gh-85162: Add HTTPSServer to http.server

Doc/library/http.server.rst

@@ -55,6 +55,30 @@ The :class:`HTTPServer` and :class:`ThreadingHTTPServer` must be given
 a *RequestHandlerClass* on instantiation, of which this module
 provides three different variants:
 
+.. class:: HTTPSServer(server_address, RequestHandlerClass, \
+                       bind_and_activate=True, *, certfile, keyfile=None, \
+                       password=None, alpn_protocols=None)
+
+   This class is a :class:`HTTPServer` subclass with a wrapped socket using the
+   :mod:`ssl`, if the :mod:`ssl` module is not available the class will not
+   initialize. The *certfile* argument is required and is the path to the SSL
+   certificate chain file. The *keyfile* is the path to its private key. But
+   private keys are often protected and wrapped with PKCS #8, so we provide
+   *password* argument for that case.
+
+   .. versionadded:: 3.14
+
+.. class:: ThreadingHTTPSServer(server_address, RequestHandlerClass, \
+                       bind_and_activate=True, *, certfile, keyfile=None, \
+                       password=None, alpn_protocols=None)
+
+   This class is identical to :class:`HTTPSServer` but uses threads to handle
+   requests by using the :class:`~socketserver.ThreadingMixIn`. This is
+   analogue of :class:`ThreadingHTTPServer` class only using
+   :class:`HTTPSServer`.
+
+   .. versionadded:: 3.14
+
 .. class:: BaseHTTPRequestHandler(request, client_address, server)
 
    This class is used to handle the HTTP requests that arrive at the server.  By
@@ -462,6 +486,17 @@ following command runs an HTTP/1.1 conformant server::
 .. versionchanged:: 3.11
    Added the ``--protocol`` option.
 
+The server can also support TLS encryption. The options ``--tls-cert`` and
+``--tls-key`` allow specifying a TLS certificate chain and private key for
+secure HTTPS connections. And ``--tls-password`` option has been added to
+``http.server`` to support password-protected private keys. For example, the
+following command runs the server with TLS enabled::
+
+        python -m http.server --tls-cert cert.pem --tls-key key.pem
+
+.. versionchanged:: 3.14
+   Added the ``--tls-cert``, ``--tls-key`` and ``--tls-password`` options.
+
 .. class:: CGIHTTPRequestHandler(request, client_address, server)
 
    This class is used to serve either files or output of CGI scripts from the