bundle

type Bundle struct {
	X509 X509
	JWT  JWT
}

type GenerateOptions struct {
	X509RootKey        crypto.Signer
	JWTRootKey         crypto.Signer
	TrustDomain        string
	AllowedClockSkew   time.Duration
	OverrideCATTL      *time.Duration // Optional override for CA TTL
	MissingCredentials MissingCredentials
}

type JWT struct {
	// SigningKey is the private key used to sign JWTs.
	SigningKey crypto.Signer
	// SigningKeyPEM is the PEM encoded private key used to sign JWTs.
	SigningKeyPEM []byte
	// JWKS is the JWK set used to verify JWTs.
	JWKS jwk.Set
	// JWKSJson is the JSON encoded JWK set used to verify JWTs.
	JWKSJson []byte
}

type MissingCredentials struct {
	// X509 indicates whether we need to generate X.509 certificates.
	X509 bool
	// JWT indicates whether we need to generate JWT signing keys.
	JWT bool
}

type X509 struct {
	// TrustAnchors is the PEM encoded trust anchors.
	TrustAnchors []byte
	// IssChainPEM is the PEM encoded issuer certificate chain.
	IssChainPEM []byte
	// IssKeyPEM is the PEM encoded issuer private key.
	IssKeyPEM []byte
	// IssChain is the issuer certificate chain.
	IssChain []*x509.Certificate
	// IssKey is the issuer private key.
	IssKey any
}