-
Notifications
You must be signed in to change notification settings - Fork 7
/
certificate.go
59 lines (48 loc) · 1.44 KB
/
certificate.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
package types
import (
"crypto/x509"
"encoding/pem"
"fmt"
"strconv"
"github.com/flexkube/libflexkube/internal/util"
)
// Certificate is a wrapper on string type, which parses it's content
// as X.509 certificate while unmarshalling. This allows to validate the
// data during unmarshalling process.
//
// This type is deprecated, as it does not allow to produce
// meaningful error to the user.
type Certificate string
// UnmarshalJSON implements encoding/json.Unmarshaler interface and tries
// to parse obtained data as PEM encoded X.509 certificate.
func (c *Certificate) UnmarshalJSON(data []byte) error {
p, err := strconv.Unquote(string(data))
if err != nil {
return fmt.Errorf("failed to unquote string: %v", err)
}
der, _ := pem.Decode([]byte(p))
if der == nil {
return fmt.Errorf("failed to decode PEM format")
}
if _, err := x509.ParseCertificate(der.Bytes); err != nil {
return fmt.Errorf("failed to parse certificate: %w", err)
}
*c = Certificate(p)
return nil
}
// Pick returns first non-empty certificate from given list, including
// receiver certificate.
//
// This method is a helper, which allows to select the certificate to use
// from hierarchical configuration.
func (c *Certificate) Pick(values ...Certificate) Certificate {
if c == nil || *c == "" {
ce := Certificate("")
c = &ce
}
cs := []string{string(*c)}
for _, v := range values {
cs = append(cs, string(v))
}
return Certificate(util.PickString(cs...))
}