ginuerzh ffa7ceaed7 feat(tls): persist auto-generated CA certificate to $HOME/.gost/ ...

Previously BuildDefaultTLSConfig generated a new random self-signed
certificate in memory on every run, making it impossible for users to
extract and trust the certificate in their system trust store.

Now when no explicit cert files are configured, GOST:
1. First checks cert.pem / key.pem in CWD (backward compatible)
2. Then checks auto-ca-cert.pem / auto-ca-key.pem under $HOME/.gost/
3. If none found, generates a new ECDSA P-256 CA certificate, persists
   it to $HOME/.gost/, and uses it

The persisted cert has IsCA=true so tools recognize it as a root CA.
Falls back to in-memory-only when disk writes fail.

Closes go-gost/gost#876

2026-06-23 20:29:57 +08:00

..

admission

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

auth

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

bypass

Bypass with network (#101)

2026-06-13 12:36:09 +08:00

chain

docs(parsing): add package and symbol doc comments

2026-05-24 13:58:37 +08:00

hop

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

hosts

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

ingress

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

limiter

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

logger

docs(parsing): add package and symbol doc comments

2026-05-24 13:58:37 +08:00

node

feat(forwarder/sniffer): add HTTP request body rewriting, deprecate rewriteBody in favor of rewriteResponseBody

2026-05-31 19:46:41 +08:00

observer

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

parser

feat(parser): support HTTP(S) URL config sources with -C flag

2026-06-20 20:11:43 +08:00

quota

feat: add quota limiter and quota API (#107)

2026-06-20 14:44:42 +08:00

recorder

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

resolver

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

router

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

sd

fix(plugin): CloseIdleConnections silent no-op when tokenTransport wraps HTTP transport

2026-05-27 20:37:14 +08:00

selector

docs(parsing): add package and symbol doc comments

2026-05-24 13:58:37 +08:00

service

fix(config): warn when TLS options are set on a plaintext listener (#108)

2026-06-22 14:29:41 +08:00

parse.go

feat service: introduce labels for logs/recorder (#104)

2026-06-13 13:05:14 +08:00

tls_test.go

feat(tls): persist auto-generated CA certificate to $HOME/.gost/

2026-06-23 20:29:57 +08:00

tls.go

feat(tls): persist auto-generated CA certificate to $HOME/.gost/

2026-06-23 20:29:57 +08:00