feat: switch to openssl

.justfile

@@ -8,12 +8,10 @@ benchmark:
 # This will only be used if domains = ["localhost"].
 cert-dir := "./security/testdata"
 make-certs:
-    @brew install mkcert
     @rm -rf {{cert-dir}} ; mkdir {{cert-dir}}
-    @mkcert -install
-    @mkcert -cert-file {{cert-dir}}/server.crt \
-        -key-file {{cert-dir}}/server.key \
-        localhost 127.0.0.1 ::1
+    @openssl req -x509 -newkey ec -pkeyopt ec_paramgen_curve:secp384r1 -days 3650 \
+      -nodes -keyout {{cert-dir}}/server.key -out {{cert-dir}}/server.crt -subj "/CN=localhost" \
+      -addext "subjectAltName=DNS:localhost,DNS:*.localhost,IP:127.0.0.1"
 
 # Test the Go sources (Units).
 test:

security/testdata/server.crt

@@ -1,26 +1,13 @@
 -----BEGIN CERTIFICATE-----
-MIIEXzCCAsegAwIBAgIRAL3Wb1obP5pG83sKcwZh22YwDQYJKoZIhvcNAQELBQAw
-gYUxHjAcBgNVBAoTFW1rY2VydCBkZXZlbG9wbWVudCBDQTEtMCsGA1UECwwkeGNi
-NzIzMUBNUFZHWUY3V0w2NEwgKEFuZHJlYXMgR2Vpw58pMTQwMgYDVQQDDCtta2Nl
-cnQgeGNiNzIzMUBNUFZHWUY3V0w2NEwgKEFuZHJlYXMgR2Vpw58pMB4XDTI0MTIx
-NjEyMjg0NFoXDTI3MDMxNjEyMjg0NFowWDEnMCUGA1UEChMebWtjZXJ0IGRldmVs
-b3BtZW50IGNlcnRpZmljYXRlMS0wKwYDVQQLDCR4Y2I3MjMxQE1QVkdZRjdXTDY0
-TCAoQW5kcmVhcyBHZWnDnykwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
-AQDTurTdoauBSVFl6g5f+ATH3c1ChnX2KxoJToYL5wmAzrseMQa02jICK+iFz7AB
-nR7W3gzcz0T4lgC9uTOPwaJUP2gqiMYrNS6b2fmbC7T9wbx7waQ1pVdIiCzrMl76
-PU9i40Xqkj99Ou8PWNP81EuJ7GAVPpmvgk+bBR+0yf/gTxLN0VrUiaVYykHft+/R
-w/cBpw7YC9ibelRQ37QUjTVNuBFCfxZGfJYypBKYq/5CrGOGrWPASe5rPd3cfGSz
-b0XJqpPboQHhZ3n0eNon+mbZuFV9870vRiBrxkGXKPRtXQahMFDXgN3L4oIugOMU
-FJlMchxA4VbNw600JvwL0ZEDAgMBAAGjdjB0MA4GA1UdDwEB/wQEAwIFoDATBgNV
-HSUEDDAKBggrBgEFBQcDATAfBgNVHSMEGDAWgBSfqgTSZqaoBokYeota2HtiG+Qz
-azAsBgNVHREEJTAjgglsb2NhbGhvc3SHBH8AAAGHEAAAAAAAAAAAAAAAAAAAAAEw
-DQYJKoZIhvcNAQELBQADggGBAB90Ce+WWYIvrJCsxr82/VFzB5fCVdnoRLbF2aJh
-vh6W+IuijK/wdxLHoX4iXH5l0LkoAB+HNNt2yVY8SKcE4hQ6sKSwRDpI9jYyPqUS
-V1sS1RDcioRYcCRLU6xs/jUB80GJVP/jYwOxGq8GJPQYzpmBkObHlE306RC4HYGb
-7Kaf4/XsUrf9loNF3BBsewF/89QQHkT8CdhdgvXfSNg1dT2OTRuWbRu45wXl7MBm
-jQNe+bCdxcc5B7rlNbu6INqVUembVIMpzxTiGAyyHiQxfjIwM2FiwjETVAy2ehRH
-N4QzC3AaAH/wMB+4eZejsTnJN/GgIlWQFC/Juez1RzxcdWThuMxi8WGCPkh+jBs7
-v76tDtXkZQTjVfYK6k8b1BMNkl2/21lpr39Y9xhwA2VDRFKHy18SW38sGXdwUGTz
-wwwRq6sJPIsDYVoGSVjBslHjRQX8jdUVH7wwrPq8Qus09AlKUlZ1Z6dsGh80G2uA
-ahTiGnIMz/i8ArCFz5YEOVbzDA==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 -----END CERTIFICATE-----

