pem_reader.go

package server

import (
	"log"
	"io/ioutil"
	vc "github.com/hashicorp/vault/api"
)

type PEMReader interface {
	readCertificatePEM() []byte
	readPrivateKeyPEM() []byte
	readCaCertificatePEM() []byte
	readVereignCaCertificatePEM() []byte
	readVereignCaKeyPEM() []byte
}

type FilePEMReader struct {
	certificationURL string
	certificationToken string
	certificationPath string
	certificationCertFile string
	certificationKeyFile string
	certificationCaCertFile string
	certificationVereignCertFile string
	certificationVereignKeyFile string
}

func (f FilePEMReader) readCertificatePEM() []byte {
	pem, err := ioutil.ReadFile(f.certificationPath + "/" + f.certificationCertFile)
    if err != nil {
		log.Printf("Error: %v", err)
        return []byte("")
    }
	return pem
}

func (f FilePEMReader) readPrivateKeyPEM() []byte {
    pem, err := ioutil.ReadFile(f.certificationPath + "/" + f.certificationKeyFile)
    if err != nil {
		log.Printf("Error: %v", err)
        return []byte("")
    }
	return pem
}

func (f FilePEMReader) readCaCertificatePEM() []byte {
    pem, err := ioutil.ReadFile(f.certificationPath + "/" + f.certificationCaCertFile)
    if err != nil {
		log.Printf("Error: %v", err)
        return []byte("")
    }
	return pem
}

func (f FilePEMReader) readVereignCaCertificatePEM() []byte {
    pem, err := ioutil.ReadFile(f.certificationPath + "/" + f.certificationVereignCertFile)
    if err != nil {
		log.Printf("Error: %v", err)
        return []byte("")
    }
	return pem
}

func (f FilePEMReader) readVereignCaKeyPEM() []byte {
    pem, err := ioutil.ReadFile(f.certificationPath + "/" + f.certificationVereignKeyFile)
    if err != nil {
		log.Printf("Error: %v", err)
        return []byte("")
    }
	return pem
}

type VaultPEMReader struct {
	certificationURL string
	certificationToken string
	certificationPath string
	certificationCertFile string
	certificationKeyFile string
	certificationCaCertFile string
	certificationVereignCertFile string
	certificationVereignKeyFile string
}

func (v VaultPEMReader) readCertificatePEM() []byte {
	client, err := vc.NewClient(&vc.Config{
		Address: v.certificationURL,
	})

	if err != nil {
		log.Printf("Error: VAULT Can't create client, %s", err)
	}

	client.SetToken(v.certificationToken)

	keyname := v.certificationPath
	secretValues, err := client.Logical().Read(keyname)
	if err != nil {
		log.Printf("Error: VAULT Can't read value, %s", err)
	}
	
	pemMap := secretValues.Data["data"].(map[string]interface{})

	for propName, propValue := range pemMap {
		if propName == v.certificationCertFile {
			return []byte(propValue.(string))
		}
	}
	return []byte("")
}

func (v VaultPEMReader) readPrivateKeyPEM() []byte {
	client, err := vc.NewClient(&vc.Config{
		Address: v.certificationURL,
	})

	if err != nil {
		log.Printf("Error: VAULT Can't create client, %s", err)
	}

	client.SetToken(v.certificationToken)

	keyname := v.certificationPath
	secretValues, err := client.Logical().Read(keyname)
	if err != nil {
		log.Printf("Error: VAULT Can't read value, %s", err)
	}
	
	pemMap := secretValues.Data["data"].(map[string]interface{})

	for propName, propValue := range pemMap {
		if propName == v.certificationKeyFile {
			return []byte(propValue.(string))
		}
	}
	return []byte("")
}

func (v VaultPEMReader) readCaCertificatePEM() []byte {
	client, err := vc.NewClient(&vc.Config{
		Address: v.certificationURL,
	})

	if err != nil {
		log.Printf("Error: VAULT Can't create client, %s", err)
	}

	client.SetToken(v.certificationToken)

	keyname := v.certificationPath
	secretValues, err := client.Logical().Read(keyname)
	if err != nil {
		log.Printf("Error: VAULT Can't read value, %s", err)
	}
	
	pemMap := secretValues.Data["data"].(map[string]interface{})

	for propName, propValue := range pemMap {
		if propName == v.certificationCaCertFile {
			return []byte(propValue.(string))
		}
	}
	return []byte("")
}

func (v VaultPEMReader) readVereignCaCertificatePEM() []byte {
	client, err := vc.NewClient(&vc.Config{
		Address: v.certificationURL,
	})

	if err != nil {
		log.Printf("Error: VAULT Can't create client, %s", err)
	}

	client.SetToken(v.certificationToken)

	keyname := v.certificationPath
	secretValues, err := client.Logical().Read(keyname)
	if err != nil {
		log.Printf("Error: VAULT Can't read value, %s", err)
	}
	
	pemMap := secretValues.Data["data"].(map[string]interface{})

	for propName, propValue := range pemMap {
		if propName == v.certificationVereignCertFile {
			return []byte(propValue.(string))
		}
	}
	return []byte("")
}

func (v VaultPEMReader) readVereignCaKeyPEM() []byte {
	client, err := vc.NewClient(&vc.Config{
		Address: v.certificationURL,
	})

	if err != nil {
		log.Printf("Error: VAULT Can't create client, %s", err)
	}

	client.SetToken(v.certificationToken)

	keyname := v.certificationPath
	secretValues, err := client.Logical().Read(keyname)
	if err != nil {
		log.Printf("Error: VAULT Can't read value, %s", err)
	}
	
	pemMap := secretValues.Data["data"].(map[string]interface{})

	for propName, propValue := range pemMap {
		if propName == v.certificationVereignKeyFile {
			return []byte(propValue.(string))
		}
	}
	return []byte("")
}