Why Go
- Case Studies
  
  Common problems companies solve with Go
- Use Cases
  
  Stories about how and why companies use Go
- Security
  
  How Go can help keep you secure by default
Learn
Docs
- Effective Go
  
  Tips for writing clear, performant, and idiomatic Go code
- Go User Manual
  
  A complete introduction to building software with Go
- Standard library
  
  Reference documentation for Go's standard library
- Release Notes
  
  Learn what's new in each Go release
- API
  
  Reference documentation for the pkg.go.dev API
Packages
Community
- Recorded Talks
  
  Videos from prior events
- Meetups
  
  Meet other local Go developers
- Conferences
  
  Learn and network with Go developers from around the world
- Go blog
  
  The Go project's official blog.
- Go project
  
  Get help and stay informed from Go
- Get connected

localca

package

Go to main page

Versions in this module

v0

v0.1.0

Sep 9, 2026

Changes in this version

type CA

+ func GenerateCA(id string, keyType KeyType, validity time.Duration) (*CA, error)

+ func (ca *CA) TLSCertificateChainPEM() ([]byte, error)

+ func (ca *CA) TLSPrivateKeyPEM() ([]byte, error)

+ type ConcretePool struct

+ ActiveForSigning string

+ CAs []*CA

+ func (p *ConcretePool) CreateCertificate(template *x509.Certificate, subjectPublicKey crypto.PublicKey) ([][]byte, error)

+ func (p *ConcretePool) TrustAnchors() ([]*x509.Certificate, error)

+ type KeyType int

+ const KeyTypeECDSAP256

+ const KeyTypeED25519

type Pool

+ CreateCertificate func(template *x509.Certificate, subjectPublicKey crypto.PublicKey) ([][]byte, error)

+ TrustAnchors func() ([]*x509.Certificate, error)

+ type RefreshingPool struct

+ func NewRefreshingPool(stateFile string) (*RefreshingPool, error)

+ func (p *RefreshingPool) CreateCertificate(template *x509.Certificate, subjectPublicKey crypto.PublicKey) ([][]byte, error)

+ func (p *RefreshingPool) TrustAnchors() ([]*x509.Certificate, error)

v0.0.0

May 19, 2026

Changes in this version

+ func Marshal(ca *Pool) ([]byte, error)

+ type CA struct

+ ID string

+ IntermediateCertificates []*x509.Certificate

+ RootCertificate *x509.Certificate

+ SigningKey crypto.PrivateKey

+ func GenerateED25519CA(id string) (*CA, error)

+ type Pool struct

+ CAs []*CA

+ func Unmarshal(wireBytes []byte) (*Pool, error)