ca

type CertificateData interface {
	// Returns a certificate.
	Certificate() *x509.Certificate
	// Returns PEM bytes.
	PEM() []byte
}

type CertificateWithKeyData interface {
	// Returns a certificate.
	Certificate() *x509.Certificate
	// Returns certificate PEM bytes.
	CertificatePEM() []byte
	// Returns a key.
	Key() *rsa.PrivateKey
	// Returns key PEM bytes.
	KeyPEM() []byte
}

type EmbeddedCA interface {
	// CAPEMChain returns CA chain in the PEM format.
	CAPEMChain() []string
	// Creates a new client certificate and the certificate with a private key.
	NewClientCert() (CertificateWithKeyData, error)
	// Creates a new client certificate and constructs a tls.Config valid for this CA.
	NewClientCertTLSConfig(string) (*tls.Config, error)
	// Creates a new server certificate and constructs a tls.Config valid for this CA.
	NewServerCertTLSConfig() (*tls.Config, error)
}

type EmbeddedCAConfig struct {
	Addresses       []string
	CertsValidFor   time.Duration
	KeySize         int
	UseIntermediate bool
}