krl

type KRL struct {
	// Version is a number that increases every time the KRL is modified.
	// When marshaling a KRL, if Version is zero GeneratedDate will be used
	// instead.
	Version uint64
	// GeneratedDate is the Unix timestamp the KRL was generated at. When
	// marshaling a KRL, if GeneratedDate is zero the current Unix timestamp
	// will be used instead.
	GeneratedDate uint64
	// Comment is an optional comment for the KRL.
	Comment string
	// Sections is a list of public key and certificate selectors that this
	// KRL applies to.
	Sections []KRLSection
	// SigningKeys is set by ParseKRL and Marshal to the list of Signers
	// that signed (or which claimed to sign) the KRL in the order they
	// appeared (i.e., innermost-first).
	SigningKeys []ssh.PublicKey
}

type KRLCertificateKeyID []string

type KRLCertificateSection struct {
	// CA is the certificate authority whose keys are being revoked by this
	// section. If CA is nil, this section applies to keys signed by any
	// certificate authority.
	CA ssh.PublicKey
	// Sections is a list of certificate selectors.
	Sections []KRLCertificateSubsection
}

type KRLCertificateSerialBitmap struct {
	Offset uint64
	Bitmap *big.Int
}

type KRLCertificateSerialList []uint64

type KRLCertificateSerialRange struct {
	Min, Max uint64
}

type KRLCertificateSubsection interface {
	// contains filtered or unexported methods
}

type KRLExplicitKeySection []ssh.PublicKey

type KRLFingerprintSHA256Section [][sha256.Size]byte

type KRLFingerprintSection [][sha1.Size]byte

type KRLSection interface {
	// contains filtered or unexported methods
}

type KRLSigningErrors []error