-
-
Notifications
You must be signed in to change notification settings - Fork 10
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #112 from Akilan1999/cname-entry
Added possibility to add domain name for nodes on P2PRC
- Loading branch information
Showing
18 changed files
with
588 additions
and
336 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -38,3 +38,6 @@ test* | |
| # Ignore public and private keys | ||
| p2prc.publicKey | ||
| p2prc.privateKey | ||
|
|
||
| # Ignore pem files | ||
| *.pem | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,177 @@ | ||
| // Copyright 2009 The Go Authors. All rights reserved. | ||
| // Use of this source code is governed by a BSD-style | ||
| // license that can be found in the LICENSE file.x | ||
|
|
||
| // Generate a self-signed X.509 certificate for a TLS server. Outputs to | ||
| // 'cert.pem' and 'key.pem' and will overwrite existing files. | ||
|
|
||
| package generate | ||
|
|
||
| import ( | ||
| "crypto/ecdsa" | ||
| "crypto/ed25519" | ||
| "crypto/elliptic" | ||
| "crypto/rand" | ||
| "crypto/rsa" | ||
| "crypto/x509" | ||
| "crypto/x509/pkix" | ||
| "encoding/pem" | ||
| "github.com/Akilan1999/p2p-rendering-computation/p2p" | ||
| "log" | ||
| "math/big" | ||
| "net" | ||
| "os" | ||
| "strings" | ||
| "time" | ||
| ) | ||
|
|
||
| var ( | ||
| host = "" | ||
| validFrom = "" | ||
| validFor = 365 * 24 * time.Hour | ||
| isCA = false | ||
| rsaBits = 2048 | ||
| ecdsaCurve = "" | ||
| ed25519Key = false | ||
| ) | ||
|
|
||
| func publicKey(priv any) any { | ||
| switch k := priv.(type) { | ||
| case *rsa.PrivateKey: | ||
| return &k.PublicKey | ||
| case *ecdsa.PrivateKey: | ||
| return &k.PublicKey | ||
| case ed25519.PrivateKey: | ||
| return k.Public().(ed25519.PublicKey) | ||
| default: | ||
| return nil | ||
| } | ||
| } | ||
|
|
||
| func GenerateCertificate() error { | ||
| var priv any | ||
| var err error | ||
|
|
||
| //flag.Parse() | ||
|
|
||
| host, err = p2p.CurrentPublicIP() | ||
|
|
||
| if err != nil { | ||
| return err | ||
| } | ||
|
|
||
| if len(host) == 0 { | ||
| log.Fatalf("Missing required --host parameter") | ||
| } | ||
| switch ecdsaCurve { | ||
| case "": | ||
| if ed25519Key { | ||
| _, priv, err = ed25519.GenerateKey(rand.Reader) | ||
| } else { | ||
| priv, err = rsa.GenerateKey(rand.Reader, rsaBits) | ||
| } | ||
| case "P224": | ||
| priv, err = ecdsa.GenerateKey(elliptic.P224(), rand.Reader) | ||
| case "P256": | ||
| priv, err = ecdsa.GenerateKey(elliptic.P256(), rand.Reader) | ||
| case "P384": | ||
| priv, err = ecdsa.GenerateKey(elliptic.P384(), rand.Reader) | ||
| case "P521": | ||
| priv, err = ecdsa.GenerateKey(elliptic.P521(), rand.Reader) | ||
| default: | ||
| log.Fatalf("Unrecognized elliptic curve: %q", ecdsaCurve) | ||
| } | ||
| if err != nil { | ||
| log.Fatalf("Failed to generate private key: %v", err) | ||
| } | ||
|
|
||
| // ECDSA, ED25519 and RSA subject keys should have the DigitalSignature | ||
| // KeyUsage bits set in the x509.Certificate template | ||
| keyUsage := x509.KeyUsageDigitalSignature | ||
