зеркало из https://github.com/Azure/ARO-RP.git
109 строки
2.1 KiB
Go
109 строки
2.1 KiB
Go
package main
|
|
|
|
// Copyright (c) Microsoft Corporation.
|
|
// Licensed under the Apache License 2.0.
|
|
|
|
import (
|
|
"bytes"
|
|
"crypto/rsa"
|
|
"crypto/x509"
|
|
"encoding/pem"
|
|
"flag"
|
|
"fmt"
|
|
"io/ioutil"
|
|
"os"
|
|
|
|
utiltls "github.com/Azure/ARO-RP/pkg/util/tls"
|
|
)
|
|
|
|
var (
|
|
client = flag.Bool("client", false, "generate client certificate")
|
|
ca = flag.Bool("ca", false, "generate ca certificate")
|
|
keyFile = flag.String("keyFile", "", `file containing signing key in der format (default "" - self-signed)`)
|
|
certFile = flag.String("certFile", "", `file containing signing certificate in der format (default "" - self-signed)`)
|
|
)
|
|
|
|
func run(name string) error {
|
|
var signingKey *rsa.PrivateKey
|
|
var signingCert *x509.Certificate
|
|
|
|
if *keyFile != "" {
|
|
b, err := ioutil.ReadFile(*keyFile)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
signingKey, err = x509.ParsePKCS1PrivateKey(b)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
}
|
|
|
|
if *certFile != "" {
|
|
b, err := ioutil.ReadFile(*certFile)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
signingCert, err = x509.ParseCertificate(b)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
}
|
|
|
|
key, cert, err := utiltls.GenerateKeyAndCertificate(name, signingKey, signingCert, *ca, *client)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// key in der format
|
|
err = ioutil.WriteFile(name+".key", x509.MarshalPKCS1PrivateKey(key), 0600)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// cert in der format
|
|
err = ioutil.WriteFile(name+".crt", cert[0].Raw, 0666)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
buf := &bytes.Buffer{}
|
|
b, err := x509.MarshalPKCS8PrivateKey(key)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
err = pem.Encode(buf, &pem.Block{Type: "PRIVATE KEY", Bytes: b})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
err = pem.Encode(buf, &pem.Block{Type: "CERTIFICATE", Bytes: cert[0].Raw})
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// key and cert in PKCS#8 PEM format for Azure Key Vault.
|
|
return ioutil.WriteFile(name+".pem", buf.Bytes(), 0600)
|
|
}
|
|
|
|
func usage() {
|
|
fmt.Fprintf(flag.CommandLine.Output(), "usage: %s commonName\n", os.Args[0])
|
|
flag.PrintDefaults()
|
|
}
|
|
|
|
func main() {
|
|
flag.Usage = usage
|
|
flag.Parse()
|
|
|
|
if len(flag.Args()) != 1 {
|
|
flag.Usage()
|
|
os.Exit(2)
|
|
}
|
|
|
|
if err := run(flag.Arg(0)); err != nil {
|
|
panic(err)
|
|
}
|
|
}
|