TlsConfig
class TlsConfig(val keyStore: KeyStore, val keyAlias: String, val keyStorePassword: CharArray, val privateKeyPassword: CharArray, val httpsPort: Int = 8443)
TLS material for HttpTransport. Holds a keystore containing the server's private key + self-signed certificate under keyAlias, plus the HTTPS port to bind.
Core only consumes a keystore — it never generates one, so it carries no certificate-building dependency. The opt-in droid-mcp-tls module produces a TlsConfig via SelfSignedCert.loadOrCreate(...); a host can equally hand in its own keystore from anywhere.
Because the certificate is self-signed, clients can't validate it against a CA chain. Instead they pin certFingerprintSha256 — surface it in the pairing QR and have the client verify the presented cert's SHA-256 matches.