tlsgen

type CA interface {
	CertBytes() []byte

	NewClientCertKeyPair() (*CertKeyPair, error)

	NewServerCertKeyPair(host string) (*CertKeyPair, error)
}

type CertKeyPair struct {
	Cert []byte

	Key []byte

	crypto.Signer
	TLSCert *x509.Certificate
}