1 files changed, 0 insertions, 134 deletions

diff --git a/crypto/tls/ocsp_manager.go b/crypto/tls/ocsp_manager.go
deleted file mode 100644
index dac4c5e..0000000
--- a/crypto/tls/ocsp_manager.go
+++ /dev/null
@@ -1,134 +0,0 @@
-package tls
-
-import (
-        "context"
-        "crypto/tls"
-        "errors"
-        "fmt"
-        "sync"
-        "time"
-
-        "golang.org/x/crypto/ocsp"
-)
-
-type OcspError struct {
-        Err    error
-        AtBoot bool
-}
-
-func (e OcspError) Error() string {
-        return e.Err.Error()
-}
-
-func (e OcspError) Unwrap() error {
-        return e.Err
-}
-
-type OcspLogger interface {
-        Info(...interface{})
-        Errorf(string, ...interface{})
-}
-
-func OcspErrorLogger(l OcspLogger, c <-chan OcspError) func(context.Context, *sync.WaitGroup) error {
-        return func(ctx context.Context, wg *sync.WaitGroup) error {
-                wg.Add(1)
-                defer wg.Done()
-
-                for {
-                        select {
-                        case err := <-c:
-                                l.Errorf("Error in OCSP stapling: %w", errors.Unwrap(err))
-                        case <-ctx.Done():
-                                l.Info("Shutting down OCSP logger")
-                                return nil
-                        }
-                }
-        }
-}
-
-type OcspManager struct {
-        CertPath, KeyPath string
-        Errors            chan<- OcspError
-        cert              *tls.Certificate
-        ocspRes           *ocsp.Response
-        sync.RWMutex
-}
-
-func (m *OcspManager) loadCert() error {
-        cert, err := tls.LoadX509KeyPair(m.CertPath, m.KeyPath)
-        if err != nil {
-                return err
-        }
-        m.Lock()
-        m.cert = &cert
-        m.Unlock()
-
-        return nil
-}
-
-func (m *OcspManager) stapleCert() error {
-        // This makes a network request to an unknown server so don't hold the full
-        // lock while this is happening
-        m.RLock()
-        raw, ocspRes, err := GetOcspResponse(m.cert)
-        if err != nil {
-                return err
-        }
-        m.RUnlock()
-
-        m.Lock()
-        m.cert.OCSPStaple = raw
-        m.ocspRes = ocspRes
-        m.Unlock()
-
-        return nil
-}
-
-func (m *OcspManager) Init() error {
-        // All functions called here will handle locking themselves
-        if err := m.loadCert(); err != nil {
-                return err
-        }
-
-        if err := m.stapleCert(); err != nil {
-                return err
-        }
-
-        return nil
-}
-
-func (m *OcspManager) Run(ctx context.Context, wg *sync.WaitGroup) error {
-        wg.Add(1)
-        defer wg.Done()
-
-        t := time.NewTimer(m.ocspRes.NextUpdate.Sub(time.Now()) - time.Hour)
-
-        for {
-                select {
-                case <-t.C:
-                        if err := m.stapleCert(); err != nil {
-                                if m.Errors != nil {
-                                        m.Errors <- OcspError{err, false}
-                                }
-                                t.Reset(time.Hour)
-                                continue
-                        }
-                        // We own this object and only we write it, no need to lock
-                        t.Reset(m.ocspRes.NextUpdate.Sub(time.Now()) - time.Hour)
-                case <-ctx.Done():
-                        return nil
-                }
-        }
-}
-
-// TODO: TLS.GetCertificate for dyanmic certs for LE (cache these)
-func (m *OcspManager) GetCertificate(h *tls.ClientHelloInfo) (*tls.Certificate, error) {
-        m.RLock()
-        defer m.RUnlock()
-
-        if m.cert != nil {
-                return m.cert, nil
-        }
-
-        return nil, fmt.Errorf("OCSP manager has no certificate stored")
-}