add p15 key output file

The NMC Security Wizard can also produce .p15 files that contain just a private key. Add this ability to this tool.

When the `create` function is used, both files will be outputted.
This commit is contained in:
Greg T. Wallace 2024-06-04 18:59:36 -04:00
parent ecf10f1fdc
commit 01be6ca577
6 changed files with 206 additions and 87 deletions

View file

@ -5,34 +5,36 @@ import (
"fmt"
)
// pemToAPCP15 reads the specified pem files and returns the apc p15 bytes
func (app *app) pemToAPCP15(keyPem, certPem []byte, parentCmdName string) ([]byte, error) {
// pemToAPCP15s reads the specified pem files and returns the apc p15 files (both a
// p15 file with just the private key, and also a p15 file with both the private key
// and certificate). The key+cert file includes the required APC header, prepended.
func (app *app) pemToAPCP15s(keyPem, certPem []byte, parentCmdName string) (apcKeyCertFile, keyFile []byte, err error) {
app.stdLogger.Printf("%s: making apc p15 file from pem", parentCmdName)
// make p15 struct
p15, err := pkcs15.ParsePEMToPKCS15(keyPem, certPem)
if err != nil {
return nil, fmt.Errorf("%s: failed to parse pem files (%w)", parentCmdName, err)
return nil, nil, fmt.Errorf("%s: failed to parse pem files (%w)", parentCmdName, err)
}
app.stdLogger.Printf("%s: successfully loaded pem files", parentCmdName)
// make file bytes
p15File, err := p15.ToP15File()
keyCertFile, keyFile, err := p15.ToP15Files()
if err != nil {
return nil, fmt.Errorf("%s: failed to make p15 file (%w)", parentCmdName, err)
return nil, nil, fmt.Errorf("%s: failed to make p15 file (%w)", parentCmdName, err)
}
// make header for file bytes
apcHeader, err := makeFileHeader(p15File)
apcHeader, err := makeFileHeader(keyCertFile)
if err != nil {
return nil, fmt.Errorf("%s: failed to make p15 file header (%w)", parentCmdName, err)
return nil, nil, fmt.Errorf("%s: failed to make p15 file header (%w)", parentCmdName, err)
}
// combine header with file
apcFile := append(apcHeader, p15File...)
apcKeyCertFile = append(apcHeader, keyCertFile...)
app.stdLogger.Printf("%s: apc p15 file data succesfully generated", parentCmdName)
return apcFile, nil
return apcKeyCertFile, keyFile, nil
}