ct

type ChainValidator interface {
	Validate(chain []*x509.Certificate, expectingPrecert bool) ([]*x509.Certificate, error)
	Roots() []*x509.Certificate
}

type DefaultRequestLog struct {
}

type HandlerOptions struct {
	// Deadline is a timeout for HTTP requests.
	Deadline time.Duration
	// RequestLog provides structured logging of TesseraCT requests.
	RequestLog requestLog
	// MaskInternalErrors indicates if internal server errors should be masked
	// or returned to the user containing the full error message.
	MaskInternalErrors bool
	// TimeSource indicated the system time and can be injfected for testing.
	// TODO(phbnf): hide inside the log
	TimeSource TimeSource
	// PathPrefix prefixes static-ct-api endpoint paths.
	PathPrefix string
	// RateLimits describes optional rate limits to enforce.
	RateLimits RateLimits
}

type RateLimits struct {
	// contains filtered or unexported fields
}

type Storage interface {
	// Add assigns an index to the provided Entry, stages the entry for integration, and returns a future for the assigned index.
	Add(context.Context, *ctonly.Entry) (tessera.IndexFuture, error)
	// DedupFuture fetches a duplicate tessera ctlog entry from the log and extracts its timestamp.
	DedupFuture(context.Context, tessera.IndexFuture) (uint64, error)
	// AddIssuerChain stores every the chain certificate in a content-addressable store under their sha256 hash.
	AddIssuerChain(context.Context, []*x509.Certificate) error
}

type TimeSource interface {
	// Now returns the current time in real implementations or a suitable value in others
	Now() time.Time
}