NewCAManager (ca.go)

Package httpproxy implements CA certificate management for MITM proxy.

// Source: https://github.com/dedene/claw-wrap | License: MIT | Copyright 2026 Peter Dedene
// Provided via justclaw.it.com; keep this notice with the code.
// Package httpproxy implements CA certificate management for MITM proxy.
package httpproxy

import (
	"crypto/rand"
	"crypto/rsa"
	"crypto/tls"
	"crypto/x509"
	"crypto/x509/pkix"
	"encoding/pem"
	"fmt"
	"log"
	"math/big"
	"os"
	"path/filepath"
	"sync"
	"time"

	"github.com/fsnotify/fsnotify"

	"claw-wrap/internal/config"
	"claw-wrap/internal/paths"
)

const (
	// DefaultCAValidityDays is the default CA validity period.
	DefaultCAValidityDays = 365
	// DefaultCAOrganization is the default CA organization name.
	DefaultCAOrganization = "claw-wrap"
	// CAKeyBits is the RSA key size for the CA.
	CAKeyBits = 4096
	// RotationBuffer is days

... (truncated -- full source via MCP)