36b867bca9
This commit adds the ability to generate certificates signed by a local CA cert and key. The -C and -K flags are used to provide the filepaths to the certificate and key files, respectively. For simplicity and security, the issued certificate is not able to act as an intermediate certificate, and thus cannot sign other certificates to trust. More advanced usage is still possible using external tooling (e.g. openssl), but is not provided by gencerts. Acting as your own Certificate Authority can reduce configuration complexity by allowing each of your clients to only trust a single CA certificate that you control, rather than juggling many different autogenerated certificates for every different server. |
||
|---|---|---|
| .. | ||
| gencerts.go | ||