atlas

type APIError struct {
	Description string `json:"description"`
	StatusCode  int
}

type CertRequestOptions struct {
	// OverrideSignatureAlgorithm will explicitly set the signature algorithm
	OverrideSignatureAlgorithm *string

	// OverrideSignatureHashAlgorithm will explicitly set the hash algorithm
	OverrideSignatureHashAlgorithm *string

	// OverrideHasStaticKeyUsage will omit key usage information to handle static key usage policy
	OverrideDisableKeyUsageExtensions bool

	// OverrideHasStaticKeyUsage will omit key usage information to handle static key usage policy
	OverrideDisableExtendedKeyUsageExtensions bool
}

type Certificate struct {
	// Status of the certificate typically ISSUED, or REVOKED
	Status string `json:"status"`

	// The PEM Encoded Certificate
	Certificate string `json:"certificate"`

	// UpdatedAt the time which the object was last updated, typically issuance or revocation time.
	UpdatedAt uint64 `json:"updated_at"`
}

type Client interface {
	// Login performs the exchange of
	Login(ctx context.Context) error

	// GetConfig gets the configuration profile for your Atlas Instance, Refer to the API documentation for more info.
	GetConfig(ctx context.Context) (ValidationPolicy, error)

	// GetTrustChain returns the Certificate Authority chain used by the instance, output is an array of PEM encoded certs.
	GetTrustChain(ctx context.Context) ([]string, error)

	// IssueCertificate will that the provided CSR and Parameters to request issuance of a certificate from your Atlas Instance.
	IssueCertificate(ctx context.Context, req *IssueCertRequest) (*Certificate, error)

	// GetCert gets the certificate for the provided serial number.
	GetCert(ctx context.Context, id string) (*Certificate, error)
	// RevokeCert revokes the certificate with the provided serial number.
	RevokeCert(ctx context.Context, id string) error
}

type ClientConfig struct {
	APIKey      *string
	APISecret   *string
	HVCAUrl     string
	Certificate *tls.Certificate

	// Retries is the number of attempts a 5XX class error or 202 status will be retried
	Retries int

	// InitialBackoff is the initial backoff used in the exponential backoff.
	InitialBackoff time.Duration
}

type EKUPolicy struct {
	EKUs     ListPolicy `json:"ekus"`
	Critical bool       `json:"critical"`
}

type IssueCertRequest struct {
	Validity            *Validity            `json:"validity,omitempty" validate:"required"`
	SubjectDN           *SubjectDN           `json:"subject_dn,omitempty" validate:"required"`
	SAN                 *SAN                 `json:"san,omitempty"`
	SubjectDA           *SubjectDA           `json:"subject_da,omitempty"`
	KeyUsages           *KeyUsages           `json:"key_usages,omitempty"`
	ExtendedKeyUsages   []string             `json:"extended_key_usages,omitempty"`
	QualifiedStatements *QualifiedStatements `json:"qualified_statements,omitempty"`
	MsExtensionTemplate *MsExtensionTemplate `json:"ms_extension_template,omitempty"`
	CustomExtensions    map[string]string    `json:"custom_extensions,omitempty"`
	Signature           *Signature           `json:"signature,omitempty"`
	PublicKey           string               `json:"public_key" validate:"required"`
	PublicKeySignature  string               `json:"public_key_signature,omitempty"`
}

type KeyUsagePolicy struct {
	ContentCommitment  string `json:"content_commitment"`
	CrlSign            string `json:"crl_sign"`
	DataEncipherment   string `json:"data_encipherment"`
	DecipherOnly       string `json:"decipher_only"`
	DigitalSignature   string `json:"digital_signature"`
	EncipherOnly       string `json:"encipher_only"`
	KeyAgreement       string `json:"key_agreement"`
	KeyCertificateSign string `json:"key_certificate_sign"`
	KeyEncipherment    string `json:"key_encipherment"`
}

type KeyUsages struct {
	DigitalSignature   *bool `json:"digital_signature,omitempty"`
	ContentCommitment  *bool `json:"content_commitment,omitempty"`
	KeyEncipherment    *bool `json:"key_encipherment,omitempty"`
	DataEncipherment   *bool `json:"data_encipherment,omitempty"`
	KeyAgreement       *bool `json:"key_agreement,omitempty"`
	KeyCertificateSign *bool `json:"key_certificate_sign,omitempty"`
	CrlSign            *bool `json:"crl_sign,omitempty"`
	EncipherOnly       *bool `json:"encipher_only,omitempty"`
	DecipherOnly       *bool `json:"decipher_only,omitempty"`
}

