95 lines
2.2 KiB
Go
95 lines
2.2 KiB
Go
|
// Copyright (C) 2019 Storj Labs, Inc.
|
||
|
|
// See LICENSE for copying information.
|
||
|
|
|
||
|
|
package certificateclient
|
||
|
|
|
||
|
|
import (
|
||
|
|
"context"
|
||
|
|
"time"
|
||
|
|
|
||
|
|
"google.golang.org/grpc"
|
||
|
|
"gopkg.in/spacemonkeygo/monkit.v2"
|
||
|
|
|
||
|
|
"storj.io/storj/pkg/identity"
|
||
|
|
"storj.io/storj/pkg/pb"
|
||
|
|
"storj.io/storj/pkg/peertls/tlsopts"
|
||
|
|
"storj.io/storj/pkg/transport"
|
||
|
|
)
|
||
|
|
|
||
|
|
var mon = monkit.Package()
|
||
|
|
|
||
|
|
// Config is a config struct for use with a certificate signing service client.
|
||
|
|
type Config struct {
|
||
|
|
Address string `help:"address of the certificate signing rpc service"`
|
||
|
|
TLS tlsopts.Config
|
||
|
|
}
|
||
|
|
|
||
|
|
// Client implements pb.CertificateClient
|
||
|
|
type Client struct {
|
||
|
|
conn *grpc.ClientConn
|
||
|
|
client pb.CertificatesClient
|
||
|
|
}
|
||
|
|
|
||
|
|
// New creates a new certificate signing grpc client.
|
||
|
|
func New(ctx context.Context, tc transport.Client, address string) (_ *Client, err error) {
|
||
|
|
defer mon.Task()(&ctx, address)(&err)
|
||
|
|
|
||
|
|
conn, err := tc.DialAddress(ctx, address)
|
||
|
|
if err != nil {
|
||
|
|
return nil, err
|
||
|
|
}
|
||
|
|
|
||
|
|
return &Client{
|
||
|
|
conn: conn,
|
||
|
|
client: pb.NewCertificatesClient(conn),
|
||
|
|
}, nil
|
||
|
|
}
|
||
|
|
|
||
|
|
// NewClientFrom creates a new certificate signing gRPC client from an existing
|
||
|
|
// grpc cert signing client.
|
||
|
|
func NewClientFrom(client pb.CertificatesClient) *Client {
|
||
|
|
return &Client{
|
||
|
|
client: client,
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
// Sign submits a certificate signing request given the config.
|
||
|
|
func (config Config) Sign(ctx context.Context, ident *identity.FullIdentity, authToken string) (_ [][]byte, err error) {
|
||
|
|
defer mon.Task()(&ctx)(&err)
|
||
|
|
|
||
|
|
tlsOpts, err := tlsopts.NewOptions(ident, config.TLS, nil)
|
||
|
|
if err != nil {
|
||
|
|
return nil, err
|
||
|
|
}
|
||
|
|
client, err := New(ctx, transport.NewClient(tlsOpts), config.Address)
|
||
|
|
if err != nil {
|
||
|
|
return nil, err
|
||
|
|
}
|
||
|
|
|
||
|
|
return client.Sign(ctx, authToken)
|
||
|
|
}
|
||
|
|
|
||
|
|
// Sign claims an authorization using the token string and returns a signed
|
||
|
|
// copy of the client's CA certificate.
|
||
|
|
func (client *Client) Sign(ctx context.Context, tokenStr string) (_ [][]byte, err error) {
|
||
|
|
defer mon.Task()(&ctx)(&err)
|
||
|
|
|
||
|
|
res, err := client.client.Sign(ctx, &pb.SigningRequest{
|
||
|
|
AuthToken: tokenStr,
|
||
|
|
Timestamp: time.Now().Unix(),
|
||
|
|
})
|
||
|
|
if err != nil {
|
||
|
|
return nil, err
|
||
|
|
}
|
||
|
|
|
||
|
|
return res.Chain, nil
|
||
|
|
}
|
||
|
|
|
||
|
|
// Close closes the client.
|
||
|
|
func (client *Client) Close() error {
|
||
|
|
if client.conn != nil {
|
||
|
|
return client.conn.Close()
|
||
|
|
}
|
||
|
|
return nil
|
||
|
|
}
|