Package triple generates key-certificate pairs for the triple (CA, Server, Client).

CanReadCertOrKey returns true if the certificate or key files already exists, otherwise returns false.

EncodeCertPEM returns PEM-endcoded certificate data.

EncodePrivateKeyPEM returns PEM-encoded private key data.

EncodePublicKeyPEM returns PEM-endcode public data.

FormatBytesCert receives byte array certificate and formats in human-readable format.

FormatCert receives certificate and formats in human-readable format.

GenerateSelfSignedCertKey creates a self-signed certificate and key for the given host.

MakeCSR generates a PEM-encoded CSR using the supplied private key, subject, and SANs.

MakeEllipticPrivateKeyPEM creates an ECDSA private key.

NewPool returns an x509.CertPool containing the certificates in the given PEM-encoded file.

NewPrivateKey creates an RSA private key.

NewSelfSignedCACert creates a CA certificate.

NewSignedCert creates a signed certificate using the given CA certificate and key.

ParseCertsPEM returns the x509.Certificates contained in the given PEM-encoded byte array Returns an error if a certificate could not be parsed, or if the data does not contain any certificates.

ParseCSR extracts the CSR from the API object and decodes it.

ParsePrivateKeyPEM returns a private key parsed from a PEM block in the supplied data.

WriteCert writes the pem-encoded certificate data to certPath.

WriteKey writes the pem-encoded key data to keyPath.

AltNames contains the domain names and IP addresses that will be added to the API Server's x509 certificate SubAltNames field.

Config containes the basic fields required for creating a certificate.