daemon

Protocol-independent daemon infrastructure. http_host parses and normalises request hosts. listen owns explicit interface binds, connection tagging, ACL/rate/concurrency guards and live enable/disable controls.

Enable tls for SNI certificate snapshots, LE production/staging chain validation, HTTP-01 ACME account/order handling and internal self-signed certificate generation. SNI selection and the PEM loader are re-exported from config, preserving one implementation.

The four staging trust anchors retain their original DER bytes and source references in tls/le_staging_roots.rs. They are used only for staging.

Test with cargo test --locked -p daemon --features tls and cargo test --locked -p daemon --no-default-features. No issuance request or deployed listener is needed for the test suite.

Source: libs/daemon.