testcerts

// Generate a new Certificate Authority
ca := NewCA()

// Create a new KeyPair with a list of domains
certs, err := ca.NewKeyPair("localhost")
if err != nil {
	fmt.Printf("Error generating keypair - %s", err)
}

// Write the certificates to a file
cert, key, err := certs.ToTempFile("")
if err != nil {
	fmt.Printf("Error writing certs to temp files - %s", err)
}

// Setup Server TLS Config
serverTLSConfig, err := certs.ConfigureTLSConfig(ca.GenerateTLSConfig())
if err != nil {
	fmt.Printf("Error configuring server TLS - %s", err)
}

// Require Valid Client Cert
serverTLSConfig.ClientAuth = tls.RequireAndVerifyClientCert

// Create an HTTP Server
server := &http.Server{
	Addr: "0.0.0.0:8443",
	Handler: http.HandlerFunc(func(w http.ResponseWriter, _ *http.Request) {
		_, err := w.Write([]byte("Hello, World!"))
		if err != nil {
			fmt.Printf("Error writing response - %s", err)
		}
	}),
	TLSConfig: serverTLSConfig,
}
defer func() {
	_ = server.Close()
}()

go func() {
	// Start HTTP Listener
	err = server.ListenAndServeTLS(cert.Name(), key.Name())
	if err != nil && err != http.ErrServerClosed {
		fmt.Printf("Listener returned error - %s", err)
	}
}()

// Wait for Listener to start
<-time.After(3 * time.Second)

// Client TLS Config
clientTLSConfig, err := certs.ConfigureTLSConfig(ca.GenerateTLSConfig())
if err != nil {
	fmt.Printf("Error configuring client TLS - %s", err)
}

// Setup HTTP Client with Cert Pool
client := &http.Client{
	Transport: &http.Transport{
		TLSClientConfig: clientTLSConfig,
	},
}

// Make an HTTPS request
rsp, err := client.Get("https://localhost:8443")
if err != nil {
	fmt.Printf("Client returned error - %s", err)
}

// Print the response
fmt.Println(rsp.Status)

Output:

200 OK