use pki_types::CertificateDer;

use crate::sign;

/// ActiveCertifiedKey wraps [`sign::CertifiedKey`] and tracks OSCP state in a single handshake.

pub(super) struct ActiveCertifiedKey<'a> {

    key: &'a sign::CertifiedKey,

    ocsp: Option<&'a [u8]>,

}

impl ActiveCertifiedKey<'_> {

    pub(super) fn from_certified_key(key: &sign::CertifiedKey) -> ActiveCertifiedKey<'_> {

        ActiveCertifiedKey {

            key,

            ocsp: key.ocsp.as_deref(),

        }

    }

    /// Get the certificate chain

    #[inline]

    pub(super) fn get_cert(&self) -> &[CertificateDer<'static>] {

        &self.key.cert

    }

    /// Get the signing key

    #[inline]

    pub(super) fn get_key(&self) -> &dyn sign::SigningKey {

        &*self.key.key

    }

    #[inline]

    pub(super) fn get_ocsp(&self) -> Option<&[u8]> {

        self.ocsp

    }

}