Documentation
¶
Overview ¶
Package certsource resolves keryx's TLS certificate source (spec 0027), shared by the studio HTTPS bind and the OAuth callback loopback. It keeps the go/localca dependency out of pkg/studio / pkg/oauth: those define the cert seam and a self-signed fallback, and this package resolves the configured source — defaulting to a trusted local-CA cert (go/localca) with the self-signed source as a fallback when the CA can't be provisioned (no elevation, no certutil).
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func Resolve ¶
Resolve picks the studio CertSource from config. "localca" (default) provisions a trusted per-machine cert, falling back to self-signed if it can't; "selfsigned" forces the self-signed source. An unknown value or no home dir degrades to self-signed — HTTPS is still served (0027 §5.4), so the Secure cookie holds.
Types ¶
This section is empty.
Source Files