tsa

type Accuracy struct {
	Seconds int `asn1:"optional"`
	Millis  int `asn1:"optional,tag:0"`
	Micros  int `asn1:"optional,tag:1"`
}

type AlgorithmIdentifier struct {
	Algorithm  asn1.ObjectIdentifier
	Parameters asn1.RawValue `asn1:"optional"`
}

type Handler struct {
	// contains filtered or unexported fields
}

type MessageImprint struct {
	HashAlgorithm AlgorithmIdentifier
	HashedMessage []byte
}

type PKIStatusInfo struct {
	Status       int
	StatusString []string `asn1:"optional"`
	FailInfo     int      `asn1:"optional"`
}

type RenewalConfig struct {
	// CoreURL is the Varwof Core API base URL (e.g., "https://pki.example.com").
	CoreURL string
	// CertFile is the path to the current signer certificate PEM.
	CertFile string
	// KeyFile is the path to the current signer private key PEM.
	KeyFile string
	// CACertFile is the CA certificate for mTLS to Varwof Core.
	CACertFile string
	// CAName is the CA name to issue from (e.g., "tsa").
	CAName string
	// ValidityDays is the validity period for new certificates.
	ValidityDays int
	// RenewalWindow is how far before expiry to trigger renewal.
	RenewalWindow time.Duration
	// CheckInterval is how often to check for renewal need.
	CheckInterval time.Duration
	// TLSClientCert is the mTLS client certificate for API calls.
	TLSClientCert string
	// TLSClientKey is the mTLS client key for API calls.
	TLSClientKey string
}

type RuntimeConfig struct {
	// contains filtered or unexported fields
}

type SignerCertInfo struct {
	SerialNumber string `json:"serial_number"`
	Subject      string `json:"subject"`
	Issuer       string `json:"issuer"`
	NotBefore    string `json:"not_before"`
	NotAfter     string `json:"not_after"`
	HasChain     bool   `json:"has_chain"`
}

type TSAConfig struct {
	SignerCert *x509.Certificate
	SignerKey  crypto.Signer
	Chain      []*x509.Certificate
	TSTInfo    *TSTInfoConfig
}

type TSTInfo struct {
	Version        int
	Policy         asn1.ObjectIdentifier
	MessageImprint MessageImprint
	SerialNumber   int64
	GenTime        asn1.RawValue
	Accuracy       Accuracy        `asn1:"optional"`
	Ordering       bool            `asn1:"optional,default:false"`
	Nonce          *big.Int        `asn1:"optional"`
	TSA            asn1.RawValue   `asn1:"optional,tag:0"`
	TSTInfoExt     []asn1.RawValue `asn1:"optional,tag:1"`
}

type TSTInfoConfig struct {
	Policy          asn1.ObjectIdentifier
	Ordering        bool
	AccuracySeconds int
	AccuracyMillis  int
	AccuracyMicros  int
	TSAGenName      asn1.RawValue
}

type TimeStampReq struct {
	Version        int
	MessageImprint MessageImprint
	ReqPolicy      asn1.ObjectIdentifier `asn1:"optional"`
	Nonce          *big.Int              `asn1:"optional"`
	CertReq        bool                  `asn1:"optional,default:false"`
	Extensions     []asn1.RawValue       `asn1:"optional,tag:0"`
}

type TimeStampResp struct {
	Status         PKIStatusInfo
	TimeStampToken asn1.RawValue `asn1:"optional"`
}