square / ghostunnel / 1227

91%

master: 90%

Pull #225

travis-ci

Improve keychain/certstore certificate choice

It's possible for the macOS keychain to have multiple certificates with
the same name. In this case, the code used to pick whichever one
arbitrarily showed up first in the certstore.Identities() results. This
tended to be the first one added, which is usually not the most up to
date one. Instead, this now will pick the one with the most distant
NotAfter date.

16 of 16 new or added lines in 2 files covered. (100.0%)

1044 of 1144 relevant lines covered (91.26%)

32.71 hits per line