acme

type AccountInfo struct {
	ID, Status, Thumbprint, CreatedAt, CreatedIP string
	Contacts                                     []string
	Approved                                     bool
	ApprovedBy, ApprovedAt, EABKey               string
}

type EABKeyInfo struct {
	ID, Label, ExpiresAt, UsedAt, UsedBy, CreatedBy, CreatedAt string
}

type Limits struct {
	OrdersPerAccount int // new orders per account
	FailedPerName    int // failed validations per name
	AccountsPerIP    int // new accounts per client address (IPv6: per /64)
}

type NameInfo struct {
	Name, Status, RequestedBy, RequestedAt, DecidedBy, DecidedAt string
}

type NewEABKey struct {
	KID, HMAC, ExpiresAt string
}

type Options struct {
	Engine *ca.Engine // the tenant's engine; its PKI writer holds the ACME tables
	// BaseURL, TrustedProxies and Resolver as in config.ACME.
	BaseURL, TrustedProxies, Resolver string
	// Direct: the server's own TLS listener serves ACME (acme.tls_issuer,
	// v0.2.2). Every peer may connect, TrustedProxies and X-Forwarded-For
	// are ignored, and the peer is the client address (rate limits, audit).
	Direct bool
	Clock  clock.Clock
	Log    *slog.Logger
	// Rand for tokens and IDs; nil = crypto/rand.
	Rand io.Reader
	// Limits returns the tenant's rate limits (its settings); nil or an
	// error = DefaultLimits.
	Limits func(ctx context.Context) (Limits, error)
}

type OrderInfo struct {
	ID, AccountID, Status, CertificateID, CreatedAt, Error string
	Identifiers                                            []string
}

type Server struct {
	// contains filtered or unexported fields
}