gencert

type Cert struct {
	Private *pem.Block
	Public  *pem.Block

	PrivateBytes []byte
	PublicBytes  []byte
}

type Certs struct {
	Root, Leaf, Client *Cert
}

type Config struct {
	// Which hosts to sign certificates for.
	Hosts []string
	// Which organization is issuing these certs, defaults to "Acme Co."
	Org string
	// How long leaf and client certs should be valid for, defaults to one year.
	LeafValidFor time.Duration
	// How long the root CA cert should be valid for, defaults to one year.
	RootValidFor time.Duration
	// Use root CA on disk to generate leaf certs, instead of generating a new
	// one. Should be a .key file with a root CA private key.
	RootCAPrivateKey string
	// Should be a .pem file with a root CA certificate. It is an error to set
	// RootCACert and not RootCAPrivateKey, or vice versa.
	RootCACert string
}