certs

type Cert interface {
	encoding.TextMarshaler
	encoding.TextUnmarshaler
	encoding.BinaryMarshaler
	encoding.BinaryUnmarshaler
	json.Marshaler
	json.Unmarshaler
	yaml.Marshaler
	yaml.Unmarshaler
	toml.Marshaler
	toml.Unmarshaler
	cbor.Marshaler
	cbor.Unmarshaler
	fmt.Stringer

	// Chain returns the certificate chain from the internal representation.
	// It returns an empty string and no error if the internal representation
	// is not a chain.
	//
	// The returned string is a PEM encoded certificate chain, where each
	// certificate is separated by a newline.
	//
	// If there is an error during parsing, it returns an empty string and
	// the error.
	//
	// The returned error is of type `x509.ParseCertificate` or
	// `x509.ParsePKCS7` if there is an error during parsing.
	Chain() (string, error)
	// Pair returns a pair of PEM encoded public and private keys.
	// It returns empty strings and no error if the internal representation
	// is not a pair.
	//
	// The returned public key is a PEM encoded public key, and the returned
	// private key is a PEM encoded private key.
	//
	// If there is an error during parsing, it returns empty strings and
	// the error.
	//
	// The returned error is of type `x509.ParseCertificate` or
	// `x509.ParsePKCS7` if there is an error during parsing.
	Pair() (pub string, key string, err error)
	// TLS returns the currently active certificate pair in the TLS configuration.
	//
	// The returned value is a tls.Certificate which contains the currently
	// active certificate pair in the TLS configuration.
	//
	// The returned value is empty if the TLS configuration does not contain
	// any certificate pairs.
	//
	// The TLS configuration is updated when a new certificate pair is added
	// using the `AddCertificatePair` functions.
	//
	// The TLS configuration is not updated when a new certificate pair is added
	// using the `AddCertificatePairString` functions.
	//
	// The TLS configuration is not updated when a new certificate pair is added
	// using the `AddCertificatePairFile` functions.
	TLS() tls.Certificate
	// Model returns the internal representation of the certificate.
	//
	// The returned value is a certificate which contains the internal
	// representation of the certificate.
	//
	// The returned value is empty if the internal representation is not a
	// valid certificate.
	//
	Model() Certif

	// IsChain returns true if the internal representation of the certificate is
	// a chain, and false otherwise.
	//
	// A chain is a PEM encoded certificate chain, where each certificate is
	// separated by a newline.
	//
	// The IsChain function does not check if the certificate chain is valid.
	// It only checks if the internal representation is a valid chain.
	//
	// The IsChain function is thread-safe.
	// Multiple goroutines can call the IsChain function at the same time without
	// affecting the correctness of the TLS configuration.
	IsChain() bool
	// IsPair returns true if the internal representation of the certificate is a pair,
	// and false otherwise.
	//
	// A pair is a PEM encoded private key and a PEM encoded public key.
	//
	// The IsPair function does not check if the pair is valid.
	// It only checks if the internal representation is a valid pair.
	//
	// The IsPair function is thread-safe.
	// Multiple goroutines can call the IsPair function at the same time without
	// affecting the correctness of the TLS configuration.
	IsPair() bool

	// IsFile returns true if the internal representation of the certificate is a file,
	// and false otherwise.
	//
	// A file is a path to a PEM file containing a certificate pair.
	//
	// The IsFile function does not check if the file is valid.
	// It only checks if the internal representation is a valid file.
	//
	// The IsFile function is thread-safe.
	// Multiple goroutines can call the IsFile function at the same time without
	// affecting the correctness of the TLS configuration.
	IsFile() bool
	// GetCerts returns the internal representation of the certificate as a slice of
	// strings.
	//
	// The returned slice of strings contains the internal representation of the
	// certificate. The internal representation can be a chain, a pair or a file.
	//
	// The GetCerts function does not check if the internal representation is
	// valid. It only returns the internal representation as a slice of strings.
	//
	// The GetCerts function is thread-safe.
	// Multiple goroutines can call the GetCerts function at the same time without
	// affecting the correctness of the TLS configuration.
	GetCerts() []string
}

type Certif struct {
	// contains filtered or unexported fields
}

type Config interface {
	Cert() (*tls.Certificate, error)

	IsChain() bool
	IsPair() bool

	IsFile() bool
	GetCerts() []string
}

type ConfigChain string

type ConfigPair struct {
	Key string `mapstructure:"key" json:"key" yaml:"key" toml:"key"`
	Pub string `mapstructure:"pub" json:"pub" yaml:"pub" toml:"pub"`
}