crypto

type Signable interface {
	ContentsForSignature() ([]byte, error)
}

type Signature struct {
	X509CertificatePEM string `json:"x509_certificate_pem"`
	Signature          string `json:"signature"`
}

type Signer interface {
	Sign(Signable) (*Signature, error)
}

type Verifier interface {
	// Verify verifies a given Signature applies to a given Signable, the string argument is the required subject name
	// prefix . The suffix is always checked and has to be .metal.local.
	// for example, if the required prefix is "admin-" the subject must be something like admin-1.metal.local
	Verify(*Signature, Signable, string) error
}