identity

type Artifact struct {
	// Key is the name that this artifact should be stored under within a
	// destination. For a file based destination, this will be the file name.
	Key       string
	Kind      ArtifactKind
	ToBytes   func(*Identity) []byte
	FromBytes func(*proto.Certs, *LoadIdentityParams, []byte)

	// Optional indicates whether or not an identity should fail to load if this
	// key is missing.
	Optional bool

	// OldKey allows an artifact to be migrated from an older key to a new key.
	// If this value is set, and we are unable to load from Key, we will try
	// and load from OldKey
	OldKey string
}

type ArtifactKind string

type Facade struct {
	// contains filtered or unexported fields
}

type Identity struct {
	// PrivateKeyBytes is a PEM encoded private key
	PrivateKeyBytes []byte
	// PublicKeyBytes contains bytes of the original SSH public key
	PublicKeyBytes []byte
	// CertBytes is a PEM encoded SSH host cert
	CertBytes []byte
	// TLSCertBytes is a PEM encoded TLS x509 client certificate
	TLSCertBytes []byte
	// TLSCACertBytes is a list of PEM encoded TLS x509 certificate of certificate authority
	// associated with auth server services
	TLSCACertsBytes [][]byte
	// SSHCACertBytes is a list of SSH CAs encoded in the authorized_keys format.
	SSHCACertBytes [][]byte
	// TokenHashBytes is the hash of the original join token
	TokenHashBytes []byte

	// Below fields are "computed" by ReadIdentityFromStore - this essentially
	// validates the raw data and saves these being continually recomputed.
	// KeySigner is an SSH host certificate signer
	KeySigner ssh.Signer
	// SSHCert is a parsed SSH certificate
	SSHCert *ssh.Certificate
	// SSHHostCheckers holds the parsed SSH CAs
	SSHHostCheckers []ssh.PublicKey
	// X509Cert is the parsed X509 client certificate
	X509Cert *x509.Certificate
	// TLSCAPool is the parsed TLS CAs
	TLSCAPool *x509.CertPool
	// TLSCert is the parsed TLS client certificate
	TLSCert *tls.Certificate
	// ClusterName is a name of host's cluster determined from the
	// x509 certificate.
	ClusterName string
}

type LoadIdentityParams struct {
	PrivateKeyBytes []byte
	PublicKeyBytes  []byte
	TokenHashBytes  []byte
}