type ListPolicy struct {
	Static   bool     `json:"static"`
	List     []string `json:"list"`
	MinCount int      `json:"mincount"`
	MaxCount int      `json:"maxcount"`
}

type MockClient struct {
	OutError    error
	OutCert     *Certificate
	OutCertList []string
	OutPolicy   ValidationPolicy
}

type MsExtensionTemplate struct {
	ID           string `json:"id,omitempty"`
	MajorVersion int    `json:"major_version,omitempty"`
	MinorVersion int    `json:"minor_version,omitempty"`
}

type QualifiedStatements struct {
	Semantics             *QualifiedStatementsSemantics `json:"semantics,omitempty"`
	EtsiQcCompliance      bool                          `json:"etsi_qc_compliance,omitempty"`
	EtsiQcType            string                        `json:"etsi_qc_type,omitempty"`
	EtsiQcSscdCompliance  bool                          `json:"etsi_qc_sscd_compliance,omitempty"`
	EtsiQcRetentionPeriod int                           `json:"etsi_qc_retention_period,omitempty"`
	EtsiQcPds             map[string]string             `json:"etsi_qc_pds,omitempty"`
}

type QualifiedStatementsSemantics struct {
	Identifier      string   `json:"identifier,omitempty"`
	NameAuthorities []string `json:"name_authorities,omitempty"`
}

type SAN struct {
	DNSNames    []string         `json:"dns_names,omitempty"`
	IPAddresses []string         `json:"ip_addresses,omitempty"`
	URIs        []string         `json:"uris,omitempty"`
	Emails      []string         `json:"emails,omitempty"`
	OtherNames  []*SANOtherNames `json:"other_names,omitempty"`
}

type SANOtherNames struct {
	Type  string `json:"type"`
	Value string `json:"value,omitempty"`
}

type Signature struct {
	Algorithm     string `json:"algorithm,omitempty"`
	HashAlgorithm string `json:"hash_algorithm,omitempty"`
}

type SignaturePolicy struct {
	Algorithm     SimpleListPolicy `json:"algorithm"`
	HashAlgorithm SimpleListPolicy `json:"hash_algorithm"`
}

type SimpleListPolicy struct {
	List     []string `json:"list"`
	Presence string   `json:"presence"`
}

type SubjectDA struct {
	Gender               string                     `json:"gender,omitempty"`
	DateOfBirth          string                     `json:"date_of_birth,omitempty"`
	PlaceOfBirth         string                     `json:"place_of_birth,omitempty"`
	CountryOfCitizenship []string                   `json:"country_of_citizenship,omitempty"`
	CountryOfResidence   []string                   `json:"country_of_residence,omitempty"`
	ExtraAttributes      []*SubjectDaExtraAttribute `json:"extra_attributes,omitempty"`
}

type SubjectDN struct {
	CommonName                                     string                     `json:"common_name,omitempty"`
	Country                                        string                     `json:"country,omitempty"`
	State                                          string                     `json:"state,omitempty"`
	Locality                                       string                     `json:"locality,omitempty"`
	StreetAddress                                  string                     `json:"street_address,omitempty"`
	Organization                                   string                     `json:"organization,omitempty"`
	OrganizationalUnit                             []string                   `json:"organizational_unit,omitempty"`
	Email                                          string                     `json:"email,omitempty"`
	JurisdictionOfIncorporationLocalityName        string                     `json:"jurisdiction_of_incorporation_locality_name,omitempty"`
	JurisdictionOfIncorporationStateOrProvinceName string                     `json:"jurisdiction_of_incorporation_state_or_province_name,omitempty"`
	JurisdictionOfIncorporationCountryName         string                     `json:"jurisdiction_of_incorporation_country_name,omitempty"`
	BusinessCategory                               string                     `json:"business_category,omitempty"`
	ExtraAttributes                                []*SubjectDnExtraAttribute `json:"extra_attributes,omitempty"`
}

type SubjectDaExtraAttribute struct {
	Type  string `json:"type"`
	Value string `json:"value,omitempty"`
}

type SubjectDnExtraAttribute struct {
	Type  string `json:"type" validate:"required"`
	Value string `json:"value"`
}

type ValidationPolicy struct {
	ExtendedKeyUsages EKUPolicy       `json:"extended_key_usages,omitempty"`
	KeyUsages         KeyUsagePolicy  `json:"key_usages,omitempty"`
	Signature         SignaturePolicy `json:"signature,omitemtpy"`
}

type Validity struct {
	NotBefore int64 `json:"not_before" validate:"required"`
	NotAfter  int64 `json:"not_after,omitempty"`
}