feat: Command to generate a CA.

pkg/pki/fileperms.go

@@ -2,4 +2,8 @@ package pki
 
 import "os"
 
+// RW only by the owner.
 const PrivateKeyFilePerms os.FileMode = 0600
+
+// W by owner, R by others.
+const CertFilePerms os.FileMode = 0644

pkg/pki/pemtypes.go

@@ -0,0 +1,4 @@
+package pki
+
+const PEMTypePrivateKey = "PRIVATE KEY"
+const PEMTypeCertificate = "CERTIFICATE"