Specifications¶
Every non-trivial change to this module is written down before it is built. A spec captures the problem, the decisions taken, the options rejected and the open questions — so a later reader can see why the code looks the way it does, long after the conversation that produced it is gone.
The specs live in
the project wiki. They
are point-in-time decision records rather than living documentation, and keeping
them in docs/ buries the documentation that is living. This page is the
index; it does not carry the bodies.
| # | Spec | Status |
|---|---|---|
| 0001 | localca — a framework-free local development CA with trust-store install | IMPLEMENTED |
| 0002 | Pure-Go NSS cert9.db trust writer — drop the certutil dependency | DEFERRED |
Reports¶
Investigations that informed the specs above, kept because the measurements are worth more than the conclusions drawn from them at the time:
Where the originating request lives¶
This module began as a go-tool-base feature request, pkg/tls/localca, before it
was decided that a framework-free module served consumers better. That request
stays where it was written:
- Local development CA with automatic trust-store installation — superseded by spec 0001 here
It stays there rather than being copied — a spec belongs with the decision it records, and duplicating one only creates a second copy to drift.