sashakoshka/go-gemini
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

certificate.Store: Generate certificates by default

Browse Source
This commit is contained in:
Adnan Maolood 2021-02-20 18:23:08 -05:00
parent 15f3e764c5
commit 423914d6e0
1 changed files with 23 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
certificate/store.go
View File

@ -3,6 +3,7 @@ package certificate
import ( import (
"crypto/tls" "crypto/tls"
"crypto/x509" "crypto/x509"
"crypto/x509/pkix"
"errors" "errors"
"fmt" "fmt"
"path/filepath" "path/filepath"
@ -17,7 +18,8 @@ import (
// Store is safe for concurrent use by multiple goroutines. // Store is safe for concurrent use by multiple goroutines.
type Store struct { type Store struct {
// CreateCertificate, if not nil, is called to create a new certificate // CreateCertificate, if not nil, is called to create a new certificate
// to replace a missing or expired certificate. // to replace a missing or expired certificate. If CreateCertificate
// is nil, a certificate with a duration of 1 year will be created.
CreateCertificate func(scope string) (tls.Certificate, error) CreateCertificate func(scope string) (tls.Certificate, error)
certs map[string]tls.Certificate certs map[string]tls.Certificate
@ -92,24 +94,33 @@ func (s *Store) GetCertificate(scope string) (*tls.Certificate, error) {
} }
// If the certificate is empty or expired, generate a new one. // If the certificate is empty or expired, generate a new one.
// TODO: Add sane defaults for certificate generation
if cert.Leaf == nil || cert.Leaf.NotAfter.Before(time.Now()) { if cert.Leaf == nil || cert.Leaf.NotAfter.Before(time.Now()) {
if s.CreateCertificate != nil { var err error
cert, err := s.CreateCertificate(scope) cert, err = s.createCertificate(scope)
if err != nil { if err != nil {
return nil, err return nil, err
} }
if err := s.Add(scope, cert); err != nil { if err := s.Add(scope, cert); err != nil {
return nil, fmt.Errorf("failed to write new certificate for %s: %w", scope, err) return nil, fmt.Errorf("failed to add certificate for %s: %w", scope, err)
}
return &cert, nil
} }
return nil, errors.New("no suitable certificate found")
} }
return &cert, nil return &cert, nil
} }
func (s *Store) createCertificate(scope string) (tls.Certificate, error) {
if s.CreateCertificate != nil {
return s.CreateCertificate(scope)
}
return Create(CreateOptions{
DNSNames: []string{scope},
Subject: pkix.Name{
CommonName: scope,
},
Duration: 365 * 24 * time.Hour,
})
}
// Load loads certificates from the provided path. // Load loads certificates from the provided path.
// New certificates will be written to this path. // New certificates will be written to this path.
// //