mustcert

This example uses mustcert to create certificates, start a TLS server, and a client to talk to it.

ca := CA("root", nil)
serverCert := Leaf("localhost", ca)
clientCert := Leaf("client", ca)

// Create the TLS Test Server
server := httptest.NewUnstartedServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
	if _, err := w.Write([]byte("hello, world!")); err != nil {
		fmt.Println(err)
	}
}))

rootCAs := Pool(ca.TLS())
server.TLS = &tls.Config{
	ClientAuth:   tls.RequireAndVerifyClientCert,
	Certificates: []tls.Certificate{*serverCert.TLS()},
	RootCAs:      rootCAs,
	ClientCAs:    rootCAs,
}
server.StartTLS()
defer server.Close()

// Create the Client configuration
cert, err := tls.X509KeyPair([]byte(clientCert.CertPEM()), []byte(clientCert.KeyPEM()))
if err != nil {
	fmt.Println(err)
}
caCertPool := Pool(ca.TLS())
config := &tls.Config{
	Certificates:       []tls.Certificate{cert},
	RootCAs:            caCertPool,
	InsecureSkipVerify: true,
}

// Create the HTTP Client
client := &http.Client{
	Transport: &http.Transport{
		TLSClientConfig: config,
	},
}

// Make a client request to the HTTP Server
resp, err := client.Get(server.URL)
if err != nil {
	fmt.Println(err)
}
defer resp.Body.Close()

bodyBytes, err := io.ReadAll(resp.Body)
if err != nil {
	fmt.Println(err)
}
bodyString := string(bodyBytes)
fmt.Println(bodyString)

Output:

hello, world!