Documentation
¶
Overview ¶
Package static is the stdlib TLS driver (ADR-0111, F74): it builds a *tls.Config from a static certificate — either operator-PROVIDED (tls.LoadX509KeyPair) or SELF-SIGNED (one multi-SAN cert this package generates with crypto/x509 and persists under the storage dir). Pure stdlib — it imports no ACME/certmagic code, so a self-signed/provided deployment pays for no TLS-automation dependency. It satisfies the internal/edge/tls Provider interface structurally (no import of the facade → no cycle).
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type Driver ¶
type Driver struct {
// contains filtered or unexported fields
}
Driver serves a single static certificate (provided or self-signed).
func New ¶
New builds a static driver. selfSigned=false ⇒ load certFile/keyFile (provided); selfSigned=true ⇒ generate/persist a multi-SAN cert under storageDir at Manage time.
func (*Driver) Manage ¶
Manage loads the provided cert, or loads-or-generates the self-signed one. hosts is the SAN set (F79 Router.Hosts() + configured hosts). Idempotent: a persisted self-signed cert whose SANs already cover hosts is reused (so a restart keeps the same cert — the selfsigned-persists rule); otherwise one multi-SAN cert is generated and persisted.
Source Files