tlsutil

type CAService interface {
	RootCertificate() (certPEM []byte)
	Issue(serverName string) (certPEM, keyPEM []byte, err error)
}

type TLSConfig struct {
	CAFile     string // Path of the PEM-encoded server trusted root certificates.
	CertFile   string // Path of the PEM-encoded client certificate.
	KeyFile    string // Path of the PEM-encoded client key.
	SkipVerify bool   // Server should be accessed without verifying the certificate. For testing only.

	CAData   []byte // Bytes of the PEM-encoded server trusted root certificates. Supercedes CAFile.
	CertData []byte // Bytes of the PEM-encoded client certificate. Supercedes CertFile.
	KeyData  []byte // Bytes of the PEM-encoded client key. Supercedes KeyFile.
}