From 52102b0f24b03be251efa863c3b7cd657f09d5d9 Mon Sep 17 00:00:00 2001
From: Gibheer <gibheer@gmail.com>
Date: Thu, 5 Mar 2015 21:37:52 +0100
Subject: finally add certificate sign request generation

This adds finally a way to create certificate sign requests. There are
still some options missing, but it is coming together.

With the next step, the ccertificate data container will probably be put
into the pki library.
---
 main.go | 21 ++++++++++++++++++++-
 1 file changed, 20 insertions(+), 1 deletion(-)

(limited to 'main.go')

diff --git a/main.go b/main.go
index c509fd7..b33ced9 100644
--- a/main.go
+++ b/main.go
@@ -2,7 +2,10 @@ package main
 
 import (
   "crypto"
+  "crypto/rand"
+  "crypto/x509"
   "encoding/base64"
+  "encoding/pem"
   "fmt"
   "io"
   "io/ioutil"
@@ -25,7 +28,7 @@ func main() {
   case "create-public":    create_public_key()
   case "sign-input":       sign_input()
   case "verify-signature": verify_input()
-//  case "create-cert-sign": create_sign_request()
+  case "create-cert-sign": create_sign_request()
 //  case "sign-request":     sign_request()
   case "help":             print_modules()
 //  case "info":             info_on_file()
@@ -115,6 +118,22 @@ func verify_input() {
   os.Exit(1)
 }
 
+// create a certificate sign request
+func create_sign_request() {
+  fs := NewFlags("create-cert-sign")
+  fs.AddPrivateKey()
+  fs.AddOutput()
+  fs.AddCertificateFields()
+  fs.Parse(program_args())
+
+  csrt := fs.Flags.CertificateData.GenerateCSR()
+  csr, err := x509.CreateCertificateRequest(rand.Reader, csrt, fs.Flags.PrivateKey.PrivateKey())
+  if err != nil { crash_with_help(2, "Could not create certificate sign request: %s", err) }
+  pem_block := &pem.Block{Type: "CERTIFICATE REQUEST", Bytes: csr}
+  err = pem.Encode(fs.Flags.Output, pem_block)
+  if err != nil { crash_with_help(2, "Encoding didn't work: %s", err) }
+}
+
 // print the module help
 func print_modules() {
   fmt.Printf(`Usage: %s command args
-- 
cgit v1.2.3-70-g09d2