bb892d33d1
Make separate "CreateCertificate" and "CreateSelfSignedCertificate" functions to take the two roles of NewCert. These names should help clarify that they actually make certificates and not just allocate new "Cert" or "Certificate" objects. Secondly, in the case of non-self-signed certs, require a public and a private key to be passed in instead of two private keys, because it's pretty hard to tell when reading code which one is meant to be the signer and which one is the signee. With a public and private key, you know. (These are some changes I made in the course of the openssl port, because the NewCert function kept being confusing to me. It's possible I'm just being ridiculous, and this doesn't help improve readability for anyone else, but if I'm not being ridiculous let's get this in)
48 lines
1.2 KiB
Go
48 lines
1.2 KiB
Go
// Copyright (C) 2019 Storj Labs, Inc.
|
|
// See LICENSE for copying information.
|
|
|
|
package testpeertls
|
|
|
|
import (
|
|
"crypto"
|
|
"crypto/x509"
|
|
|
|
"storj.io/storj/pkg/peertls"
|
|
"storj.io/storj/pkg/pkcrypto"
|
|
)
|
|
|
|
// NewCertChain creates a valid peertls certificate chain (and respective keys) of the desired length.
|
|
// NB: keys are in the reverse order compared to certs (i.e. first key belongs to last cert)!
|
|
func NewCertChain(length int) (keys []crypto.PrivateKey, certs []*x509.Certificate, _ error) {
|
|
for i := 0; i < length; i++ {
|
|
key, err := pkcrypto.GeneratePrivateKey()
|
|
if err != nil {
|
|
return nil, nil, err
|
|
}
|
|
keys = append(keys, key)
|
|
|
|
var template *x509.Certificate
|
|
if i == length-1 {
|
|
template, err = peertls.CATemplate()
|
|
} else {
|
|
template, err = peertls.LeafTemplate()
|
|
}
|
|
if err != nil {
|
|
return nil, nil, err
|
|
}
|
|
|
|
var cert *x509.Certificate
|
|
if i == 0 {
|
|
cert, err = peertls.CreateSelfSignedCertificate(key, template)
|
|
} else {
|
|
cert, err = peertls.CreateCertificate(pkcrypto.PublicKeyFromPrivate(key), keys[i-1], template, certs[i-1:][0])
|
|
}
|
|
if err != nil {
|
|
return nil, nil, err
|
|
}
|
|
|
|
certs = append([]*x509.Certificate{cert}, certs...)
|
|
}
|
|
return keys, certs, nil
|
|
}
|