certificates

type CSRProvider interface {
	CreateCSR(subject pkix.Name) (string, *rsa.PrivateKey, error)
}

type ClientCredentials struct {
	ClientKey         *rsa.PrivateKey
	CertificateChain  []*x509.Certificate
	ClientCertificate *x509.Certificate
}

type Credentials struct {
	ClientCredentials
	CACertificates []*x509.Certificate
}

type Manager interface {
	GetClientCredentials() (ClientCredentials, error)
	PreserveCredentials(Credentials) error
	CredentialsExist() (bool, error)
}

type PemEncodedCredentials struct {
	ClientKey         []byte
	CertificateChain  []byte
	ClientCertificate []byte
	CACertificates    []byte
}