ejbca

type CAInfo struct {
	CertificateAuthorities []CertificateAuthorities `json:"certificate_authorities"`
}

type CertificateAuthorities struct {
	Id             int    `json:"id,omitempty"`
	Name           string `json:"name,omitempty"`
	SubjectDn      string `json:"subject_dn,omitempty"`
	IssuerDn       string `json:"issuer_dn,omitempty"`
	ExpirationDate string `json:"expiration_date,omitempty"`
}

type CertificateData struct {
	Certificate        *x509.Certificate
	SerialNumber       string
	CertificateChain   []*x509.Certificate
	PrivateKey         interface{}
	CertificateProfile string
	EndEntityProfile   string
}

type CertificatesRestResponse struct {
	Certificates []certificateDataResponse
}

type Client struct {
	RESTClient
	EST *ESTClient
}

type Config struct {

	// Path to client certificate in PEM format. This certificate must contain a client certificate that
	// is recognized by the EJBCA instance represented by Hostname. This PEM file may also contain the private
	// key associated with the certificate, but KeyFile can also be set to configure the private key.
	CertificateFile string

	// Path to private key in PEM format. This file should contain the private key associated with the
	// client certificate configured in CertificateFile.
	KeyFile string

	// Password that protects private key (if encrypted)
	KeyPassword string

	// Path to the root CA that signed the certificate passed to the client for HTTPS connection.
	// This is not required if the CA is trusted by the host operating system. This should be a PEM
	// formatted certificate, and doesn't necessarily have to be the CA that signed CertificateFile.
	// Note that GoLang searches the following locations for CA certificates, and configuring a CAFile has the same
	// effect as adding the CA certificate to one of the paths:
	// from https://go.dev/src/crypto/x509/root_linux.go
	//
	// Possible certificate files; stop after finding one.
	//	var certFiles = []string{
	//		"/etc/ssl/certs/ca-certificates.crt",                // Debian/Ubuntu/Gentoo etc.
	//		"/etc/pki/tls/certs/ca-bundle.crt",                  // Fedora/RHEL 6
	//		"/etc/ssl/ca-bundle.pem",                            // OpenSUSE
	//		"/etc/pki/tls/cacert.pem",                           // OpenELEC
	//		"/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem", // CentOS/RHEL 7
	//		"/etc/ssl/cert.pem",                                 // Alpine Linux
	//  }
	//
	//	// Possible directories with certificate files; all will be read.
	//	var certDirectories = []string{
	//		"/etc/ssl/certs",               // SLES10/SLES11, https://golang.org/issue/12139
	//		"/etc/pki/tls/certs",           // Fedora/RHEL
	//		"/system/etc/security/cacerts", // Android
	//	}
	CAFile string

	// Optional default values for REST client
	DefaultCertificateProfileName   string
	DefaultEndEntityProfileName     string
	DefaultCertificateAuthorityName string

	// Optional default values for EST client
	DefaultESTAlias string
}

type Criteria struct {
	Property  string `json:"property"`
	Value     string `json:"value"`
	Operation string `json:"operation"`
}

type ESTClient struct {
	// contains filtered or unexported fields
}

type EndEntity struct {
	Username       string          `json:"username"`
	Dn             string          `json:"dn"`
	SubjectAltName string          `json:"subject_alt_name"`
	Email          *string         `json:"email"`
	Status         string          `json:"status"`
	Token          string          `json:"token"`
	ExtensionData  []ExtensionData `json:"extension_data"`
}

type EndEntitySearch struct {
	Search
}

type EndEntitySearchResponse struct {
	EndEntities []EndEntity `json:"end_entities"`
	MoreResults bool        `json:"more_results"`
}

type EnrollCertificateRequest struct {
	CertificateRequest       string `json:"certificate_request,omitempty"`
	Username                 string `json:"username,omitempty"`
	Password                 string `json:"password,omitempty"`
	IncludeChain             bool   `json:"include_chain,omitempty"`
	CertificateAuthorityName string `json:"certificate_authority_name,omitempty"`
}

