certs

type Archive struct {
	// contains filtered or unexported fields
}

type CertMetadata struct {
	// MacOSSHAHash is a SHA hash of the certificate data as reported by
	// the macOS keychain.
	MacOSSHAHash string
}

type Certificate struct {
	// DevenvName is the name of the devenv that this certificate is
	// associated with.
	DevenvName string

	// Email is the email of the user that this certificate is associated
	// with as well as the creator of the devenv.
	Email string

	// Data is the PEM encoded certificate data for this certificate.
	Data []byte
	// contains filtered or unexported fields
}

type GenerateOptions struct {
	// DevenvName is the name of the devenv that this certificate is
	// associated with.
	DevenvName string

	// Email is the email of the user that this certificate is associated
	// with as well as the creator of the devenv.
	Email string

	// Days is the number of days that the certificate should be valid
	// for.
	//
	// Defaults to 3650 (10 years) when not provided or set to 0.
	Days int
	// contains filtered or unexported fields
}

type NSSDB struct {
	// contains filtered or unexported fields
}

type Store interface {
	// List lists all certificates in the store.
	List() ([]Certificate, error)

	// Delete deletes a certificate from the store.
	// Should not return an error if the certificate does not exist.
	Delete(devenvName string) error

	// Add adds a certificate to the store. If a private key is
	// provided, it will be used stored alongside the certificate
	// and returned by Get in future calls.
	Add(c Certificate, privKeyPem []byte) error

	// Generate generates a new self-signed certificate for the
	// provided devenv name and email address. The private key
	// is retrievable through Get.
	Generate(opts GenerateOptions) (Certificate, []byte, error)

	// Get returns the certificate for a given devenv.
	Get(devenvName string) (Certificate, []byte, error)
}