Module lair_keystore_api::internal::tls

Utilities for generating / managing TLS certificates and keypairs.

Constants

WK_CA_ID

The well-known pseudo name/id for the well-known lair CA root.

WK_CA_KEYPAIR_PEM

The well-known CA keypair in plaintext pem format. Some TLS clients require CA roots to validate client-side certificates. By publishing the private keys here, we are essentially allowing self-signed client certificates.

Statics

WK_CA_CERT_DER

The well-known lair CA pseudo-self-signing certificate.

Functions

tls_cert_self_signed_new_from_entropy

Generate a new random Tls keypair and self signed certificate.