Adding Homemade TLS to a Homemade Web Server

Original series: Building Your Own Web Server + Rebuilding TLS from Scratch

This article connects two earlier series. In the web-server series, I rebuilt the HTTP side from raw sockets up to routing and file serving. In the TLS series, I rebuilt the secure-channel side: key exchange, certificates, key derivation, and encrypted records.

This piece is where the two meet: what has to change when a web server stops receiving plaintext HTTP bytes and starts receiving encrypted TCP bytes?

I expected adding TLS to my web server to change almost everything.

It did not.