security/testdata/server.key

@@ -1,28 +1,6 @@
 -----BEGIN PRIVATE KEY-----
-MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQDTurTdoauBSVFl
-6g5f+ATH3c1ChnX2KxoJToYL5wmAzrseMQa02jICK+iFz7ABnR7W3gzcz0T4lgC9
-uTOPwaJUP2gqiMYrNS6b2fmbC7T9wbx7waQ1pVdIiCzrMl76PU9i40Xqkj99Ou8P
-WNP81EuJ7GAVPpmvgk+bBR+0yf/gTxLN0VrUiaVYykHft+/Rw/cBpw7YC9ibelRQ
-37QUjTVNuBFCfxZGfJYypBKYq/5CrGOGrWPASe5rPd3cfGSzb0XJqpPboQHhZ3n0
-eNon+mbZuFV9870vRiBrxkGXKPRtXQahMFDXgN3L4oIugOMUFJlMchxA4VbNw600
-JvwL0ZEDAgMBAAECggEBAJWEG4UHTd2WsOyPRGdw9a9Oaky4N0UHWvOHiBGPrZ5Q
-XsMLS/kavIXcC++yolABbG2/kMW9eK8y/oL77fVuf/uOazjeLVMF00wruaBLvBwW
-W8vpCtT3VZPa1h2hDIEaGp1ycUUc0cjVfUwRJmI8aLuVOKTH+C+Ajkaib6lznEYB
-SCnaVqUk/tECIuX+qXMAOX4OfZr0cfA4SrOQGgcDNaRvt+0zXkSDeGR0+IJuaWOT
-3m4bq0D3kFr7AJ4hCTY9jVDo87lal/psKmhHR5KciG8QeQBwLaFnpKyVfpmXwCI6
-umA5ku/hOt8drd1ewGhaMyy5H4+RHrjJD/eB+No9dcECgYEA6tmrTBBAzal+hRiq
-ShkGi8Xq344g2CsED4Q0qAlmeL1fEoG13CBFy3Bf+XKQUdbHMlBm8o3Q8sZp4QYA
-M0qar9sJD0xTEM9REBmk4w+WVDjQUPGlTqZsPPUN9PoqSPRgm3rXBRuybr7ZdyFZ
-PQMA37lu7ZFmFP7VxeQTYhcxDFcCgYEA5sv/d4PVO8AbQmtD52IKTf31eKa0MLFe
-LeZRq6qySGdAdIaTcPqG/pQrbBTEYv7qtnHqbxd2irKdwjJ6Bz2w8V22xw7wB+CL
-1SRpDWNU6+6bxUMbPhHIdrZXxGjUk4VntIEABXPq33M2BTF15jF/5wcEtR7REmdK
-m66ta7BENTUCgYEAvAg7VlNND109p2LwNROEYjS8sPEi6vDF94Zqgn/EQ7ebfz3L
-VcuhFhmLPjWzx1KnemlVg654NWkXLMuZLXf2EgbVYiJB/5t90940XngEbLpwT96p
-9CbbUpMB8bq6UF8ZWmMn9TcPzguQIgnZYTgeYwIdBqj7iqPelOrfehIHe1ECgYEA
-h4FSVotSkKgz2QU9cwZ+4leu3c2SkdwxXWWSoeWwkw38K+4vdu/AfovkCqsOusjM
-aZ3sdJkkAj7onPIh70prLutEuw6sIxPVRakA/NlLLNKFJoZF4mVyezCHy0t5M7vp
-rXLn3ku2pMbx+o6VmDeLzsqyGt0jB1kZ1tnx+/4brdkCgYA5u+ezA2bApG4L8Rpe
-A0+NKuzM4/HqwvJWsuuAew6bTpUVVXUkV+dLdEaOEZKZUPeYn4DPO++rhZNLUOuh
-vPlEkS2Mv/8196wEtH6ttchULCh50DlhXERTXVfDzNAh/sUW0SzMzvJpkgg5yoi/
-shHxvyiuheRdbTdhHlTeqO4eAA==
+MIG2AgEAMBAGByqGSM49AgEGBSuBBAAiBIGeMIGbAgEBBDBWU5DaKGhC0fMXA8c0
+f9jE0/6CDXZv05LEuU5HommIIhC9tzqpaZUaJYEPZeOjCBKhZANiAASVHU8xKSEO
+Bc74y5gJuV/o6XiBsAs550SEbpK+AX7WRepWZOpNQGklIkT+k4cpT7zko4OmqYjC
+0AAeWV3tHhOb4vxHBPDTgi/3hmpls1S4w0g3oiMtijt/hZck7QWwY78=
 -----END PRIVATE KEY-----