cert

type Cache interface {
	Put(cert *tls.Certificate) error
	Get(cn string) (*tls.Certificate, bool)
}

type CurveType string

type File struct {
	PublicKeyPath  string
	PrivateKeyPath string
}

type GenerationOptions struct {
	CommonName         string
	Organization       []string
	OrganizationalUnit []string
	IPAddresses        []net.IP
	DNSNames           []string
	Country            []string
	Province           []string
	Locality           []string
	StreetAddress      []string
	PostalCode         []string
}

type Generator interface {
	CACert(options GenerationOptions) (*tls.Certificate, error)
	ServerCert(options GenerationOptions, ca *tls.Certificate) (*tls.Certificate, error)
}

type KeyProvider func() (key interface{}, err error)

type Options struct {
	RootCACert                  File
	CertCachePath               string
	Curve                       CurveType
	Validity                    ValidityByPurpose
	IncludeInsecureCipherSuites bool
	MinTLSVersion               TLSVersion
}

type PEMCert struct {
	*tls.Certificate
}

type Store interface {
	CACert() *tls.Certificate
	Certificate(serverName string, ip net.IP) (*tls.Certificate, error)
	TLSConfig() *tls.Config
}

type TLSVersion string

type TimeSource interface {
	UTCNow() time.Time
}

type ValidityByPurpose struct {
	CA     ValidityDuration
	Server ValidityDuration
}

type ValidityDuration struct {
	NotBeforeRelative time.Duration
	NotAfterRelative  time.Duration
}