registryserver

type KeyServer interface {
	// GetName returns the name of the key server
	GetName() string

	// IsReady return if the connection the key server is ready
	IsReady() bool

	// AttestQuote attests the given quote is valid. Both quote and
	// publicKey are base64 encoded. The publickey hash part of the quote
	// must match with the given publicKey.
	//
	// Returns true if given quote is valid.
	// Returns false if verification failed.
	// In case of other problems, appropriate error gets returned.
	AttestQuote(ctx context.Context, signerName string, quote []byte, publicKey []byte) (bool, error)

	// GetCAKeyCertificate retrieves the stored CA key and certificate at the key-manager
	// for given signer signerName. Both quote and publicKey are base64 encoded.
	// First the given SGX quote is validated is valid by using quote validation library.
	// The publickey hash part of the quote must match with the given publicKey.
	//
	// On success, returns the key and certificate. The CA private key(PWK) is wrapped
	// with a symmetric key(SWK) that was wrapped with the given publicKey. Both the
	// SWK and PWK are concatenated and returned as single base64 encoded block. Certificate
	// is base64 encoded.
	// Otherwise, appropriate error gets returned.
	GetCAKeyCertificate(ctx context.Context, signerName string, quote []byte, publicKey []byte) ([]byte, []byte, error)
}

type PluginRegistry struct {
	*grpcserver.GrpcServer
	// contains filtered or unexported fields
}