cim

type CIM interface {
	//cim uniq  id
	//GetIdentifier() string
	// construct consortium identity manager
	//SetUp(conf *CIMConfig) error
	SetUpFromCA(rootCAByte []byte) error
	GetRootCert() Identity
	//GetTLSRootCert() []byte
	// revoke cert list
	//GetCrlList() []*pkix.CertificateList
	GetTLSIntermediateCert() []byte
	GetSigningIdentity() SigningIdentity
	Validate(id Identity) error
	///CreateIdentity(priv string) bool
	ValidateByByte(certByte []byte) error
	ValidateRootCert(certByte []byte) error
}

type CIMManager interface {

	// Get all the CIM
	GetCIMs() (map[string]CIM, error)
	GetCIM(identifier string) (CIM, error)
	// validate any identity
	Validate(id Identity)
	// contains filtered or unexported methods
}

type CimList struct {
	CryptoType uint8
	CimMap     []CIM
	CIM_Epoch  *big.Int
	PTable     *vm.PerminTable
	// contains filtered or unexported fields
}

type Configuration struct {
	Enabled   bool
	EcdsaPath string
	GmPath    string
}

type CryptoConfig struct {
	SignatureHashFamily            string
	IdentityIdentifierHashFunction string
}

type Identity interface {
	//ExpiresAt() time.Time
	//detemine if the signature  is this identity singed.
	//Verify(msg []byte, sig []byte) error
	VerifyByte(cert []byte) error
	// contains filtered or unexported methods
}

type ReIdentity struct {
	Identity *x509.Certificate `json:"identity"       gencodec:"required"`
}

type SigningIdentity interface {
	Identity
	Sign(msg []byte) ([]byte, error)
	GetPublicVersion() Identity
}