| // Only RSA subject keys should have the KeyEncipherment KeyUsage bits set. In | ||
| // the context of TLS this KeyUsage is particular to RSA key exchange and | ||
| // authentication. | ||
| if _, isRSA := priv.(*rsa.PrivateKey); isRSA { | ||
| keyUsage |= x509.KeyUsageKeyEncipherment | ||
| } | ||
|
|
||
| var notBefore time.Time | ||
| if len(validFrom) == 0 { | ||
| notBefore = time.Now() | ||
| } else { | ||
| notBefore, err = time.Parse("Jan 2 15:04:05 2006", validFrom) | ||
| if err != nil { | ||
| log.Fatalf("Failed to parse creation date: %v", err) | ||
| } | ||
| } | ||
|
|
||
| notAfter := notBefore.Add(validFor) | ||
|
|
||
| serialNumberLimit := new(big.Int).Lsh(big.NewInt(1), 128) | ||
| serialNumber, err := rand.Int(rand.Reader, serialNumberLimit) | ||
| if err != nil { | ||
| log.Fatalf("Failed to generate serial number: %v", err) | ||
| } | ||
|
|
||
| template := x509.Certificate{ | ||
| SerialNumber: serialNumber, | ||
| Subject: pkix.Name{ | ||
| Organization: []string{"Acme Co"}, | ||
| }, | ||
| NotBefore: notBefore, | ||
| NotAfter: notAfter, | ||
|
|
||
| KeyUsage: keyUsage, | ||
| ExtKeyUsage: []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth}, | ||
| BasicConstraintsValid: true, | ||
| } | ||
|
|
||
| hosts := strings.Split(host, ",") | ||
| for _, h := range hosts { | ||
| if ip := net.ParseIP(h); ip != nil { | ||
| template.IPAddresses = append(template.IPAddresses, ip) | ||
| } else { | ||
| template.DNSNames = append(template.DNSNames, h) | ||
| } | ||
| } | ||
|
|
||
| if isCA { | ||
| template.IsCA = true | ||
| template.KeyUsage |= x509.KeyUsageCertSign | ||
| } | ||
|
|
||
| derBytes, err := x509.CreateCertificate(rand.Reader, &template, &template, publicKey(priv), priv) | ||
| if err != nil { | ||
| log.Fatalf("Failed to create certificate: %v", err) | ||
| } | ||
|
|
||
| certOut, err := os.Create("cert.pem") | ||
| if err != nil { | ||
| log.Fatalf("Failed to open cert.pem for writing: %v", err) | ||
| } | ||
| if err := pem.Encode(certOut, &pem.Block{Type: "CERTIFICATE", Bytes: derBytes}); err != nil { | ||
| log.Fatalf("Failed to write data to cert.pem: %v", err) | ||
| } | ||
| if err := certOut.Close(); err != nil { | ||
| log.Fatalf("Error closing cert.pem: %v", err) | ||
| } | ||
| log.Print("wrote cert.pem\n") | ||
|
|
||
| keyOut, err := os.OpenFile("key.pem", os.O_WRONLY|os.O_CREATE|os.O_TRUNC, 0600) | ||
| if err != nil { | ||
| log.Fatalf("Failed to open key.pem for writing: %v", err) | ||
| } | ||
| privBytes, err := x509.MarshalPKCS8PrivateKey(priv) | ||
| if err != nil { | ||
| log.Fatalf("Unable to marshal private key: %v", err) | ||
| } | ||
| if err := pem.Encode(keyOut, &pem.Block{Type: "PRIVATE KEY", Bytes: privBytes}); err != nil { | ||
| log.Fatalf("Failed to write data to key.pem: %v", err) | ||
| } | ||
| if err := keyOut.Close(); err != nil { | ||
| log.Fatalf("Error closing key.pem: %v", err) | ||
| } | ||
| log.Print("wrote key.pem\n") | ||
|
|
||
| return nil | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.