tls

package main

import (
	"log"

	"github.com/liferaft/kubekit/pkg/server/tls"
)

func main() {
	certsDir := "./certificates"
	// Generate the certificates in memory for the CN `kubekit.io`
	ca := tls.GenerateCertificateAuthority("kubekit.io", certsDir)
	// Save them to ./certificates/kubekit.io.{key,crt}
	if err := ca.Persist().Error(); err != nil {
		log.Fatalf("failed to generate the CA certificate. %s", err)
	}

	// Generate a server certificate for the server on `www.server.io` and
	// `192.168.100.10` in memory, sign it with the CA generated and save them
	// to ./certificates/server.{key,crt}
	serverCert := tls.GenerateSignedCertificate("server", certsDir, ca, "www.server.io", "192.168.100.10").Persist()
	if err := serverCert.Error(); err != nil {
		log.Fatalf("failed to generate the server certificate. %s", err)
	}

	// Generate a client certificate for `localhost` in memory, sign it with the CA
	// generated and save them to ./certificates/client.{key,crt}
	clientCert := tls.GenerateSignedClientCertificate("client", certsDir, ca, "www.server.io", "192.168.100.10").Persist()
	if err := clientCert.Error(); err != nil {
		log.Fatalf("failed to generate the server certificate. %s", err)
	}

	// Generate a self signed sertificate in memory and save it to
	// ./certificates/sscert.{key,crt}
	// 	selfSignCert := tls.GenerateSelfSignedCertificate("sscert", certsDir).Persist()
	// 	if err := selfSignCert.Error(); err != nil {
	// 		log.Fatalf("failed to generate the self signed certificate. %s", err)
	// 	}
}

Output:

package main

import (
	"log"

	"github.com/liferaft/kubekit/pkg/server/tls"
)

func main() {
	// Loads the existing key, generates the CA certificate from it and save the
	// generated certificate to `./certificates/ca.crt`
	caOpts := tls.CertificateOpts{
		CertsDir: "./certificates",
	}
	ca := tls.NewCertificate("corp.org", &caOpts).ReadPrivateKeyFromFile("/var/pki/ca.key").GenerateCertificateAuthority().WriteCertificateToFile("./certificates/ca.crt")
	if err := ca.Error(); err != nil {
		log.Fatalf("filed to generate the CA certificate. %s", err)
	}

	// Generates and save the server certificate from an existing key to be used on the following domain names
	serverOpts := tls.CertificateOpts{
		CertsDir: "./certificates",
		Bits:     1024,
		DNSNames: []string{"www.server.com", "www.server.io"},
	}
	serverCert := tls.NewCertificate("server", &serverOpts).GenerateCertificate().Persist()
	if err := serverCert.Error(); err != nil {
		log.Fatalf("filed to generate the server certificate. %s", err)
	}

	clientOpts := tls.CertificateOpts{
		CertsDir: "./certificates",
		Bits:     2048,
		UseAs:    tls.CertificateUsedForClient,
	}
	clientCert := tls.NewCertificate("client", &clientOpts).GenerateCertificate().Persist()
	if err := clientCert.Error(); err != nil {
		log.Fatalf("filed to generate the client certificate. %s", err)
	}
}

Output: