110 lines
2.0 KiB
Go
110 lines
2.0 KiB
Go
package letsencrypt
|
|
|
|
import (
|
|
"crypto"
|
|
"crypto/rand"
|
|
"crypto/rsa"
|
|
"crypto/x509"
|
|
"encoding/json"
|
|
"encoding/pem"
|
|
"io/ioutil"
|
|
"os"
|
|
|
|
"github.com/xenolf/lego/acme"
|
|
)
|
|
|
|
const defaultUser = "default"
|
|
|
|
type User struct {
|
|
Email string
|
|
Registration *acme.RegistrationResource
|
|
key crypto.PrivateKey
|
|
}
|
|
|
|
func (u User) GetEmail() string {
|
|
return u.Email
|
|
}
|
|
|
|
func (u User) GetRegistration() *acme.RegistrationResource {
|
|
return u.Registration
|
|
}
|
|
|
|
func (u User) GetPrivateKey() crypto.PrivateKey {
|
|
return u.key
|
|
}
|
|
|
|
func newUser(email string) (User, error) {
|
|
var err error
|
|
user := User{Email: email}
|
|
user.key, err = rsa.GenerateKey(rand.Reader, KeySize)
|
|
if err != nil {
|
|
return user, err
|
|
}
|
|
return user, nil
|
|
}
|
|
|
|
func getUser(email string) (User, error) {
|
|
var user User
|
|
|
|
reg, err := os.Open(directory.UserRegistration(email))
|
|
if err != nil {
|
|
if os.IsNotExist(err) {
|
|
return newUser(email)
|
|
}
|
|
return user, err
|
|
}
|
|
defer reg.Close()
|
|
|
|
err = json.NewDecoder(reg).Decode(&user)
|
|
if err != nil {
|
|
return user, err
|
|
}
|
|
|
|
user.key, err = loadRSAPrivateKey(directory.UserKey(email))
|
|
if err != nil {
|
|
return user, err
|
|
}
|
|
|
|
return user, nil
|
|
}
|
|
|
|
func saveUser(user User) error {
|
|
err := os.MkdirAll(directory.User(user.Email), 0700)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
err = saveRSAPrivateKey(user.key, directory.UserKey(user.Email))
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
jsonBytes, err := json.MarshalIndent(&user, "", " ")
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
return ioutil.WriteFile(directory.UserRegistration(user.Email), jsonBytes, 0600)
|
|
}
|
|
|
|
func loadRSAPrivateKey(file string) (crypto.PrivateKey, error) {
|
|
keyBytes, err := ioutil.ReadFile(file)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
keyBlock, _ := pem.Decode(keyBytes)
|
|
return x509.ParsePKCS1PrivateKey(keyBlock.Bytes)
|
|
}
|
|
|
|
func saveRSAPrivateKey(key crypto.PrivateKey, file string) error {
|
|
pemKey := pem.Block{
|
|
Type: "RSA PRIVATE KEY", Bytes: x509.MarshalPKCS1PrivateKey(key.(*rsa.PrivateKey)),
|
|
}
|
|
keyOut, err := os.Create(file)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
defer keyOut.Close()
|
|
return pem.Encode(keyOut, &pemKey)
|
|
}
|