go.etcd.io/etcd@v3.3.27+incompatible/pkg/tlsutil/tlsutil.go (about) 1 // Copyright 2016 The etcd Authors 2 // 3 // Licensed under the Apache License, Version 2.0 (the "License"); 4 // you may not use this file except in compliance with the License. 5 // You may obtain a copy of the License at 6 // 7 // http://www.apache.org/licenses/LICENSE-2.0 8 // 9 // Unless required by applicable law or agreed to in writing, software 10 // distributed under the License is distributed on an "AS IS" BASIS, 11 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12 // See the License for the specific language governing permissions and 13 // limitations under the License. 14 15 package tlsutil 16 17 import ( 18 "crypto/tls" 19 "crypto/x509" 20 "encoding/pem" 21 "io/ioutil" 22 ) 23 24 // NewCertPool creates x509 certPool with provided CA files. 25 func NewCertPool(CAFiles []string) (*x509.CertPool, error) { 26 certPool := x509.NewCertPool() 27 28 for _, CAFile := range CAFiles { 29 pemByte, err := ioutil.ReadFile(CAFile) 30 if err != nil { 31 return nil, err 32 } 33 34 for { 35 var block *pem.Block 36 block, pemByte = pem.Decode(pemByte) 37 if block == nil { 38 break 39 } 40 cert, err := x509.ParseCertificate(block.Bytes) 41 if err != nil { 42 return nil, err 43 } 44 certPool.AddCert(cert) 45 } 46 } 47 48 return certPool, nil 49 } 50 51 // NewCert generates TLS cert by using the given cert,key and parse function. 52 func NewCert(certfile, keyfile string, parseFunc func([]byte, []byte) (tls.Certificate, error)) (*tls.Certificate, error) { 53 cert, err := ioutil.ReadFile(certfile) 54 if err != nil { 55 return nil, err 56 } 57 58 key, err := ioutil.ReadFile(keyfile) 59 if err != nil { 60 return nil, err 61 } 62 63 if parseFunc == nil { 64 parseFunc = tls.X509KeyPair 65 } 66 67 tlsCert, err := parseFunc(cert, key) 68 if err != nil { 69 return nil, err 70 } 71 return &tlsCert, nil 72 }