65 lines
2 KiB
Rust
65 lines
2 KiB
Rust
use base64::Engine;
|
|
use std::path::Path;
|
|
use tokio::fs;
|
|
|
|
pub async fn load_or_generate_tls(
|
|
cert_path: &str,
|
|
key_path: &str,
|
|
) -> Result<(Vec<u8>, Vec<u8>), Box<dyn std::error::Error>> {
|
|
if let (Ok(c), Ok(k)) = (fs::read(cert_path).await, fs::read(key_path).await) {
|
|
println!("Using existing TLS cert from {cert_path}");
|
|
return Ok((c, k));
|
|
}
|
|
|
|
println!("Generating self-signed TLS certificate ...");
|
|
if let Some(parent) = Path::new(cert_path).parent() {
|
|
fs::create_dir_all(parent).await?;
|
|
}
|
|
if let Some(parent) = Path::new(key_path).parent() {
|
|
fs::create_dir_all(parent).await?;
|
|
}
|
|
|
|
let (cert_pem, key_pem) = mtp::crypto::tls::generate_self_signed_cert("localhost")?;
|
|
|
|
fs::write(cert_path, &cert_pem).await?;
|
|
fs::write(key_path, &key_pem).await?;
|
|
println!("Wrote {cert_path} and {key_path}");
|
|
|
|
Ok((cert_pem, key_pem))
|
|
}
|
|
|
|
pub async fn certificate_sha256_hex(cert: &[u8]) -> Result<String, Box<dyn std::error::Error>> {
|
|
let der = if cert.starts_with(b"-----BEGIN CERTIFICATE-----") {
|
|
let pem = std::str::from_utf8(cert)?;
|
|
let base64 = pem
|
|
.lines()
|
|
.filter(|line| !line.starts_with("-----"))
|
|
.collect::<String>();
|
|
base64::engine::general_purpose::STANDARD.decode(base64)?
|
|
} else {
|
|
cert.to_vec()
|
|
};
|
|
|
|
Ok(hex::encode(mtp::crypto::sha256(&der)))
|
|
}
|
|
|
|
pub async fn export_webtransport_cert_hash(hash: &str) -> Result<(), Box<dyn std::error::Error>> {
|
|
let public_dir = if Path::new("web-client").exists() {
|
|
Path::new("web-client/public")
|
|
} else {
|
|
Path::new("example/web-client/public")
|
|
};
|
|
fs::create_dir_all(public_dir).await?;
|
|
fs::write(public_dir.join("mtp_dev_cert_hash.txt"), hash).await?;
|
|
|
|
let dev_cert_dir = if Path::new("dev-cert").exists() {
|
|
Path::new("dev-cert")
|
|
} else {
|
|
Path::new("example/dev-cert")
|
|
};
|
|
if dev_cert_dir.exists() {
|
|
fs::write(dev_cert_dir.join("sha256.txt"), hash).await?;
|
|
}
|
|
|
|
Ok(())
|
|
}
|