Versions in this module Expand all Collapse all v0 v0.1.0 Jul 1, 2026 Changes in this version + const DefaultCALifetime + const DefaultCertTTL + var ErrCAExpired = errors.New("ca: realm CA certificate is not currently valid") + var ErrCertificateExpired = errors.New("ca: certificate expired") + var ErrCertificateInvalid = errors.New("ca: certificate invalid") + var ErrInvalidCSR = errors.New("ca: invalid certificate signing request") + func ParseCertificatePEM(certPEM string) (*x509.Certificate, error) + type CA struct + func Generate(realm string, lifetime time.Duration) (*CA, error) + func Load(certPEM string, keyDER []byte) (*CA, error) + func (c *CA) CertificatePEM() string + func (c *CA) PrivateKeyDER() []byte + func (c *CA) SignCSR(csrPEM, realm, deviceID string, ttl time.Duration) (certPEM, serial, aki string, err error) + func (c *CA) Verify(certPEM string, at time.Time) (until time.Time, err error)