pki

type CRLHolder interface {
	Put([]byte) error                    // Put file content for crl
	Get() (*pkix.CertificateList, error) // Get current revoked cert list
}

type KeyStorage interface {
	Put(pair *pair.X509Pair) error                       // Put new pair to KeyStorage. Overwrite if already exist.
	GetByCN(cn string) ([]*pair.X509Pair, error)         // Get all keypairs by CN.
	GetLastByCn(cn string) (*pair.X509Pair, error)       // Get last pair by CN.
	GetBySerial(serial *big.Int) (*pair.X509Pair, error) // Get one keypair by serial.
	DeleteByCn(cn string) error                          // Delete all keypairs by CN.
	DeleteBySerial(serial *big.Int) error                // Delete one keypair by serial.
	GetAll() ([]*pair.X509Pair, error)                   // Get all keypair
}

type Option func(*x509.Certificate)

type PKI struct {
	Storage KeyStorage
	// contains filtered or unexported fields
}

type SerialProvider interface {
	Next() (*big.Int, error) // Next return next uniq serial
}