hsmocsp

type CaSourceHandleConfig struct {
	// CaCertPattern is pattern for the router handle
	CaCertPattern string `yaml:"certPattern"`
	// CaCertPath is a required Uri (file path or http url)
	CaCertPath string `yaml:"certPath"`
	// CaCrlPattern pattern for the router handle
	CaCrlPattern string `yaml:"crlPattern"`
	// CaCrlPath is a required Uri (file path or http url)
	CaCrlPath string `yaml:"crlPath"`
	// CaIncexPath is a required Uri (file path or http url)
	CaIndexPath string `yaml:"indexPath"`
}

type CertStatus string

type Config struct {
	// LogLevel
	LogLevel int `yaml:"logLevel"`
	Server   struct {
		// Host is the local machine IP Address to bind the HTTP Server to
		Host string `yaml:"host"`
		// Port is the local machine TCP Port to bind the HTTP Server to
		Port string `yaml:"port"`
		// Time out
		Timeout struct {
			// Server is the general server timeout to use
			// for graceful shutdowns
			Server time.Duration `yaml:"server"`
			// Write is the amount of time to wait until an HTTP server
			// write opperation is cancelled
			Write time.Duration `yaml:"write"`
			// Read is the amount of time to wait until an HTTP server
			// read operation is cancelled
			Read time.Duration `yaml:"read"`
			// Idle is the amount of time to wait
			// until an IDLE HTTP session is closed
			Idle time.Duration `yaml:"idle"`
		} `yaml:"timeout"`
		// ReadinessProbeHandles configures the handle for readiness probe
		ReadinessProbeHandle ReadinessProbeHandleConfig `yaml:"readinessProbeHandle"`
		// LivenessProbeHandles configures the handle for liveness probe
		LivenessProbeHandle LivenessProbeHandleConfig `yaml:"livenessProbeHandle"`
		// OpenSslSourceHandles configures Source and Handles for ocsp responder
		OpenSslSourceHandles []OpenSslSourceHandleConfig `yaml:"opensslSourceHandles,flow"`
		// VaultSourceHandles configures Source and Handles for ocsp responder
		VaultSourceHandles []VaultSourceHandleConfig `yaml:"vaultSourceHandles,flow"`
	} `yaml:"server"`
}

type KeyHsmConfig struct {
	// ModulePath is path to PKCS#11 library.
	ModulePath string `yaml:"modulePath"`
	// SlotNumber identifies a token to use by the slot containing it.
	// negative value defaults to Token label
	SlotNumber int `yaml:"slotNumber"`
	// TokenLabel, used to identify the Token, which is prefered over SlotID
	TokenLabel string `yaml:"tokenLabel"`
	// KeyLabel, used to identify the KeyPair, which is prefered over the KeyID
	KeyLabel string `yaml:"keyLabel"`
	// KeyID, hex id used to identify the KeyPair, though not required to find if label is provided
	// KeyPairs must have a NON-EMPTY CKA_ID to be found
	KeyID string `yaml:"keyID"`
	// HSM Pin
	Pin string `required:"true" envconfig:"HSM_PIN" yaml:"pin"`
}

type LivenessProbeHandleConfig struct {
	Pattern string `yaml:"pattern"`
}

type OcspSourceHandleConfig struct {
	// Pattern is the pattern for the router handle
	OcspPattern string `yaml:"pattern"`
	// OscpCertPath is a required Uri (file path or http url)
	OcspCertPath string `yaml:"certPath"`
	// OcspKeyPath is the optional Uri (file path)
	OcspKeyPath string `yaml:"keyPath"`
	// OcspKeyHsm is used to configure a PKCS11 cryptoSigner
	// If OcspKeyPath is set to ”
	OcspKeyHsm KeyHsmConfig `yaml:"keyHsm"`
}

type OpenSslIndexRecord struct {
	// contains filtered or unexported fields
}

type OpenSslSource struct {
	// contains filtered or unexported fields
}

type OpenSslSourceHandleConfig struct {
	OcspSourceHandle     OcspSourceHandleConfig `yaml:"ocsp"`
	CaSourceHandleConfig `yaml:"ca"`
}

type ReadinessProbeHandleConfig struct {
	Pattern string `yaml:"pattern"`
}

type VaultConfig struct {
	// VaultMount is the pki mount for your ocsp (assumes ca, crl, and cert vault urls)
	PkiMount string     `yaml:"pkiMount"`
	Client   api.Config `yaml:"api"`
}

type VaultSourceHandleConfig struct {
	OcspSourceHandle OcspSourceHandleConfig `yaml:"ocsp"`
	VaultConfig      `yaml:"vault"`
}