mirror of
https://github.com/usual2970/certimate.git
synced 2025-06-08 21:49:52 +00:00
126 lines
3.0 KiB
Go
126 lines
3.0 KiB
Go
package applicant
|
|
|
|
import (
|
|
"crypto"
|
|
"crypto/ecdsa"
|
|
"crypto/elliptic"
|
|
"crypto/rand"
|
|
"errors"
|
|
|
|
"github.com/go-acme/lego/v4/certcrypto"
|
|
"github.com/go-acme/lego/v4/certificate"
|
|
"github.com/go-acme/lego/v4/challenge"
|
|
"github.com/go-acme/lego/v4/lego"
|
|
"github.com/go-acme/lego/v4/registration"
|
|
"github.com/pocketbase/pocketbase/models"
|
|
)
|
|
|
|
const (
|
|
configTypeTencent = "tencent"
|
|
configTypeAliyun = "aliyun"
|
|
)
|
|
|
|
type Certificate struct {
|
|
CertUrl string `json:"certUrl"`
|
|
CertStableUrl string `json:"certStableUrl"`
|
|
PrivateKey string `json:"privateKey"`
|
|
Certificate string `json:"certificate"`
|
|
IssuerCertificate string `json:"issuerCertificate"`
|
|
Csr string `json:"csr"`
|
|
}
|
|
|
|
type ApplyOption struct {
|
|
Email string `json:"email"`
|
|
Domain string `json:"domain"`
|
|
Access string `json:"access"`
|
|
}
|
|
|
|
type MyUser struct {
|
|
Email string
|
|
Registration *registration.Resource
|
|
key crypto.PrivateKey
|
|
}
|
|
|
|
func (u *MyUser) GetEmail() string {
|
|
return u.Email
|
|
}
|
|
func (u MyUser) GetRegistration() *registration.Resource {
|
|
return u.Registration
|
|
}
|
|
func (u *MyUser) GetPrivateKey() crypto.PrivateKey {
|
|
return u.key
|
|
}
|
|
|
|
type Applicant interface {
|
|
Apply() (*Certificate, error)
|
|
}
|
|
|
|
func Get(record *models.Record) (Applicant, error) {
|
|
access := record.ExpandedOne("access")
|
|
option := &ApplyOption{
|
|
Email: "536464346@qq.com",
|
|
Domain: record.GetString("domain"),
|
|
Access: access.GetString("config"),
|
|
}
|
|
switch access.GetString("configType") {
|
|
case configTypeTencent:
|
|
return NewTencent(option), nil
|
|
case configTypeAliyun:
|
|
return NewAliyun(option), nil
|
|
default:
|
|
return nil, errors.New("unknown config type")
|
|
}
|
|
|
|
}
|
|
|
|
func apply(option *ApplyOption, provider challenge.Provider) (*Certificate, error) {
|
|
privateKey, err := ecdsa.GenerateKey(elliptic.P256(), rand.Reader)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
myUser := MyUser{
|
|
Email: option.Email,
|
|
key: privateKey,
|
|
}
|
|
|
|
config := lego.NewConfig(&myUser)
|
|
|
|
// This CA URL is configured for a local dev instance of Boulder running in Docker in a VM.
|
|
config.CADirURL = "https://acme-v02.api.letsencrypt.org/directory"
|
|
config.Certificate.KeyType = certcrypto.RSA2048
|
|
|
|
// A client facilitates communication with the CA server.
|
|
client, err := lego.NewClient(config)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
client.Challenge.SetDNS01Provider(provider)
|
|
|
|
// New users will need to register
|
|
reg, err := client.Registration.Register(registration.RegisterOptions{TermsOfServiceAgreed: true})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
myUser.Registration = reg
|
|
|
|
request := certificate.ObtainRequest{
|
|
Domains: []string{option.Domain},
|
|
Bundle: true,
|
|
}
|
|
certificates, err := client.Certificate.Obtain(request)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return &Certificate{
|
|
CertUrl: certificates.CertURL,
|
|
CertStableUrl: certificates.CertStableURL,
|
|
PrivateKey: string(certificates.PrivateKey),
|
|
Certificate: string(certificates.Certificate),
|
|
IssuerCertificate: string(certificates.IssuerCertificate),
|
|
Csr: string(certificates.CSR),
|
|
}, nil
|
|
}
|