Package certman provides live reloading of the certificate and key files used by the standard library http.Server.

CLIFlags returns flags with env var envPrefix This should be used for server TLS configs, or when client and server tls configs are the same.

CLIFlagsWithFlagPrefix returns flags with env var and cli flag prefixes Should be used for client TLS configs when different from server on the same process.

NewPeerTLSMiddleware returns an http.Handler that extracts the peer's certificate data into PeerTLSInfo and attaches it to the request-scoped context.

PeerTLSInfoFromContext extracts PeerTLSInfo from the context Result will only be populated if NewPeerTLSMiddleware has been added to the handler stack.

ReadCLIConfig reads tls cli configs This should be used for server TLS configs, or when client and server tls configs are the same.

ReadCLIConfigWithPrefix reads tls cli configs with flag prefix Should be used for client TLS configs when different from server on the same process.

PeerTLSInfo contains request-scoped peer certificate data It can be used by downstream http.Handlers to authorize access for TLS-authenticated clients.