type EnrollKeystore struct {
	Username string `json:"username,omitempty"`
	Password string `json:"password,omitempty"`
	KeyAlg   string `json:"key_alg,omitempty"`
	KeySpec  string `json:"key_spec,omitempty"`
}

type ExpiringCertificates struct {
	PaginationRestResponseComponent PaginationRestResponseComponent
	CertificatesRestResponse        []*CertificateData
}

type ExtensionData struct {
	Name  string `json:"name"`
	Value string `json:"value"`
}

type GetRevocationStatusResponse struct {
	RevokeCertificateResponse
}

type LatestCRL struct {
	CRL            string `json:"crl,omitempty"`
	ResponseFormat string `json:"response_format,omitempty"`
}

type PKCS10CSREnrollment struct {
	CertificateRequest string `json:"certificate_request,omitempty"`

	// Certificate profile name that EJBCA will enroll the CSR with. Leave this blank to use default
	// certificate profile configured with client.
	CertificateProfileName string `json:"certificate_profile_name,omitempty"`

	// End entity profile that EJBCA will enroll the CSR with. Leave this blank to use default
	// end entity profile configured with client.
	EndEntityProfileName string `json:"end_entity_profile_name,omitempty"`

	// Name of EJBCA certificate authority that will enroll CSR. Leave this blank to use default
	// certificate authority configured with client.
	CertificateAuthorityName string `json:"certificate_authority_name,omitempty"`
	Username                 string `json:"username,omitempty"`
	Password                 string `json:"password,omitempty"`
	AccountBindingId         string `json:"account_binding_id,omitempty"`
	IncludeChain             bool   `json:"include_chain,omitempty"`
}

type PaginationRestResponseComponent struct {
	MoreResults     bool `json:"more_results,omitempty"`
	NextOffset      int  `json:"next_offset,omitempty"`
	NumberOfResults int  `json:"number_of_results,omitempty"`
}

type RESTClient struct {
	// contains filtered or unexported fields
}

type RevokeCertificate struct {
	// Subject DN of the issuing CA
	IssuerDn string `json:"-"`

	// Hex serial number (without prefix, e.g. ‘00’)
	CertificateSerialNumber string `json:"-"`

	// Reason must be a valid RFC5280 reason. One of
	// NOT_REVOKED, UNSPECIFIED ,KEY_COMPROMISE,
	// CA_COMPROMISE, AFFILIATION_CHANGED, SUPERSEDED, CESSATION_OF_OPERATION,
	// CERTIFICATE_HOLD, REMOVE_FROM_CRL, PRIVILEGES_WITHDRAWN, AA_COMPROMISE
	Reason string `json:"-"`

	// ISO 8601 Date string, eg. ‘2018-06-15T14:07:09Z’
	Date string `json:"-"`
}

type RevokeCertificateResponse struct {
	IssuerDn         string `json:"issuer_dn,omitempty"`
	SerialNumber     string `json:"serial_number,omitempty"`
	RevocationReason string `json:"revocation_reason,omitempty"`
	RevocationDate   string `json:"revocation_date,omitempty"`
	Message          string `json:"message,omitempty"`
	Revoked          bool   `json:"revoked,omitempty"`
}

type Search struct {
	MaxNumberOfResults int        `json:"max_number_of_results"`
	Criteria           []Criteria `json:"criteria"`
}

type SearchCertificate struct {
	Search
}

type SharedClientFactory struct {
	// contains filtered or unexported fields
}

type V1CARestResourceStatus struct {
	Status   string `json:"status,omitempty"`
	Version  string `json:"version,omitempty"`
	Revision string `json:"revision,omitempty"`
}

type V1CertificateEndpointStatus struct {
	Status   string `json:"status,omitempty"`
	Version  string `json:"version,omitempty"`
	Revision string `json:"revision,omitempty"`
}

type V1EndEntityStatus struct {
	V1CertificateEndpointStatus
}