drop/server/internal/clients/ca-store.ts

import path from "path";
import fs from "fs";
import { CertificateBundle } from "./ca";

export type CertificateStore = {
  store(name: string, data: CertificateBundle): Promise<void>;
  fetch(name: string): Promise<CertificateBundle | undefined>;
  blacklistCertificate(name: string): Promise<void>;
  checkBlacklistCertificate(name: string): Promise<boolean>;
};

export const fsCertificateStore = (base: string) => {
  const blacklist = path.join(base, ".blacklist");
  fs.mkdirSync(blacklist, { recursive: true });
  const store: CertificateStore = {
    async store(name: string, data: CertificateBundle) {
      const filepath = path.join(base, name);
      fs.writeFileSync(filepath, JSON.stringify(data));
    },
    async fetch(name: string) {
      const filepath = path.join(base, name);
      if (!fs.existsSync(filepath)) return undefined;
      return JSON.parse(fs.readFileSync(filepath, "utf-8"));
    },
    async blacklistCertificate(name: string) {
      const filepath = path.join(blacklist, name);
      fs.writeFileSync(filepath, Buffer.from([]));
    },
    async checkBlacklistCertificate(name: string): Promise<boolean> {
      const filepath = path.join(blacklist, name);
      return fs.existsSync(filepath);
    },
  };
  return store;
};