ca groundwork

server/plugins/ca.ts

@@ -0,0 +1,18 @@
+import { CertificateAuthority } from "../internal/clients/ca";
+import fs from "fs";
+import { fsCertificateStore } from "../internal/clients/store";
+
+let ca: CertificateAuthority | undefined;
+
+export const useGlobalCertificateAuthority = () => {
+  if (!ca) throw new Error("CA not initialised");
+  return ca;
+};
+
+export default defineNitroPlugin(async (nitro) => {
+  const basePath = process.env.CLIENT_CERTIFICATES ?? "./certs";
+  fs.mkdirSync(basePath, { recursive: true });
+  const store = fsCertificateStore(basePath);
+
+  ca = await CertificateAuthority.new(store);
+});