ca

Documentation

Index

• type CAManager
  • func NewCAManager(caDir string) (*CAManager, error)
  • func (m *CAManager) CertPath() string
  • func (m *CAManager) GenerateServerCert(host string) (*tls.Certificate, error)
  • func (m *CAManager) GetOrCreateCA() error

Types

type CAManager

type CAManager struct {
	CADir  string
	CACert *x509.Certificate
	CAKey  crypto.PrivateKey
}

CAManager generates and manages a local CA certificate used for TLS interception.

func NewCAManager

func NewCAManager(caDir string) (*CAManager, error)

NewCAManager creates a CAManager for the given directory and ensures the CA certificate and key are available (generating them if necessary).

func (*CAManager) CertPath

func (m *CAManager) CertPath() string

CertPath returns the filesystem path to the CA certificate file.

func (*CAManager) GenerateServerCert

func (m *CAManager) GenerateServerCert(host string) (*tls.Certificate, error)

GenerateServerCert creates a TLS leaf certificate for the given hostname, signed by the CA. The returned *tls.Certificate is ready for use in a tls.Config.

func (*CAManager) GetOrCreateCA

func (m *CAManager) GetOrCreateCA() error

GetOrCreateCA loads an existing CA cert and key from disk, or generates new ones if they do not exist.