Mac OS support

[antonkomarev]

@orangecoloured could you test pric on mac os, please?

TODO

1. Implement trusting of CA Trust Certificate Authority in MacOS #15
2. Fix OpenSSL config loading Fix Mac OS OpenSSL include DNS config file #12

[orangecoloured]

# Creating output directory
+ mkdir -p ./output

# Copying OpenSSL DNS config list from defaults
+ cp ./openssl.dns.default.cnf ./openssl.dns.cnf

# Creating !pric directory in Operating System CA registry
+ sudo mkdir -p '/usr/local/share/ca-certificates/!pric'

# Generating Certificate Authority private key
+ openssl genrsa -out ./output/ca.key 2048
Generating RSA private key, 2048 bit long modulus
...........+++
.........+++
e is 65537 (0x10001)

# Copying Certificate Authority private key to Operating System CA registry
+ sudo cp ./output/ca.key '/usr/local/share/ca-certificates/!pric/ca.key'

# Generating Certificate Authority self-signed certificate
+ openssl req -x509 -new -nodes -key ./output/ca.key -sha256 -days 36500 -subj '/O=\!pric/CN=localhost' -out ./output/ca.crt

# Copying Certificate Authority certificate to Operating System CA registry
+ sudo cp ./output/ca.crt '/usr/local/share/ca-certificates/!pric/ca.crt'

# Updating Operating System CA registry
+ sudo update-ca-certificates
sudo: update-ca-certificates: command not found

# Generating localhost private key
+ openssl genrsa -out ./output/localhost.key 2048
Generating RSA private key, 2048 bit long modulus
.......................................+++
........+++
e is 65537 (0x10001)

# Generating localhost certificate signing request
+ openssl req -new -key ./output/localhost.key -config ./openssl.cnf -subj '/O=\!pric/CN=localhost' -out ./output/localhost.csr
error on line 368 of ./openssl.cnf
4409359852:error:0EFFF065:configuration file routines:CRYPTO_internal:missing equal sign:/BuildRoot/Library/Caches/com.apple.xbs/Sources/libressl/libressl-47.11.1/libressl-2.8/crypto/conf/conf_def.c:344:line 368

# Generating localhost certificate signed by Certificate Authority
+ openssl x509 -req -extensions v3_req -extfile ./openssl.cnf -in ./output/localhost.csr -CA '/usr/local/share/ca-certificates/!pric/ca.crt' -CAkey ./output/ca.key -CAcreateserial -CAserial ./output/ca.srl -days 36500 -sha256 -out ./output/localhost.crt
error on line 368 of config file './openssl.cnf'

# Compiling PEM certificate chain
+ cat ./output/localhost.crt '/usr/local/share/ca-certificates/!pric/ca.crt' ./output/localhost.key
cat: ./output/localhost.crt: No such file or directory

[antonkomarev]

Thanks for the debug output!

List of tasks updated in first comment.

[antonkomarev]

We could check if certificate was added using this command:

security dump-trust-settings -d | grep Cert | grep localhost

[antonkomarev]

MacOS support was added. Merged in master branch.