This directory contains certificates and keys used for testing QUIC. Most of the contents are generated by manual invocation of a script. The steps to regnenerate everything are:
Build the ssl key encryptor: blaze build //gfe/gfe2/ssl_cert_storage:ssl_key_encryptor
Update the nonce (nonce.txt) to whatever stable value. If the nonce changes, the process of encrypting keys must be repeated.
Invoke the script: go run generate.go
Make sure to commit everything to Piper when done.