cert

type CACertificate TLSCertificate

type CACertificateConfig struct {
	CertificateFileLocation string
	PrivateKeyFileLocation  string
}

type CreateCertificateOptions struct {
	PublicKey            KeyData
	PrivateKey           KeyData
	ValidDuration        time.Duration
	CertificateSubject   pkix.Name
	ParentTLSCertificate TLSCertificate
	IsCA                 bool
	DNSName              []string
}

type KeyData interface {
	GetKeyX509Format() ([]byte, error)
	GetSHA1Hash() (string, error)
	GetKeyType() KeyType
	GetRawKeyData() any
}

type KeyType string

type RSAPrivateKeyData struct {
	// contains filtered or unexported fields
}

type RSAPublicKeyData struct {
	// contains filtered or unexported fields
}

type TLSCertificate interface {
	IsCA() bool

	GetPublicKey() KeyData
	GetPrivateKey() KeyData
	GetCertificate() *x509.Certificate

	GetCACertificate() (*x509.Certificate, error)
	GetCertificateInPEM() ([]byte, error)
	GetCertificateChains(pemEncoded bool) [][]byte
	GetParentTLSCertificate() TLSCertificate

	CreateCertificateAndSign(certificateSubject pkix.Name, subjectPublicKey KeyData, validDuration time.Duration) (TLSCertificate, error)

	SaveCertificateToFile(certificateFilePath, privateKeyFilePath string) error
	GetCertificateSubjectSerialNumber() string

	ValidateSignature(underValidateCertificate *x509.Certificate) error

	GetNodeID() string
}

type TransportCertificate TLSCertificate

type TransportCertificateConfig struct {
	CertificateFileLocation string
	PrivateKeyFileLocation  string
	ValidDuration           time.Duration
	CommonName              string
	NodeID                  string
}

type WorkerNodeCACertificate TLSCertificate

type WorkerNodeCACertificateConfig struct {
	CACertificateFilePath string
}

type WorkerNodeTransportCertificateConfig struct {
	CertificateFileLocation string
	PrivateKeyFileLocation  string
}