unikernel/duniverse/ocaml-tls/lwt/x509_lwt.mli

@@ -0,0 +1,26 @@
+(** X.509 certificate handling using Lwt. *)
+
+(** [private_of_pems ~cert ~priv_key] is [priv], after reading the
+    private key and certificate chain from the given PEM-encoded
+    files. *)
+val private_of_pems : cert:Lwt_io.file_name -> priv_key:Lwt_io.file_name -> Tls.Config.certchain Lwt.t
+
+(** [certs_of_pem file] is [certificates], which are read from the
+    PEM-encoded [file]. *)
+val certs_of_pem     : Lwt_io.file_name -> X509.Certificate.t list Lwt.t
+
+(** [certs_of_pem_dir dir] is [certificates], which are read from all
+    PEM-encoded files in [dir]. *)
+val certs_of_pem_dir : Lwt_io.file_name -> X509.Certificate.t list Lwt.t
+
+(** [authenticator methods] constructs an [authenticator] using the
+    specified method and data. *)
+val authenticator : ?allowed_hashes:Digestif.hash' list -> ?crls:Lwt_io.file_name ->
+  [ `Ca_file of Lwt_io.file_name
+  | `Ca_dir  of Lwt_io.file_name
+  | `Key_fingerprint of Digestif.hash' * string
+  | `Hex_key_fingerprint of Digestif.hash' * string
+  | `Cert_fingerprint of Digestif.hash' * string
+  | `Hex_cert_fingerprint of Digestif.hash' * string
+  ]
+  -> X509.Authenticator.t Lwt.t