grpc

type ClientCertificateVerifier interface {
	VerifyParsedClientCertificate(chain []*x509.Certificate) (addr.IA, error)
}

type Engine interface {
	// Storing SVs in the server allows for the server to still have access to
	// handed out secrets even after rebooting. It is not critical to the server
	// to derive secret values fast, so the lookup operation is acceptable.
	GetSecretValue(ctx context.Context, meta drkey.SecretValueMeta) (drkey.SecretValue, error)
	GetLevel1Key(ctx context.Context, meta drkey.Level1Meta) (drkey.Level1Key, error)

	DeriveLevel1(meta drkey.Level1Meta) (drkey.Level1Key, error)
	DeriveASHost(ctx context.Context, meta drkey.ASHostMeta) (drkey.ASHostKey, error)
	DeriveHostAS(ctx context.Context, meta drkey.HostASMeta) (drkey.HostASKey, error)
	DeriveHostHost(ctx context.Context, meta drkey.HostHostMeta) (drkey.HostHostKey, error)
}

type Fetcher struct {
	Dialer     sc_grpc.Dialer
	Router     snet.Router
	MaxRetries int
	// contains filtered or unexported fields
}

type Server struct {
	LocalIA                   addr.IA
	ClientCertificateVerifier ClientCertificateVerifier
	Engine                    Engine
	// AllowedSVHostProto is a set of (Host,Protocol) pairs that represents the allowed
	// protocols hosts can obtain secrets values.
	AllowedSVHostProto map[config.HostProto]struct{}
}