package com.codebyte.api.config.ssl;

import java.security.PrivateKey;
import java.security.cert.X509Certificate;
import java.util.List;

/**
 * The validated TLS material: the private key and the certificate chain, leaf-first, with any
 * self-signed root already stripped.
 */
public record PemSslMaterial(PrivateKey privateKey, List<X509Certificate> chain) {

    public X509Certificate leaf() {
        return chain.get(0);
    }

    public X509Certificate[] chainArray() {
        return chain.toArray(new X509Certificate[0]);
    }
}