shadowdaoandClaude Sonnet 5.5
962d708fdd
Rename root, api and sdk module paths (imports, go.mod, go_package, ldflags, build scripts, buf configs) and regenerate protobuf/gateway code with the project's pinned toolchain. Wire identifiers unchanged. api gets a local replace for sdk; root/api/sdk require v0.1.0. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
63 lines
1.9 KiB
Go
63 lines
1.9 KiB
Go
// Copyright IBM Corp. 2020, 2026
|
|
// SPDX-License-Identifier: BUSL-1.1
|
|
|
|
package ldap
|
|
|
|
import (
|
|
"bytes"
|
|
"context"
|
|
"crypto/x509"
|
|
"encoding/pem"
|
|
"fmt"
|
|
|
|
"repo.anhonesthost.net/CyberCoveLLC/threshold/internal/errors"
|
|
)
|
|
|
|
// EncodeCertificates will encode a number of x509 certificates to PEMs.
|
|
func EncodeCertificates(ctx context.Context, certs ...*x509.Certificate) ([]string, error) {
|
|
const op = "ldap.EncodeCertificates"
|
|
if len(certs) == 0 {
|
|
return nil, errors.New(ctx, errors.InvalidParameter, op, "no certs provided")
|
|
}
|
|
var pems []string
|
|
for _, cert := range certs {
|
|
if cert == nil {
|
|
return nil, errors.New(ctx, errors.InvalidParameter, op, "nil cert")
|
|
}
|
|
var buffer bytes.Buffer
|
|
err := pem.Encode(&buffer, &pem.Block{
|
|
Type: "CERTIFICATE",
|
|
Bytes: cert.Raw,
|
|
})
|
|
if err != nil {
|
|
return nil, errors.New(ctx, errors.InvalidParameter, op, "failed to encode cert: "+err.Error(), errors.WithWrap(err))
|
|
}
|
|
pems = append(pems, buffer.String())
|
|
}
|
|
return pems, nil
|
|
}
|
|
|
|
// ParseCertificates will parse a number of certificates PEMs to x509s.
|
|
func ParseCertificates(ctx context.Context, pems ...string) ([]*x509.Certificate, error) {
|
|
const op = "ldap.ParseCertificates"
|
|
if len(pems) == 0 {
|
|
return nil, errors.New(ctx, errors.InvalidParameter, op, "no PEMs provided")
|
|
}
|
|
var certs []*x509.Certificate
|
|
for _, p := range pems {
|
|
if p == "" {
|
|
return nil, errors.New(ctx, errors.InvalidParameter, op, "empty certificate PEM")
|
|
}
|
|
block, _ := pem.Decode([]byte(p))
|
|
if block == nil {
|
|
return nil, errors.New(ctx, errors.InvalidParameter, op, "failed to parse certificate: invalid PEM encoding")
|
|
}
|
|
cert, err := x509.ParseCertificate(block.Bytes)
|
|
if err != nil {
|
|
return nil, errors.New(ctx, errors.InvalidParameter, op, fmt.Sprintf("failed to parse certificate: invalid block: %s", err.Error()), errors.WithWrap(err))
|
|
}
|
|
certs = append(certs, cert)
|
|
}
|
|
return certs, nil
|
|
}
|