certs

package

v0.4.2 Latest Latest Go to latest Published: Aug 26, 2026 License: AGPL-3.0 Imports: 10 Imported by: 0

Details

This section is empty.

This section is empty.

This section is empty.

type CertificateAuthority struct {
	CACert    *x509.Certificate
	CAKey     *rsa.PrivateKey
	CACertPEM []byte
	CAKeyPEM  []byte
}

CertificateAuthority manages the internal PKI for FallBCK server and agent mTLS

func LoadOrCreateCA(certPath, keyPath string) (*CertificateAuthority, error)

LoadOrCreateCA loads a CA from disk or generates a new self-signed root CA

func (ca *CertificateAuthority) IssueClientCert(commonName string, validityDays int) (*KeyPair, error)

IssueClientCert generates a client mTLS keypair signed by this CA for an agent or server

type KeyPair struct {
	CertPEM []byte
	KeyPEM  []byte
}

KeyPair holds PEM-encoded certificate and private key

func (kp *KeyPair) WriteKeyPair(certPath, keyPath string) error

WriteKeyPair writes PEM cert and key to destination files