Package trustdb provides wrappers for SQL calls for managing a database containing TRCs and Certificate Chains.

LoadKey decodes a base64 encoded key stored in file and returns the raw bytes.

LoadKeyConf loads key configuration from specified path.

NewStore initializes a TRC/Certificate Chain cache/resolver backed by db.

VerifyChain verifies the chain based on the TRCs present in the store.

Handler lifetime.

TODO(roosd): rename "core-sig.key" -> "iss-sig.key".

Store manages requests for TRC and Certificate Chain objects.