wt committed
1 parent
e6526fb780
commit
d5da23849f
8 files changed
+16
-46
No files matched your search
@@ -1,92 +0,0 @@
|
||||
package utils
|
||||
|
||||
import (
|
||||
"crypto/rand"
|
||||
"crypto/rsa"
|
||||
"crypto/x509"
|
||||
"crypto/x509/pkix"
|
||||
"fmt"
|
||||
"math/big"
|
||||
"os"
|
||||
"scm/model"
|
||||
"time"
|
||||
|
||||
"github.com/youmark/pkcs8"
|
||||
)
|
||||
|
||||
func CreateRootKeyCertificate(data model.CreateRootCertRequest) error {
|
||||
privkey, err := rsa.GenerateKey(rand.Reader, 4096)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
serialNumber, err := rand.Int(rand.Reader, new(big.Int).Lsh(big.NewInt(1), 128))
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
template := x509.Certificate{
|
||||
SerialNumber: serialNumber,
|
||||
Subject: pkix.Name{
|
||||
CommonName: data.CommonName,
|
||||
OrganizationalUnit: data.OrganizationalUnit,
|
||||
Organization: data.Organization,
|
||||
Country: data.Country,
|
||||
Locality: data.Locality,
|
||||
Province: data.Province,
|
||||
StreetAddress: data.StreetAddress,
|
||||
PostalCode: data.PostalCode,
|
||||
SerialNumber: serialNumber.String(),
|
||||
},
|
||||
NotBefore: time.Now(),
|
||||
NotAfter: time.Now().AddDate(data.ValidityYears, 0, 0),
|
||||
KeyUsage: x509.KeyUsageCertSign | x509.KeyUsageCRLSign | x509.KeyUsageDigitalSignature,
|
||||
ExtKeyUsage: []x509.ExtKeyUsage{
|
||||
x509.ExtKeyUsageServerAuth,
|
||||
x509.ExtKeyUsageClientAuth,
|
||||
},
|
||||
BasicConstraintsValid: true,
|
||||
IsCA: true,
|
||||
}
|
||||
|
||||
cert, err := x509.CreateCertificate(rand.Reader, &template, &template, &privkey.PublicKey, privkey)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
encryptedKey, err := pkcs8.ConvertPrivateKeyToPKCS8(
|
||||
privkey,
|
||||
[]byte(data.KeyPassword),
|
||||
)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
err = CheckExistsOrCreateDir("root")
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
err = SavePEMFile(fmt.Sprintf(
|
||||
"%s/%s",
|
||||
os.Getenv("CERTS_PATH"),
|
||||
"root/root.crt",
|
||||
),
|
||||
"CERTIFICATE",
|
||||
cert,
|
||||
)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
|
||||
err = SavePEMFile(fmt.Sprintf(
|
||||
"%s/%s",
|
||||
os.Getenv("CERTS_PATH"),
|
||||
"root/root.key",
|
||||
), "ENCRYPTED PRIVATE KEY", encryptedKey)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
// Implementation of CreateRootCertificate function
|
||||
return nil
|
||||
}
|
||||
@@ -1,42 +0,0 @@
|
||||
package utils
|
||||
|
||||
import (
|
||||
"crypto/rand"
|
||||
"crypto/rsa"
|
||||
"crypto/x509"
|
||||
"crypto/x509/pkix"
|
||||
"math/big"
|
||||
"scm/model"
|
||||
"time"
|
||||
)
|
||||
|
||||
func CreateServerCert(
|
||||
caCert *x509.Certificate,
|
||||
caKey *rsa.PrivateKey,
|
||||
serverKey *rsa.PrivateKey,
|
||||
certdata model.CreateCertRequest,
|
||||
) ([]byte, error) {
|
||||
// Шаблон серверного сертификата
|
||||
template := x509.Certificate{
|
||||
SerialNumber: big.NewInt(time.Now().Unix()),
|
||||
Subject: pkix.Name{
|
||||
Organization: certdata.OrganizationName,
|
||||
CommonName: certdata.CommonName,
|
||||
OrganizationalUnit: certdata.OrganizationUnit,
|
||||
},
|
||||
NotBefore: time.Now(),
|
||||
NotAfter: time.Now().AddDate(1, 0, 0), // 1 год
|
||||
KeyUsage: x509.KeyUsageDigitalSignature | x509.KeyUsageKeyEncipherment,
|
||||
ExtKeyUsage: []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
