library for returning x509.CertPool

[adamdecaf]

crypto/x509 in Go has a CertPool struct which is used by many other functions. It would be nice to offer a CertPool from a whitelist.

I'm thinking something like the following:

// CertPool returns an x509.CertPool which has had a whitelist applied. 
// The initial set of certificates comes from the system's store. 
func CertPool(wh whitelist.Whitelist) (*x509.CertPool, error)

There's a similar package which embeds certificates: https://github.com/certifi/gocertifi