Package protocol defines the interface of CA client protocol.

NewCAClient creates a new CAClient instance.

NewKeyCertBundleRotator is constructor for keyCertBundleRotatorImpl based on the provided configuration.

SaveKeyCert stores the specified key/cert into file specified by the path.

CAClient is a client to provision key and certificate from the upstream CA via CSR protocol.

Config is configuration for the CA client.

KeyCertBundleRotator automatically updates the key and cert bundle by interacting with upstream CA.

KeyCertRetriever is the interface responsible for retrieve new key and certificate from upstream CA.