c8edb33ecd
- First RPC steps - Work on some flaws in RPC model - Remove unused TLS settings from Engine and Swarm options - Add code to correctly encode data over the network - Add client driver for RPC - Rename server driver file - Start to make marshal make sense - Fix silly RPC method args and add client - Fix some issues with RPC calls, and marshaling - Simplify plugin main.go - Move towards 100% plugin in CLI - Ensure that plugin servers are cleaned up properly - Make flag parsing for driver flags work properly Includes some work carried from @dmp42 updating the build process and tests to use the new method. Signed-off-by: Nathan LeClaire <nathan.leclaire@gmail.com>
75 lines
2.1 KiB
Go
75 lines
2.1 KiB
Go
package cert
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"os"
|
|
|
|
"github.com/docker/machine/libmachine/auth"
|
|
"github.com/docker/machine/libmachine/log"
|
|
"github.com/docker/machine/libmachine/mcnutils"
|
|
)
|
|
|
|
func BootstrapCertificates(authOptions *auth.AuthOptions) error {
|
|
certDir := authOptions.CertDir
|
|
caCertPath := authOptions.CaCertPath
|
|
caPrivateKeyPath := authOptions.CaPrivateKeyPath
|
|
clientCertPath := authOptions.ClientCertPath
|
|
clientKeyPath := authOptions.ClientKeyPath
|
|
|
|
// TODO: I'm not super happy about this use of "org", the user should
|
|
// have to specify it explicitly instead of implicitly basing it on
|
|
// $USER.
|
|
org := mcnutils.GetUsername()
|
|
|
|
bits := 2048
|
|
|
|
if _, err := os.Stat(certDir); err != nil {
|
|
if os.IsNotExist(err) {
|
|
if err := os.MkdirAll(certDir, 0700); err != nil {
|
|
return fmt.Errorf("Creating machine certificate dir failed: %s", err)
|
|
}
|
|
} else {
|
|
return err
|
|
}
|
|
}
|
|
|
|
if _, err := os.Stat(caCertPath); os.IsNotExist(err) {
|
|
log.Infof("Creating CA: %s", caCertPath)
|
|
|
|
// check if the key path exists; if so, error
|
|
if _, err := os.Stat(caPrivateKeyPath); err == nil {
|
|
return errors.New("The CA key already exists. Please remove it or specify a different key/cert.")
|
|
}
|
|
|
|
if err := GenerateCACertificate(caCertPath, caPrivateKeyPath, org, bits); err != nil {
|
|
return fmt.Errorf("Generating CA certificate failed: %s", err)
|
|
}
|
|
}
|
|
|
|
if _, err := os.Stat(clientCertPath); os.IsNotExist(err) {
|
|
log.Infof("Creating client certificate: %s", clientCertPath)
|
|
|
|
if _, err := os.Stat(certDir); err != nil {
|
|
if os.IsNotExist(err) {
|
|
if err := os.Mkdir(certDir, 0700); err != nil {
|
|
return fmt.Errorf("Creating machine client cert dir failed: %s", err)
|
|
}
|
|
} else {
|
|
return err
|
|
}
|
|
}
|
|
|
|
// check if the key path exists; if so, error
|
|
if _, err := os.Stat(clientKeyPath); err == nil {
|
|
return errors.New("The client key already exists. Please remove it or specify a different key/cert.")
|
|
}
|
|
|
|
if err := GenerateCert([]string{""}, clientCertPath, clientKeyPath, caCertPath, caPrivateKeyPath, org, bits); err != nil {
|
|
return fmt.Errorf("Generating client certificate failed: %s", err)
|
|
}
|
|
}
|
|
|
|
return nil
|
|
}
|