429247f407
* [COMPLIANCE] Update Copyright and License Headers * chore: make gen to generate files with copyright headers * chore: update missed copyright headers --------- Co-authored-by: hashicorp-copywrite[bot] <110428419+hashicorp-copywrite[bot]@users.noreply.github.com> Co-authored-by: Justin Nguyen <justin.nguyen@hashicorp.com>
63 lines
1.9 KiB
Go
63 lines
1.9 KiB
Go
// Copyright IBM Corp. 2020, 2025
|
|
// SPDX-License-Identifier: BUSL-1.1
|
|
|
|
package ldap
|
|
|
|
import (
|
|
"bytes"
|
|
"context"
|
|
"crypto/x509"
|
|
"encoding/pem"
|
|
"fmt"
|
|
|
|
"github.com/hashicorp/boundary/internal/errors"
|
|
)
|
|
|
|
// EncodeCertificates will encode a number of x509 certificates to PEMs.
|
|
func EncodeCertificates(ctx context.Context, certs ...*x509.Certificate) ([]string, error) {
|
|
const op = "ldap.EncodeCertificates"
|
|
if len(certs) == 0 {
|
|
return nil, errors.New(ctx, errors.InvalidParameter, op, "no certs provided")
|
|
}
|
|
var pems []string
|
|
for _, cert := range certs {
|
|
if cert == nil {
|
|
return nil, errors.New(ctx, errors.InvalidParameter, op, "nil cert")
|
|
}
|
|
var buffer bytes.Buffer
|
|
err := pem.Encode(&buffer, &pem.Block{
|
|
Type: "CERTIFICATE",
|
|
Bytes: cert.Raw,
|
|
})
|
|
if err != nil {
|
|
return nil, errors.New(ctx, errors.InvalidParameter, op, "failed to encode cert: "+err.Error(), errors.WithWrap(err))
|
|
}
|
|
pems = append(pems, buffer.String())
|
|
}
|
|
return pems, nil
|
|
}
|
|
|
|
// ParseCertificates will parse a number of certificates PEMs to x509s.
|
|
func ParseCertificates(ctx context.Context, pems ...string) ([]*x509.Certificate, error) {
|
|
const op = "ldap.ParseCertificates"
|
|
if len(pems) == 0 {
|
|
return nil, errors.New(ctx, errors.InvalidParameter, op, "no PEMs provided")
|
|
}
|
|
var certs []*x509.Certificate
|
|
for _, p := range pems {
|
|
if p == "" {
|
|
return nil, errors.New(ctx, errors.InvalidParameter, op, "empty certificate PEM")
|
|
}
|
|
block, _ := pem.Decode([]byte(p))
|
|
if block == nil {
|
|
return nil, errors.New(ctx, errors.InvalidParameter, op, "failed to parse certificate: invalid PEM encoding")
|
|
}
|
|
cert, err := x509.ParseCertificate(block.Bytes)
|
|
if err != nil {
|
|
return nil, errors.New(ctx, errors.InvalidParameter, op, fmt.Sprintf("failed to parse certificate: invalid block: %s", err.Error()), errors.WithWrap(err))
|
|
}
|
|
certs = append(certs, cert)
|
|
}
|
|
return certs, nil
|
|
}
|