ca

type CA struct {
	Config *Config
	// contains filtered or unexported fields
}

type CertCustomiser func(certificate *x509.Certificate) error

type CertTrace struct {
	Description string    `json:"description"`
	NotAfter    time.Time `json:"not_after"`
	Serial      []byte    `json:"serial"`
	Sha512_256  []byte    `json:"sha512_256"`
}

type Config struct {
	Log struct {
		Path string
		/*
			KeepCopies is the number of past audit logs to keep for the CA.
			Use an integer value here, 0 for the default number, or -1 to not
			keep any copies.
		*/
		KeepCopies int `yaml:"keep_copies"`
	} `yaml:"log"`
	Certificate struct {
		Path string `yaml:"path"`
	} `yaml:"certificate"`
	Driver       string              `yaml:"driver"`
	DriverConfig UntypedDriverConfig `yaml:"driver_config"`
	// contains filtered or unexported fields
}

type Driver interface {
	io.Closer

	// InitPrivateKey should create a new private key only if one does not
	// already exist. If one does exist it should return the public part and
	// a signer. This will be called once when a CA is created.
	InitPrivateKey(prompt prompt.PasswordPrompt) (publicKey crypto.PublicKey, certCustomiser CertCustomiser, signer crypto.Signer, err error)

	// GetSigner returns the signer that this driver stores. It may use the prompt
	// to get a pin or passphrase during the call to GetSigner, or after it has
	// returned during a call to methods on the returned signer.
	GetSigner(certificate *x509.Certificate, prompt prompt.PasswordPrompt) (crypto.Signer, error)

	// SetCertificate is called a single time on completion of the CA's
	// initialisation. If the driver stores certificates then this is the time
	// to save it. It does not need to store the certificate.
	SetCertificate(certificate *x509.Certificate, prompt prompt.PasswordPrompt) error
}

type DriverFactory interface {
	String() string
	NewDriverConfig() any
	NewDriver(caConfig *Config, driverConfig any) (Driver, error)
}

type LogAuditor struct {
	CaCert      *x509.Certificate
	CertsIssued []*CertTrace
	// contains filtered or unexported fields
}

type UntypedDriverConfig struct {
	// contains filtered or unexported fields
}