encryptomatic

type CSRGenerator interface {
	GenerateCSR(ctx context.Context) (*x509.CertificateRequest, error)
}

type CertificateRequest struct {
	// Targets are the target devices which this certificate should be installed on.
	Targets []Installer

	// Names are the domains which this certificate should be requested for.
	Names []string

	// Key is the private key to use to sign the request. If nil, a private key will be generated.
	Key crypto.PrivateKey

	// Request is the pre-generated, pre-signed request. If set, Names and Key will be ignored.
	Request *x509.CertificateRequest
}

type Encryptomatic struct {
	// Verifiers is a slice of the available verifiers. They should each implement one of the available verification APIs.
	Verifiers []Verifier

	// Client is the acme.Client to use to retrieve certificates.
	// It should already have been registered with the directory, and the Terms-of-Service agreed to.
	Client acmeClient
}

type Installer interface {
	SetCertificate(ctx context.Context, caBundle []*x509.Certificate, cert *x509.Certificate, privKey crypto.PrivateKey) error
	GetCertificate(ctx context.Context) (*x509.Certificate, error)
}

type InstallerFactory func(v *viper.Viper) (Installer, error)

type Registry struct {
	// contains filtered or unexported fields
}

type Verifier interface {
	CanVerify(ctx context.Context, name string) (bool, error)
}

type VerifierDNS01 interface {
	Verifier
	VerifyDNS01Record(ctx context.Context, name, value string) error
}

type VerifierFactory func(v *viper.Viper) (Verifier, error)