localca

Sep 9, 2026

Changes in this version

type CA

+ func GenerateCA(id string, keyType KeyType, validity time.Duration) (*CA, error)

+ func (ca *CA) TLSCertificateChainPEM() ([]byte, error)

+ func (ca *CA) TLSPrivateKeyPEM() ([]byte, error)

+ type ConcretePool struct

+ ActiveForSigning string

+ CAs []*CA

+ func (p *ConcretePool) CreateCertificate(template *x509.Certificate, subjectPublicKey crypto.PublicKey) ([][]byte, error)

+ func (p *ConcretePool) TrustAnchors() ([]*x509.Certificate, error)

+ type KeyType int

+ const KeyTypeECDSAP256

+ const KeyTypeED25519

type Pool

+ CreateCertificate func(template *x509.Certificate, subjectPublicKey crypto.PublicKey) ([][]byte, error)

+ TrustAnchors func() ([]*x509.Certificate, error)

+ type RefreshingPool struct

+ func NewRefreshingPool(stateFile string) (*RefreshingPool, error)

+ func (p *RefreshingPool) CreateCertificate(template *x509.Certificate, subjectPublicKey crypto.PublicKey) ([][]byte, error)

+ func (p *RefreshingPool) TrustAnchors() ([]*x509.Certificate, error)

May 19, 2026

Changes in this version

+ func Marshal(ca *Pool) ([]byte, error)

+ type CA struct

+ ID string

+ IntermediateCertificates []*x509.Certificate

+ RootCertificate *x509.Certificate

+ SigningKey crypto.PrivateKey

+ func GenerateED25519CA(id string) (*CA, error)

+ type Pool struct

+ CAs []*CA

+ func Unmarshal(wireBytes []byte) (*Pool, error)