLTFyecHJo
-i/QKXezgzbc4faEtVuXhItrq2rtcOljnd80eK0PHvRvoQzJxhloaRUMYOdfkj4hg
-zN+Qi+hGxxgFPryP9B1P5s1BCQKBgQDtta7jTAQzSKzfDjPqN12Iixetz7MA1Krs
-D44mDKn+4tOoe9YP48Ee+90DzJViusfszhNDsXdknyEMMT0umBKp8bYHQiXzlgpr
-KMS9TWyx46+CMaSL04o0E28nRHB+cFch5cZUYjjxWKL7Ps3c1c8ZvUtpZiStiERl
-DL019qLW4wKBgQDMsWg++REj7qhJI1meS3uJFKIncqhq5Lu7ZsvoIqrWI62Q8YDE
-zxnYmFEC70jo2kn6BchkIIl5q4OO8UryfAtgyvqpJkMBIcuHLv/GnqUEQDfgOOCJ
-UQlmLvrM+FjnZrKuaHT0LMVv6QeJ0oAIRDPZ0dpwq+O3pFZXS3UB2+x/wQKBgFd8
-XnlZKNKXFMijOYgiCFKQno5huse7fYyTzQVD8+zTHoML0KTYdeMpXxZe3TwQ8jO9
-RGnNjtuBlXAfTx0u6u+Q/iV9uuoDdqIpxv7E2BRAb//CtYSgvmScInSZQ63FOsxG
-/M9htwNcU9+UJb/5ENewS2jnJuiXFlT6c0jBFP1xAoGBAJAUBstSaZIP6wvt4bH0
-i98zBONVFkvuH0KiNPbSyPuYmGZm43kO6RCCjpiQWxktwptF9idWLovFFjpQEFJq
-kawqt60ziy+xcjNSbE8yCvIvlUIywy/iqBBbb27eceO/N+U55H8qtkchgh3iMbPO
-sQWvdqivfIiln5k3EaDpDdbn
------END PRIVATE KEY-----

CHANGELOG.md

@@ -59,6 +59,7 @@ All notable changes to Holesail Browser are documented here.
 - Added null check for `$('serverEditId')` in `servers.js`
 
 **13 new features**
+- TLS (secure connection) option for virtual hosts: when enabled, the proxy connects to the tunnel backend over TLS (as for HTTPS/port 443) instead of plain HTTP; add virtual host with "Use TLS" checked for backends serving HTTPS; setting is persisted and shown in the table
 - Auto-reconnect for virtual hosts and service tunnels with exponential backoff
 - Auto-reconnect for SSH sessions with configurable retry limit
 - Browser notifications for tunnel errors and disconnections

scripts/test-https-server.js

@@ -1,21 +0,0 @@
-/**
- * Minimal HTTPS server on port 9900 for testing virtual host TLS backend.
- * Run: node scripts/test-https-server.js
- * Then: holesail --live 9900
- */
-const https = require('https');
-const fs = require('fs');
-const path = require('path');
-
-const dir = path.join(__dirname, '..', '.test-https');
-const key = fs.readFileSync(path.join(dir, 'key.pem'));
-const cert = fs.readFileSync(path.join(dir, 'cert.pem'));
-
-const server = https.createServer({ key, cert }, (req, res) => {
-  res.writeHead(200, { 'Content-Type': 'text/plain' });
-  res.end('HTTPS OK on 9900\n');
-});
-
-server.listen(9900, '127.0.0.1', () => {
-  console.log('HTTPS server listening on https://127.0.0.1:9900');
-});