Certificate generation and management helpers for server transports. Issues and rotates TLS material for listeners. Key routines cover acme, CA, HTTPS, and mTLS within the certs subsystem.

Go Files

acme.go – Integrates with ACME providers to issue certificates automatically.
ca.go – Manages the internal certificate authority lifecycle.
certs.go – High-level certificate manager used by transports.
certs_test.go (tests) – Tests certificate issuance and rotation workflows.
https.go – Provides HTTPS certificate helpers and caching.
mtls.go – Generates and manages mTLS client certificates.
operators.go – Issues operator-specific certificates and keys.
subject.go – Builds X.509 subject information based on configuration.
tlskeys.go – Handles TLS keypair generation and persistence.
wireguard.go – Manages certificates/keys for WireGuard listeners when needed.

README.md Unescape Escape

server/certs

Overview

Go Files

README.md