CreateClientConfig creates a new tls.Config for use by a client.

CreateServerConfig creates a new tls.Config for use by a server.

GenerateCACert generates a new CA certificate and returns the cert and key as PEM-encoded bytes.

GenerateCert generates a new x509 certificate and returns the cert and key as PEM-encoded bytes.

GenerateSelfSignedCert generates a new self-signed certificate and returns the cert and key as PEM-encoded bytes.

GenerateSelfSignedCertIPSAN generates a new self-signed certificate and returns the cert and key as PEM-encoded bytes.

MTLSState indicates whether mutual TLS is enabled or disabled.