15
16
// GenerateSelfSignedX509CA generates a TLS serverCert that is self-signed
17
>
func generateSelfSignedX509CA(commonName string, extUsage []x509.ExtKeyUsage, keyLengthBits int) (*tls.Certificate, error) {
certificate.go
18
>
now := time.Now().UTC()
19
>
20
>
template := &x509.Certificate{
21
>
SerialNumber: big.NewInt(now.Unix()),
22
>
Subject: pkix.Name{
23
>
CommonName: commonName,
24
>
Country: []string{"USA"},
25
>
Organization: []string{"TemporalTechnologiesTesting"},
26
>
},
27
>
NotBefore: now.Add(-time.Minute),
28
>
NotAfter: now.AddDate(0, 0, 1), // 1 day expiry
29
>
BasicConstraintsValid: true,
30
>
IsCA: true,
31
>
ExtKeyUsage: extUsage,
32
>
KeyUsage: x509.KeyUsageCertSign | x509.KeyUsageKeyEncipherment |
33
>
x509.KeyUsageDigitalSignature,
34
>
}
35
>
36
>
if ip := net.ParseIP(commonName); ip != nil {
37
if ip.IsLoopback() {
38
template.IPAddresses = []net.IP{net.IPv6loopback, net.IPv4(127, 0, 0, 1)}