forked from osdevisnot/sorvor
-
Notifications
You must be signed in to change notification settings - Fork 0
/
cert.go
59 lines (49 loc) · 2.05 KB
/
cert.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
// Package cert helps creating a self signed key and certs for TLS server
// Note: Adopted from https://golang.org/src/crypto/tls/generate_cert.go
package cert
import (
"crypto/ecdsa"
"crypto/elliptic"
"crypto/rand"
"crypto/x509"
"crypto/x509/pkix"
"encoding/pem"
"math/big"
"net"
"os"
"time"
"github.com/Termina1/sorvor/pkg/logger"
)
// GenerateKeyPair generated self signed key and cert
func GenerateKeyPair(host string) {
priv, err := ecdsa.GenerateKey(elliptic.P256(), rand.Reader)
logger.Fatal(err, "Failed to create private key")
serialNumberLimit := new(big.Int).Lsh(big.NewInt(1), 128)
serialNumber, err := rand.Int(rand.Reader, serialNumberLimit)
logger.Fatal(err, "Failed to generate serial number")
template := x509.Certificate{
SerialNumber: serialNumber,
Subject: pkix.Name{Organization: []string{"sorvor"}},
NotBefore: time.Now(),
NotAfter: time.Now().AddDate(100, 0, 0),
KeyUsage: x509.KeyUsageDigitalSignature | x509.KeyUsageKeyEncipherment,
ExtKeyUsage: []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
DNSNames: []string{"localhost", host},
IPAddresses: []net.IP{net.IPv6loopback, net.IPv4(127, 0, 0, 1)},
BasicConstraintsValid: true,
}
derBytes, err := x509.CreateCertificate(rand.Reader, &template, &template, &priv.PublicKey, priv)
logger.Fatal(err, "Failed to create certificate")
certOut, err := os.Create("cert.pem")
logger.Fatal(err, "Failed to open cert.pem for writing")
defer certOut.Close()
err = pem.Encode(certOut, &pem.Block{Type: "CERTIFICATE", Bytes: derBytes})
logger.Fatal(err, "Failed to write data to cert.pem")
keyOut, err := os.OpenFile("key.pem", os.O_WRONLY|os.O_CREATE|os.O_TRUNC, 0600)
logger.Fatal(err, "Failed to open key.pem for writing")
defer keyOut.Close()
privateBytes, err := x509.MarshalPKCS8PrivateKey(priv)
logger.Fatal(err, "Unable to marshal private key")
err = pem.Encode(keyOut, &pem.Block{Type: "PRIVATE KEY", Bytes: privateBytes})
logger.Fatal(err, "Failed to write data to key.pem")
}