kubernetes/staging/src/k8s.io/apiserver/pkg/server/dynamiccertificates/named_certificates_test.go

type testCertSpec …

type namedtestCertSpec …

func TestBuiltNamedCertificates(t *testing.T) { … }

func parseIPList(ips []string) []net.IP { … }

func createTestTLSCerts(spec testCertSpec, names []string) (certProvider SNICertKeyContentProvider, err error) { … }

func x509CertSignature(cert *x509.Certificate) string { … }

func certSignature(certProvider CertKeyContentProvider) (string, error) { … }

// generateSelfSignedCertKey creates a self-signed certificate and key for the given host.
// Host may be an IP or a DNS name
// You may also specify additional subject alt names (either ip or dns names) for the certificate
func generateSelfSignedCertKey(host string, alternateIPs []net.IP, alternateDNS []string) ([]byte, []byte, error) { … }