#pragma once

#include <memory>

#include <string>

#include "envoy/common/pure.h"

#include "envoy/ssl/private_key/private_key.h"

namespace Envoy {

namespace Ssl {

class TlsCertificateConfig {

public:

  /**

   * @return a string of the certificate name.

   */

  virtual const std::string& certificateName() const PURE;

  /**

   * @return a string of certificate chain.

   */

  virtual const std::string& certificateChain() const PURE;

  /**

   * @return path of the certificate chain used to identify the local side or "<inline>" if the

   * certificate chain was inlined.

   */

  virtual const std::string& certificateChainPath() const PURE;

  /**

   * @return a string of private key.

   */

  virtual const std::string& privateKey() const PURE;

  /**

   * @return path of the private key used to identify the local side or "<inline>" if the private

   * key was inlined.

   */

  virtual const std::string& privateKeyPath() const PURE;

  /**

   * @return a string of pkcs12 data.

   */

  virtual const std::string& pkcs12() const PURE;

  /**

   * @return path of the pkcs12 file used to identify the local side or "<inline>" if the pkcs12

   * data was inlined.

   */

  virtual const std::string& pkcs12Path() const PURE;

  /**

   * @return private key method provider.

   */

  virtual Envoy::Ssl::PrivateKeyMethodProviderSharedPtr privateKeyMethod() const PURE;

  /**

   * @return a string of password.

   */

  virtual const std::string& password() const PURE;

  /**

   * @return path of the password file to be used to decrypt the private key or "<inline>" if the

   * password was inlined.

   */

  virtual const std::string& passwordPath() const PURE;

  /**

   * @return a byte vector of ocsp response.

   */

  virtual const std::vector<uint8_t>& ocspStaple() const PURE;

  /**

   * @return path of the ocsp response file for this certificate or "<inline>" if the

   * ocsp response was inlined.

   */

  virtual const std::string& ocspStaplePath() const PURE;

};

using TlsCertificateConfigPtr = std::unique_ptr<TlsCertificateConfig>;

} // namespace Ssl

} // namespace Envoy