// assumes you also use serveHttp (for classes MyHTTPD and NanoHTTPD)

static MyHTTPD serveHttps_server;

static int serveHttps_port = 8889;

static void serveHttps(int port, SSLServerSocketFactory socketFactory) ctex {

  serveHttps_port = port;

  serveHttps_server = new MyHTTPD(port);

  serveHttps_server.makeSecure(socketFactory);

  serveHttps_server.start();

  print("HTTPS server started (socket factory: " + socketFactory + ", listening on port " + port + "!)");

}

static void serveHttps(int port, File keystore, S pass) ctex {

  serveHttps(port, serveHttps_makeSSLSocketFactory(keystore, pass));

}

// uses default SSLServerSocketFactory - doesn't seem to work

static void serveHttps(int port) ctex {

  serveHttps_port = port;

  serveHttps_server = new MyHTTPD(port);

  serveHttps_server.makeSecure((SSLServerSocketFactory) SSLServerSocketFactory.getDefault());

  serveHttps_server.start();

  print("HTTPS server started with default socket factory (listening on port " + port + "!)");

}

// seems to assume same password is used for keystore as well as certificate.

static SSLServerSocketFactory serveHttps_makeSSLSocketFactory(File keystoreFile, S passphrase) ctex {

  KeyStore keystore = KeyStore.getInstance(KeyStore.getDefaultType());

  temp InputStream keystoreStream = new FileInputStream(keystoreFile);

  keystore.load(keystoreStream, passphrase.toCharArray());

  TrustManagerFactory trustManagerFactory = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());

  trustManagerFactory.init(keystore);

  KeyManagerFactory keyManagerFactory = KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());

  keyManagerFactory.init(keystore, passphrase.toCharArray());

  SSLContext ctx = SSLContext.getInstance("TLS");

  ctx.init(keyManagerFactory.getKeyManagers(), trustManagerFactory.getTrustManagers(), null);

  ret ctx.getServerSocketFactory();

}

static void cleanMeUp_serveHttps() {

  if (serveHttps_server != null) {

    serveHttps_server.stop();

    serveHttps_server = null;

  }

}