manager.go

// Copyright 2017 The Kubernetes Authors.
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

package cert

import (
	"crypto/tls"
	"log"
	"os"

	certapi "github.com/kubernetes/dashboard/src/app/backend/cert/api"
)

// Implements cert/api/types.Manager interface. See Manager for more information.
type Manager struct {
	creator certapi.Creator
	certDir string
}

// GenerateCertificates implements Manager interface. See Manager for more information.
func (self *Manager) GetCertificates() (tls.Certificate, error) {
	if self.keyFileExists() && self.certFileExists() {
		log.Println("Certificates already exist. Returning.")
		return tls.LoadX509KeyPair(
			self.path(self.creator.GetCertFileName()),
			self.path(self.creator.GetKeyFileName()),
		)
	}

	key := self.creator.GenerateKey()
	cert := self.creator.GenerateCertificate(key)
	log.Println("Successfully created certificates")
	keyPEM, certPEM, err := self.creator.KeyCertPEMBytes(key, cert)
	if err != nil {
		return tls.Certificate{}, err
	}
	return tls.X509KeyPair(certPEM, keyPEM)
}

func (self *Manager) keyFileExists() bool {
	return self.exists(self.path(self.creator.GetKeyFileName()))
}

func (self *Manager) certFileExists() bool {
	return self.exists(self.path(self.creator.GetCertFileName()))
}

func (self *Manager) path(certFile string) string {
	return self.certDir + string(os.PathSeparator) + certFile
}

func (self *Manager) exists(file string) bool {
	_, err := os.Stat(file)
	return !os.IsNotExist(err)
}

// NewCertManager creates Manager object.
func NewCertManager(creator certapi.Creator, certDir string) certapi.Manager {
	return &Manager{creator: creator, certDir: certDir}
}