tlscert

Documentation

Overview

Package tlscert generates in-memory TLS certificates for omaclip peers.

Index

• func GenerateCA(seed []byte) (tls.Certificate, *x509.Certificate, error)
• func GenerateLeaf(caCert *x509.Certificate, caKey crypto.PrivateKey) (tls.Certificate, error)

Functions

func GenerateCA

func GenerateCA(seed []byte) (tls.Certificate, *x509.Certificate, error)

GenerateCA derives a deterministic ECDSA P-256 CA certificate from seed. All peers that share the same passphrase will derive the same CA and can therefore verify each other's leaf certificates without InsecureSkipVerify.

func GenerateLeaf

func GenerateLeaf(caCert *x509.Certificate, caKey crypto.PrivateKey) (tls.Certificate, error)

GenerateLeaf creates a random ECDSA P-256 server certificate signed by the given CA. The certificate includes SANs for all local IPs and localhost.