2 Commits

Author	SHA1	Message	Date
ginuerzh	ffa7ceaed7	feat(tls): persist auto-generated CA certificate to $HOME/.gost/ ... Previously BuildDefaultTLSConfig generated a new random self-signed certificate in memory on every run, making it impossible for users to extract and trust the certificate in their system trust store. Now when no explicit cert files are configured, GOST: 1. First checks cert.pem / key.pem in CWD (backward compatible) 2. Then checks auto-ca-cert.pem / auto-ca-key.pem under $HOME/.gost/ 3. If none found, generates a new ECDSA P-256 CA certificate, persists it to $HOME/.gost/, and uses it The persisted cert has IsCA=true so tools recognize it as a root CA. Falls back to in-memory-only when disk writes fail. Closes go-gost/gost#876	2026-06-23 20:29:57 +08:00
ginuerzh	2b1e4ca3a7	test(parsing): add 229 unit tests across 18 config/parsing packages ... Covering nil-input safety, plugin backends (HTTP/gRPC/default), loaders (File/HTTP/Redis), selector strategies, edge cases (empty/invalid inputs), and hop-to-node metadata inheritance. All tests passing.	2026-05-24 13:34:33 +08:00