p11trustmod

type Backend interface {
	// Metadata
	Info() (pkcs11.SlotInfo, error)
	TokenInfo() (pkcs11.TokenInfo, error)
	IsBuiltinRootList() (bool, error)
	IsTrusted() (bool, error)

	// Query
	// TODO: Add StreamIsolationID param, which resets to a new random number whenever an end-entity cert is queried from Tor Browser.
	QueryCertificate(*x509.Certificate) ([]*CertificateData, error)
	QuerySubject(*pkix.Name) ([]*CertificateData, error)
	QueryIssuerSerial(*pkix.Name, *big.Int) ([]*CertificateData, error)
	QueryAll() ([]*CertificateData, error)
}

type CertificateData struct {
	Label                string
	Certificate          *x509.Certificate
	BuiltinPolicy        bool
	TrustServerAuth      uint
	TrustClientAuth      uint
	TrustCodeSigning     uint
	TrustEmailProtection uint
}