unikernel/duniverse/ocaml-tls/eio/x509_eio.mli

@@ -0,0 +1,26 @@
+(** X.509 certificate handling using Eio. *)
+
+(** [private_of_pems ~cert ~priv_key] is [priv], after reading the
+    private key and certificate chain from the given PEM-encoded
+    files. *)
+val private_of_pems : cert:_ Eio.Path.t -> priv_key:_ Eio.Path.t -> Tls.Config.certchain
+
+(** [certs_of_pem file] is [certificates], which are read from the
+    PEM-encoded [file]. *)
+val certs_of_pem     : _ Eio.Path.t -> X509.Certificate.t list
+
+(** [certs_of_pem_dir dir] is [certificates], which are read from all
+    PEM-encoded files in [dir]. *)
+val certs_of_pem_dir : _ Eio.Path.t -> X509.Certificate.t list
+
+(** [authenticator methods] constructs an [authenticator] using the
+    specified method and data. *)
+val authenticator : ?allowed_hashes:Digestif.hash' list -> ?crls:_ Eio.Path.t ->
+  [ `Ca_file of _ Eio.Path.t
+  | `Ca_dir  of _ Eio.Path.t
+  | `Key_fingerprint of Digestif.hash' * string
+  | `Hex_key_fingerprint of Digestif.hash' * string
+  | `Cert_fingerprint of Digestif.hash' * string
+  | `Hex_cert_fingerprint of Digestif.hash' * string
+  ]
+  -> X509.Authenticator.t