|
||||
DNSNames: certdata.DNSNames,
|
||||
}
|
||||
|
||||
// Создаем сертификат, подписанный CA
|
||||
return x509.CreateCertificate(
|
||||
rand.Reader,
|
||||
&template,
|
||||
caCert,
|
||||
&serverKey.PublicKey,
|
||||
caKey,
|
||||
)
|
||||
}
|
||||
@@ -1,54 +0,0 @@
|
||||
package utils
|
||||
|
||||
import (
|
||||
"crypto/rsa"
|
||||
"crypto/x509"
|
||||
"encoding/pem"
|
||||
"errors"
|
||||
"fmt"
|
||||
"os"
|
||||
|
||||
"github.com/youmark/pkcs8"
|
||||
)
|
||||
|
||||
func LoadRootCertAndKey(certFile, keyFile, password string) (*x509.Certificate, *rsa.PrivateKey, error) {
|
||||
fmt.Println(certFile, keyFile)
|
||||
// Загрузка корневого сертификата
|
||||
caCertPEM, err := os.ReadFile(certFile)
|
||||
if err != nil {
|
||||
return nil, nil, err
|
||||
}
|
||||
|
||||
block, _ := pem.Decode(caCertPEM)
|
||||
if block == nil {
|
||||
return nil, nil, errors.New("failed to parse CA certificate PEM")
|
||||
}
|
||||
|
||||
caCert, err := x509.ParseCertificate(block.Bytes)
|
||||
if err != nil {
|
||||
return nil, nil, err
|
||||
}
|
||||
|
||||
// Загрузка зашифрованного приватного ключа
|
||||
keyPEM, err := os.ReadFile(keyFile)
|
||||
if err != nil {
|
||||
return nil, nil, err
|
||||
}
|
||||
|
||||
block, _ = pem.Decode(keyPEM)
|
||||
if block == nil {
|
||||
return nil, nil, errors.New("failed to parse CA key PEM")
|
||||
}
|
||||
// Декодирование ключа с паролем
|
||||
decryptedKey, err := pkcs8.ParsePKCS8PrivateKey(block.Bytes, []byte(password))
|
||||
if err != nil {
|
||||
return nil, nil, fmt.Errorf("failed to decrypt CA key: %v", err)
|
||||
}
|
||||
|
||||
caKey, ok := decryptedKey.(*rsa.PrivateKey)
|
||||
if !ok {
|
||||
return nil, nil, err
|
||||
}
|
||||
|
||||
return caCert, caKey, nil
|
||||
}
|
||||
@@ -1,41 +0,0 @@
|
||||
package utils
|
||||
|
||||
import (
|
||||
"crypto/x509"
|
||||
"encoding/pem"
|
||||
"log"
|
||||
"os"
|
||||
)
|
||||
|
||||
func ParseCert(certPath string) map[string]any {
|
||||
// Чтение PEM-файла
|
||||
pemData, err := os.ReadFile(certPath)
|
||||
if err != nil {
|
||||
log.Fatal("Ошибка чтения файла:", err)
|
||||
}
|
||||
|
||||
// Декодирование PEM-блока
|
||||
block, _ := pem.Decode(pemData)
|
||||
if block == nil {
|
||||
log.Fatal("Не удалось декодировать PEM блок")
|
||||
}
|
||||
|
||||
// Парсинг сертификата
|
||||
cert, err := x509.ParseCertificate(block.Bytes)
|
||||
if err != nil {
|
||||
log.Fatal("Ошибка парсинга сертификата:", err)
|
||||
}
|
||||
|
||||
res := make(map[string]any)
|
||||
res["Subject"] = cert.Subject
|
||||
res["Issuer"] = cert.Issuer
|
||||
res["SerialNumber"] = cert.SerialNumber
|
||||
res["NotBefore"] = cert.NotBefore
|
||||
res["NotAfter"] = cert.NotAfter
|
||||
res["DNSNames"] = cert.DNSNames
|
||||
res["KeyUsage"] = cert.KeyUsage
|
||||
res["SignatureAlgorithm"] = cert.SignatureAlgorithm
|
||||
|
||||
// Вывод информации
|
||||
return res
|
||||
}
|
||||
@@ -1,23 +0,0 @@
|
||||
package utils
|
||||
|
||||
import (
|
||||
"encoding/pem"
|
||||
"os"
|
||||
)
|
||||
|
||||
func SavePEMFile(filename, blockType string, data []byte) error {
|
||||
file, err := os.Create(filename)
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
defer file.Close()
|
||||
|
||||
err = pem.Encode(file, &pem.Block{
|
||||
Type: blockType,
|
||||
Bytes: data,
|
||||
})
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
return nil
|
||||
}
|
||||
Reference in new issue
Block a user