2 @unnumbered TLS support
4 You can enable TLS support by specifying PEM-encoded X.509 certificate
5 and private key files. Go's TLS implementation supports TLS 1.3, HTTP/2
6 negotiation, Keep-Alives, modern ciphersuites and ECC.
8 For example generate some self-signed certificate using GnuTLS toolset:
11 $ certtool --generate-privkey --ecc --outfile prv.pem
12 $ cert_template=`mktemp`
13 $ echo cn=gocheese.host > $cert_template
15 --generate-self-signed \
16 --load-privkey=prv.pem \
17 --template $cert_template \
20 $ gocheese -tls-cert cert.pem -tls-key prv.pem [...]