forked from microsoft/go-mssqldb
-
Notifications
You must be signed in to change notification settings - Fork 0
/
utils.go
57 lines (50 loc) · 1.33 KB
/
utils.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
//go:build go1.18
// +build go1.18
package akvkeys
import (
"context"
"crypto/rand"
"fmt"
"math/big"
"net/url"
"os"
"github.com/Azure/azure-sdk-for-go/sdk/azidentity"
"github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys"
)
func GetTestAKV() (client *azkeys.Client, u string, err error) {
vaultName := os.Getenv("KEY_VAULT_NAME")
if len(vaultName) == 0 {
err = fmt.Errorf("KEY_VAULT_NAME is not set in the environment")
return
}
vaultURL := fmt.Sprintf("https://%s.vault.azure.net/", url.PathEscape(vaultName))
cred, err := azidentity.NewDefaultAzureCredential(nil)
if err != nil {
return
}
client, err = azkeys.NewClient(vaultURL, cred, nil)
if err != nil {
return
}
u = vaultURL + "keys"
return
}
func CreateRSAKey(client *azkeys.Client) (name string, err error) {
kt := azkeys.KeyTypeRSA
ks := int32(2048)
rsaKeyParams := azkeys.CreateKeyParameters{
Kty: &kt,
KeySize: &ks,
}
i, _ := rand.Int(rand.Reader, big.NewInt(1000000))
name = fmt.Sprintf("go-mssqlkey%d", i)
_, err = client.CreateKey(context.TODO(), name, rsaKeyParams, nil)
if err != nil {
_, err = client.RecoverDeletedKey(context.TODO(), name, &azkeys.RecoverDeletedKeyOptions{})
}
return
}
func DeleteRSAKey(client *azkeys.Client, name string) bool {
_, err := client.DeleteKey(context.TODO(), name, nil)
return err == nil
}