ca

type APICertSignRequest struct {
	Hostname string `json:"hostname"`
	CSR      string `json:"certificate_request"`
}

type Bundle struct {
	PrivateKey  []byte
	Certificate []byte
	Bundled     []byte
	Fingerprint string // Hash of cert for identification
}

type CertClient interface {
	GenerateCert(string) (*Bundle, error)
	StoreCert(*CertModel) (*CertModel, error)
	GetCertByFingerprint(string) (*CertModel, error)
	GetServerCertByLinkedAPIID(string) (*CertModel, error)
}

type CertModel struct {
	MID             bson.ObjectId `bson:"_id"`
	UID             string
	Bundle          *Bundle
	BundleHistory   []Bundle // On renewal, move bundle here
	Created         time.Time
	Expires         time.Time
	ClientEgressIDs []string // If cert is used as a client cert, IDs of APIs it is attached to
	ServiceID       string   // If cert is used as a server cert, ID of API it belongs to
	IsMeshCert      bool
}

type Client struct {
	CA *Config
	// contains filtered or unexported fields
}

type Config struct {
	Addr              string          `yaml:"addr"`
	Key               string          `yaml:"key"`
	DefaultNames      []csr.Name      `yaml:"defaultNames"`
	DefaultKeyRequest *csr.KeyRequest `yaml:"defaultKeyRequest"`
	MongoConnStr      string          `yaml:"mongoConnStr"`
	CertPath          string          `yaml:"certPath"`
	Secure            bool
	SkipCACheck       bool
}

type Mock struct{}