certinfo

type Config struct {
	// CACertsPool is the pool of root CA certificates used for verification.
	CACertsPool *x509.CertPool
	// CACertsFilePath is the path to the CA certificate bundle file.
	CACertsFilePath string
	// CertsBundle is a slice of certificates loaded from a local bundle.
	CertsBundle []*x509.Certificate
	// CertsBundleFilePath is the path to the certificate bundle file.
	CertsBundleFilePath string
	// CertsBundleFromKey indicates if the certificate was derived from a private key.
	CertsBundleFromKey bool
	// PrivKey is the loaded private key.
	PrivKey crypto.PrivateKey
	// PrivKeyFilePath is the path to the private key file.
	PrivKeyFilePath string
	// TLSEndpoint is the host:port string of the remote TLS endpoint.
	TLSEndpoint string
	// TLSEndpointHost is the hostname part of the TLS endpoint.
	TLSEndpointHost string
	// TLSEndpointPort is the port part of the TLS endpoint.
	TLSEndpointPort string
	// TLSEndpointCerts is the slice of certificates retrieved from the remote endpoint.
	TLSEndpointCerts []*x509.Certificate
	// TLSEndpointCertsFromKey indicates if the endpoint certificates were matched with a private key.
	TLSEndpointCertsFromKey bool
	// TLSServerName is the ServerName used for SNI.
	TLSServerName string
	// TLSInsecure indicates if certificate verification should be skipped.
	TLSInsecure bool
	// TLSInfoRequested indicates if negotiated TLS info and supported protocol/cipher scan was requested.
	TLSInfoRequested bool
	// NegotiatedProtocol is the TLS protocol version negotiated in the primary connection.
	NegotiatedProtocol string
	// NegotiatedCipher is the TLS cipher suite negotiated in the primary connection.
	NegotiatedCipher string
	// ProbedProtocols maps a TLS protocol name to whether the remote endpoint supports it.
	ProbedProtocols map[string]bool
	// ProbedCiphers is a slice of ciphers that were probed against the endpoint.
	ProbedCiphers []ProbedCipher
}

type InputReader struct{}

type NoPasswordPromptReader interface {
	NoPasswordPrompt() bool
}

type ProbedCipher struct {
	ID        uint16
	Name      string
	Protocol  string
	Insecure  bool
	Supported bool
}

type Reader interface {
	ReadFile(name string) ([]byte, error)
	ReadPassword(fd int) ([]byte, error)
}