forked from smallstep/cli
-
Notifications
You must be signed in to change notification settings - Fork 0
/
identity.go
55 lines (48 loc) 路 1.25 KB
/
identity.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
package x509util
import (
"encoding/pem"
"io/ioutil"
"github.com/pkg/errors"
"github.com/smallstep/cli/crypto/pemutil"
"github.com/smallstep/cli/pkg/x509"
)
// Identity contains a public/private x509 certificate/key pair.
type Identity struct {
Crt *x509.Certificate
CrtPem *pem.Block
Key interface{}
}
// NewIdentity returns a new Identity.
func NewIdentity(c *x509.Certificate, b *pem.Block, k interface{}) *Identity {
return &Identity{
Crt: c,
CrtPem: b,
Key: k,
}
}
// LoadIdentityFromDisk load a public certificate and private key (both in PEM
// format) from disk.
func LoadIdentityFromDisk(crtPath, keyPath string, pemOpts ...pemutil.Options) (*Identity, error) {
crt, err := pemutil.ReadCertificate(crtPath)
if err != nil {
return nil, errors.WithStack(err)
}
pubPEM := &pem.Block{
Type: "CERTIFICATE",
Bytes: crt.Raw,
}
keyBytes, err := ioutil.ReadFile(keyPath)
if err != nil {
return nil, errors.WithStack(err)
}
if len(pemOpts) == 0 {
pemOpts = []pemutil.Options{pemutil.WithFilename(keyPath)}
} else {
pemOpts = append(pemOpts, pemutil.WithFilename(keyPath))
}
key, err := pemutil.Parse(keyBytes, pemOpts...)
if err != nil {
return nil, errors.WithStack(err)
}
return NewIdentity(crt, pubPEM, key), nil
}