bundle

type Bundle struct {
	X509 *X509
	JWT  *JWT
}

type JWT struct {
	// SigningKey is the private key used to sign JWTs.
	SigningKey crypto.Signer
	// SigningKeyPEM is the PEM encoded private key used to sign JWTs.
	SigningKeyPEM []byte
	// JWKS is the JWK set used to verify JWTs.
	JWKS jwk.Set
	// JWKSJson is the JSON encoded JWK set used to verify JWTs.
	JWKSJson []byte
}

type OptionsJWT struct {
	TrustDomain string
	JWTRootKey  crypto.Signer
}

type OptionsX509 struct {
	X509RootKey      crypto.Signer
	TrustDomain      string
	AllowedClockSkew time.Duration
	OverrideCATTL    *time.Duration // Optional override for CA TTL
}

type X509 struct {
	// TrustAnchors is the PEM encoded trust anchors.
	TrustAnchors []byte
	// IssChainPEM is the PEM encoded issuer certificate chain.
	IssChainPEM []byte
	// IssKeyPEM is the PEM encoded issuer private key.
	IssKeyPEM []byte
	// IssChain is the issuer certificate chain.
	IssChain []*x509.Certificate
	// IssKey is the issuer private key.
	IssKey any
}