pub(crate) const OPENSSL_PROGRAM: &str = "openssl";
pub(crate) const REQUEST_SUBCOMMAND: &str = "req";
pub(crate) const REQUEST_INPUT_FLAG: &str = "-req";
pub(crate) const X509_SUBCOMMAND: &str = "x509";
pub(crate) const VERIFY_SUBCOMMAND: &str = "verify";
pub(crate) const X509_FLAG: &str = "-x509";
pub(crate) const NEWKEY_FLAG: &str = "-newkey";
pub(crate) const RSA_2048_SETTING: &str = "rsa:2048";
pub(crate) const SHA256_SETTING: &str = "-sha256";
pub(crate) const CERTIFICATE_DAYS: &str = "3650";
pub(crate) const DAYS_FLAG: &str = "-days";
pub(crate) const NODES_FLAG: &str = "-nodes";
pub(crate) const KEYOUT_FLAG: &str = "-keyout";
pub(crate) const OUT_FLAG: &str = "-out";
pub(crate) const SUBJECT_FLAG: &str = "-subj";
pub(crate) const ADDEXT_FLAG: &str = "-addext";
pub(crate) const INPUT_FLAG: &str = "-in";
pub(crate) const CA_FLAG: &str = "-CA";
pub(crate) const CAKEY_FLAG: &str = "-CAkey";
pub(crate) const CACREATESERIAL_FLAG: &str = "-CAcreateserial";
pub(crate) const EXTFILE_FLAG: &str = "-extfile";
pub(crate) const CAFILE_FLAG: &str = "-CAfile";
pub(crate) const CA_SUBJECT: &str = "/CN=hyperlane-bench-ca";
pub(crate) const LEAF_SUBJECT: &str = "/CN=perf-server";
pub(crate) const CA_EXTENSION: &str = "basicConstraints=critical,CA:TRUE";
pub(crate) const CA_KEY_NAME: &str = "ca.key";
pub(crate) const LEAF_CSR_NAME: &str = "leaf.csr";
pub(crate) const LEAF_EXT_NAME: &str = "leaf.ext";
pub(crate) const LEAF_EXTENSIONS: &str = "basicConstraints=CA:FALSE\nkeyUsage=critical,digitalSignature,keyEncipherment\nextendedKeyUsage=serverAuth\nsubjectAltName=DNS:perf-server-a,DNS:perf-server-b,DNS:perf-server-control,DNS:localhost,IP:127.0.0.1\n";
pub(crate) const CERT_WORK_PREFIX: &str = "hyperlane-perf-certs-";
#[cfg(unix)]
pub(crate) const PRIVATE_KEY_MODE: u32 = 0o600;