various: use TLS

juju/conn.go

 package juju
 
 import (
         "bytes"
         "crypto/sha256"
         "encoding/hex"
         "fmt"
         "io"
         "launchpad.net/juju-core/charm"
         "launchpad.net/juju-core/environs"
         "launchpad.net/juju-core/log"
         "launchpad.net/juju-core/state"
         "launchpad.net/juju-core/trivial"
         "net/url"
         "os"
+        "time"
 )
 
 // Conn holds a connection to a juju environment and its
 // associated state.
 type Conn struct {
         Environ environs.Environ
         State   *state.State
+}
+
+var redialStrategy = trivial.AttemptStrategy{
+        Total: 60 * time.Second,
+        Delay: 250 * time.Millisecond,
 }
 
 // NewConn returns a new Conn that uses the
 // given environment. The environment must have already
 // been bootstrapped.
 func NewConn(environ environs.Environ) (*Conn, error) {
         info, err := environ.StateInfo()
         if err != nil {
                 return nil, err
         }
         password := environ.Config().AdminSecret()
         if password == "" {
                 return nil, fmt.Errorf("cannot connect without admin-secret")
         }
         info.Password = password
         st, err := state.Open(info)
         if err == state.ErrUnauthorized {
                 // We can't connect with the administrator password,;
                 // perhaps this was the first connection and the
                 // password has not been changed yet.
                 info.Password = trivial.PasswordHash(password)
-                st, err = state.Open(info)
+
+                // We try for a while because we might succeed in
+                // connecting to mongo before the state has been
+                // initialized and the initial password set.
+                for a := redialStrategy.Start(); a.Next(); {
+                        st, err = state.Open(info)
+                        if err != state.ErrUnauthorized {
+                                break
+                        }
+                }
                 if err != nil {
                         return nil, err
                 }
                 if err := st.SetAdminPassword(password); err != nil {
                         return nil, err
                 }
         } else if err != nil {
                 return nil, err
         }
         conn := &Conn{
@@ skipping 191 matching lines @@
         }
         if status != state.UnitError {
                 return fmt.Errorf("unit %q is not in an error state", unit)
         }
         mode := state.ResolvedNoHooks
         if retryHooks {
                 mode = state.ResolvedRetryHooks
         }
         return unit.SetResolved(mode)
 }