aghtls

type DefaultManager struct {
	// contains filtered or unexported fields
}

type DefaultManagerConfig struct {
	// Logger is used for logging the operation of the manager.  It must not be
	// nil.
	Logger *slog.Logger

	// Watcher is used to watch the TLS certificate and key files.  It must not
	// be nil.
	Watcher aghos.FSWatcher
}

type EmptyManager struct{}

type EmptyTLSConfigProvider struct{}

type Manager interface {
	service.Interface
	service.Refresher

	// Set sets the TLS certificate and key.  certKey may have unset fields,
	// in which case the corresponding files will not be tracked.
	Set(ctx context.Context, certKey TLSPair) (err error)

	// Updates returns a channel that emits signals when the TLS certificate
	// and/or key have been updated.
	//
	// TODO(e.burkov):  Move reloading logic to the manager and get rid of this
	// method.
	Updates(ctx context.Context) (updates <-chan UpdateSignal)
}

type TLSConfigProvider interface {
	// TLSConfig returns a clone of the current TLS configuration.  conf
	// provides its certificates via GetConfigForClient method.
	TLSConfig() (conf *tls.Config)

	// RootCAs returns the current root CA pool.
	RootCAs() (root *x509.CertPool)

	// HasIPAddrs returns true if the current TLS configuration has at least one
	// certificate with an IP address in its SAN extension.
	HasIPAddrs() (ok bool)
}

type TLSPair struct {
	// CertPath is the path to the certificate.  If empty, the certificate will
	// not be tracked.
	CertPath string

	// KeyPath is the path to the key.  If empty, the key will not be tracked.
	KeyPath string
}

type UpdateSignal struct{}