path to the certificate (chain) PEM file
path to the private key PEM file
Optionalpassphrase: string | Buffer<ArrayBufferLike>
optional passphrase to decrypt privateKeyFile if it is
an encrypted PKCS#8 key. Omit for a plaintext key. If the key is encrypted
and no (or the wrong) passphrase is given, getPrivateKey() throws
PrivateKeyPassphraseRequiredError (fails closed).
Clears cached secrets so the GC can reclaim sensitive material. After calling dispose the holder will re-read from disk on next access.
Alias for dispose.
Implements ICertificateChainProvider.invalidate().
Provides a certificate chain and private key to an OPC UA endpoint.
Implementations may read from memory, disk, or any other source. See also DiskCertificateKeyPairProvider which implements this interface for disk-based access with lazy caching.