initial

legacy/nscert/ca/base.py

@@ -0,0 +1,13 @@
+"""Base CA adapter interface."""
+from typing import Protocol, Optional
+
+
+class CAAdapter(Protocol):
+    def submit_csr(self, csr_pem: str, name: str, options: Optional[dict] = None) -> str:
+        """Submit a CSR and return a request id or token."""
+
+    def poll_status(self, request_id: str, timeout: int = 60) -> str:
+        """Poll request status and return a final state string (e.g., 'issued' / 'pending' / 'failed')."""
+
+    def download_certificate(self, request_id: str) -> str:
+        """Return the issued certificate PEM for the request_id."""

legacy/nscert/ca/mock.py

@@ -0,0 +1,27 @@
+"""A simple mock CA adapter for tests and local runs."""
+from typing import Optional
+from .base import CAAdapter
+
+
+class MockCA(CAAdapter):
+    def __init__(self):
+        self._store = {}
+        self._counter = 0
+
+    def submit_csr(self, csr_pem: str, name: str, options: Optional[dict] = None) -> str:
+        self._counter += 1
+        rid = f"mock-{self._counter}"
+        # store and pretend it's issued immediately for simplicity
+        self._store[rid] = {
+            "csr": csr_pem,
+            "name": name,
+            "status": "issued",
+            "cert": f"-----BEGIN CERTIFICATE-----\nMockCertFor:{name}\n-----END CERTIFICATE-----\n",
+        }
+        return rid
+
+    def poll_status(self, request_id: str, timeout: int = 60) -> str:
+        return self._store.get(request_id, {}).get("status", "unknown")
+
+    def download_certificate(self, request_id: str) -> str:
+        return self._store.get(request_id, {}).get("cert")

legacy/nscert/ca/sectigo.py

@@ -0,0 +1,35 @@
+"""Sectigo CA adapter skeleton.
+
+This file provides a class with the expected interface. Implementing a full
+Sectigo integration requires API credentials and network access; this is a
+skeleton with TODOs and a clear place to add HTTP calls.
+"""
+from typing import Optional
+from .base import CAAdapter
+
+
+class SectigoCA(CAAdapter):
+    def __init__(self, api_base: str = "https://api.sectigo.com", api_key: Optional[str] = None):
+        self.api_base = api_base
+        self.api_key = api_key
+
+    def submit_csr(self, csr_pem: str, name: str, options: Optional[dict] = None) -> str:
+        """Submit CSR to Sectigo and return request id.
+
+        TODO: Implement actual HTTP POSTs with authentication and error handling.
+        """
+        raise NotImplementedError("Sectigo submission not implemented yet")
+
+    def poll_status(self, request_id: str, timeout: int = 60) -> str:
+        """Poll Sectigo for request status.
+
+        TODO: implement polling logic using Sectigo APIs.
+        """
+        raise NotImplementedError("Sectigo polling not implemented yet")
+
+    def download_certificate(self, request_id: str) -> str:
+        """Download issued certificate PEM.
+
+        TODO: fetch the issued certificate from Sectigo.
+        """
+        raise NotImplementedError("Sectigo download not implemented yet")