testacme

type DNS struct {
	// contains filtered or unexported fields
}

type NameserverDB struct {
	// contains filtered or unexported fields
}

type Pebble struct {
	// contains filtered or unexported fields
}

type PebbleOption = func(*pebbleConfig) error

type PebbleServerConfig struct {
	// ListPageSize is the number used to split pages when pagingating response.
	ListPageSize int `json:"per-page"`
	// HTTPVerificationPort is the port connected to for HTTP based challenge
	// verification.
	HTTPVerificationPort int `json:"http-verification-port"`
	// TLSVerificationPort is the port connected to for TLS based challenge
	// verification.
	TLSVerificationPort int `json:"tls-verification-port"`
	// VerificationDNSResolver is the DNS resolver to use when performing
	// verification.
	VerificationDNSResolver string `json:"verification-dns-resolver"`
	// PermitInsecureGET permits HTTP GET requests to API endpoints. This mimics
	// LetsEncrypt's behavior however the spec is for POST - which is the
	// default when this is left unset or set to false.
	PermitInsecureGET bool `json:"permit-insecure-get"`
	// RequireExternalAccountBinding requires EAB values provided in API
	// requests. This is not fully plumbed - if you find that it works (or that
	// it doesn't) , please create an issue to improve the implementation.
	RequireExternalAccountBinding bool `json:"require-external-account-binding"`
	// CertificateValidityPeriod is the duration for which vended certificates
	// are valid for.
	CertificateValidityPeriod time.Duration `json:"certificate-validity-period"`
	// CertificateAlternateChains is the number of alternate Root CA chains to
	// build and operate the testacme CA (Pebble) with.
	CertificateAlternateChains int `json:"certificate-alternate-chains"`
	// CertificateChainLength is the total number of certificates in the
	// generated Root CA chains. Setting this to `1` generates *only* Root CA
	// certificate(s) while `2` would include a single Intermediate CA.
	CertificateChainLength int `json:"certificate-chain-length"`
}

type Porter interface {
	// HTTPVerificationPort is the port number used in HTTP challenge
	// verification.
	HTTPVerificationPort() int
	// TLSVerificationPort is the port number used in TLS challenge
	// verification.
	TLSVerificationPort() int
}

type TestACME interface {
	Porter
	// Client provides a configured HTTP client (eg: with TLS configured).
	Client() *http.Client
	// Server returns the running ACME HTTP server.
	Server() *httptest.Server
	// ACMEDirectoryURL is the URL to fetch RFC8555 7.1.1 compliant Directory
	// object for this ACME instance.
	//
	// https://www.rfc-editor.org/rfc/rfc8555.html#section-7.1.1
	ACMEDirectoryURL() string
}