Method ClientCAPool

internal/cert/ca.go:247–251

ClientCAPool returns a CertPool containing only this CA's certificate, suitable for use as tls.Config.ClientCAs on the gRPC server.

()

// ClientCAPool returns a CertPool containing only this CA's certificate,
// suitable for use as tls.Config.ClientCAs on the gRPC server.
func (ca *NodeCA) ClientCAPool() *x509.CertPool {
	pool := x509.NewCertPool()
	pool.AddCert(ca.cert)
	return pool
}

// IssueServerCert issues a TLS server certificate signed by this CA, using a
// freshly generated RSA-2048 key pair owned by the returned tls.Certificate.