mirror of
https://github.com/rancher/os.git
synced 2025-06-24 22:11:33 +00:00
111 lines
2.4 KiB
Go
111 lines
2.4 KiB
Go
package control
|
|
|
|
import (
|
|
"fmt"
|
|
"os"
|
|
"path/filepath"
|
|
|
|
"github.com/codegangsta/cli"
|
|
machineUtil "github.com/docker/machine/utils"
|
|
)
|
|
|
|
func tlsConfCommands() []cli.Command {
|
|
return []cli.Command{
|
|
{
|
|
Name: "create",
|
|
Usage: "use it to create a new set of tls configuration certs and keys or upload existing ones",
|
|
Action: tlsConfCreate,
|
|
Flags: []cli.Flag{
|
|
cli.StringFlag{
|
|
Name: "cakey",
|
|
Usage: "path to existing certificate authority key (only use with --generate)",
|
|
},
|
|
cli.StringFlag{
|
|
Name: "ca",
|
|
Usage: "path to existing certificate authority (only use with --genreate)",
|
|
},
|
|
cli.BoolFlag{
|
|
Name: "generate, g",
|
|
Usage: "generate the client key and client cert from existing ca and cakey",
|
|
},
|
|
cli.StringFlag{
|
|
Name: "outDir, o",
|
|
Usage: "the output directory to save the generated certs or keys",
|
|
},
|
|
},
|
|
},
|
|
}
|
|
}
|
|
|
|
func tlsConfCreate(c *cli.Context) {
|
|
name := "rancher"
|
|
bits := 2048
|
|
|
|
caCertPath := "ca.pem"
|
|
caKeyPath := "ca-key.pem"
|
|
outDir := "/etc/docker/tls/"
|
|
generateCaCerts := true
|
|
|
|
inputCaKey := ""
|
|
inputCaCert := ""
|
|
|
|
if val := c.String("outDir"); val != "" {
|
|
outDir = val
|
|
}
|
|
|
|
if c.Bool("generate") {
|
|
generateCaCerts = false
|
|
}
|
|
|
|
if val := c.String("cakey"); val != "" {
|
|
inputCaKey = val
|
|
}
|
|
|
|
if val := c.String("ca"); val != "" {
|
|
inputCaCert = val
|
|
}
|
|
|
|
caCertPath = filepath.Join(outDir, caCertPath)
|
|
caKeyPath = filepath.Join(outDir, caKeyPath)
|
|
|
|
serverCertPath := "server-cert.pem"
|
|
serverKeyPath := "server-key.pem"
|
|
|
|
if generateCaCerts {
|
|
if err := machineUtil.GenerateCACertificate(caCertPath, caKeyPath, name, bits); err != nil {
|
|
fmt.Println(err.Error())
|
|
return
|
|
}
|
|
} else {
|
|
if inputCaKey == "" || inputCaCert == "" {
|
|
fmt.Println("Please specify caKey and CaCert along with -g")
|
|
return
|
|
}
|
|
|
|
if _, err := os.Stat(inputCaKey); err != nil {
|
|
|
|
fmt.Printf("ERROR: %s does not exist\n", inputCaKey)
|
|
return
|
|
} else {
|
|
caKeyPath = inputCaKey
|
|
}
|
|
|
|
if _, err := os.Stat(inputCaCert); err != nil {
|
|
fmt.Printf("ERROR: %s does not exist\n", inputCaCert)
|
|
return
|
|
} else {
|
|
caCertPath = inputCaCert
|
|
}
|
|
serverCertPath = "client-cert.pem"
|
|
serverKeyPath = "client-key.pem"
|
|
}
|
|
|
|
serverCertPath = filepath.Join(outDir, serverCertPath)
|
|
serverKeyPath = filepath.Join(outDir, serverKeyPath)
|
|
|
|
if err := machineUtil.GenerateCert([]string{""}, serverCertPath, serverKeyPath, caCertPath, caKeyPath, name, bits); err != nil {
|
|
fmt.Println(err.Error())
|
|
return
|
|
}
|
|
}
|