validation

type CRLChecker struct {
	Client *http.Client
}

type ChainBuilder interface {
	// BuildChain attempts to build a valid chain from the leaf certificate to a trusted root.
	BuildChain(leaf *x509.Certificate, intermediates []*x509.Certificate, roots *x509.CertPool) ([][]*x509.Certificate, error)
}

type ChainBuilderImpl struct {
}

type LTVManager interface {
	// AddValidationInfo adds validation information (certs, OCSP, CRLs) to the DSS.
	AddValidationInfo(ctx context.Context, doc *semantic.Document, vri *ValidationRelatedInfo) error
}

type LTVManagerImpl struct{}

type OCSPChecker struct {
	Client *http.Client
}

type RevocationChecker interface {
	// Check checks if the certificate is revoked.
	Check(ctx context.Context, cert *x509.Certificate, issuer *x509.Certificate) (RevocationStatus, error)
}

type RevocationStatus int

type ValidationRelatedInfo struct {
	Certs [][]byte // DER encoded certificates
	OCSPs [][]byte // DER encoded OCSP responses
	CRLs  [][]byte // DER encoded CRLs
}