tlshelper

type ClientCertGenerateParameter struct {
	PKCS12password string

	TTL          time.Duration
	SerialNumber *big.Int
	CommonName   string

	RootCACertFile string
	RootCAKeyFile  string
}

type ClientCertGenerateResult struct {
	// PKCS#12 data contains both private key and client certificate
	PKCS12 []byte

	// TLS certificate object, contains both private key and client certificate
	// Can be used in combination with tls.Config and Go HTTP client.
	TLS *tls.Certificate
}

type RootCAGenerateRequest struct {
	RNG io.Reader

	// Filepath without suffix/extension.
	FilePathBase string

	NotBefore time.Time
	NotAfter  time.Time

	CommonName string
}

type RootCAGenerateResult struct {
	PublicKey crypto.PublicKey

	PrivateKeyFile string
	PrivateKey     crypto.PrivateKey

	CACertFile string
	CACert     *x509.Certificate
}