types

type CertificateAuthority interface {
	// Certificate returns the certificate for the named key version in DER format.
	Certificate(ctx context.Context, keyVersionName string) ([]byte, error)
	// CABundle returns the intermediate..root certificate chain as consecutive PEM blocks for the
	// named key version.
	CABundle(ctx context.Context, keyVersionName string) ([]byte, error)
	// PrimaryRootKeyVersion returns the keyVersionName of the active root key.
	PrimaryRootKeyVersion(ctx context.Context) (string, error)
	// PrimarySigningKeyVersion returns the keyVersionName of the active signing key.
	PrimarySigningKeyVersion(ctx context.Context) (string, error)
	// NewMutation returns an object that manages changes to the CA's persistent state.
	NewMutation() CertificateAuthorityMutation
	// Finalize completes any unflushed changes that the given mutation represents. The mutation
	// object should be the same type as NewMutation returns.
	Finalize(ctx context.Context, mutation CertificateAuthorityMutation) error
	// PrepareResources ensures all necessary resources are present for the CA to function. This is
	// needed for bootstrapping.
	PrepareResources(ctx context.Context) error
	// Wipeout destroys all persisted resources for the CA.
	Wipeout(ctx context.Context) error
}

type CertificateAuthorityMutation interface {
	// SetPrimaryRootKeyVersion updates the mutation object to change the primary root key
	// version to the given one.
	SetPrimaryRootKeyVersion(keyVersionName string)
	// SetPrimarySigningKeyVersion updates the mutation object to change the primary signing key
	// version to the given one.
	SetPrimarySigningKeyVersion(keyVersionName string)
	// AddSigningKeyCert adds a certificate for the given keyVersionName to the CA.
	AddSigningKeyCert(keyVersionName string, cert *x509.Certificate)
	// SetRootKeyCert changes the CA's stored root certificate to cert.
	SetRootKeyCert(cert *x509.Certificate)
}

type Digest struct {
	SHA256 []byte
}

type Signer interface {
	// Sign signs the given data with the named key and returns the standard signature format for the
	// key's type.
	Sign(ctx context.Context, keyName string, digest Digest, opts crypto.SignerOpts) ([]byte, error)
	// PublicKey returns the PEM encoded public key for the named key.
	PublicKey(ctx context.Context, keyName string) ([]byte, error)
}