forked from TrueCloudLab/certificates
60 lines
1.6 KiB
Go
60 lines
1.6 KiB
Go
package cas
|
|
|
|
import (
|
|
"context"
|
|
"strings"
|
|
|
|
"github.com/pkg/errors"
|
|
"github.com/smallstep/certificates/cas/apiv1"
|
|
"github.com/smallstep/certificates/cas/softcas"
|
|
)
|
|
|
|
// CertificateAuthorityService is the interface implemented by all the CAS.
|
|
type CertificateAuthorityService = apiv1.CertificateAuthorityService
|
|
|
|
// CertificateAuthorityCreator is the interface implemented by all CAS that can create a new authority.
|
|
type CertificateAuthorityCreator = apiv1.CertificateAuthorityCreator
|
|
|
|
// New creates a new CertificateAuthorityService using the given options.
|
|
func New(ctx context.Context, opts apiv1.Options) (CertificateAuthorityService, error) {
|
|
if err := opts.Validate(); err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
t := apiv1.Type(strings.ToLower(opts.Type))
|
|
if t == apiv1.DefaultCAS {
|
|
t = apiv1.SoftCAS
|
|
}
|
|
|
|
fn, ok := apiv1.LoadCertificateAuthorityServiceNewFunc(t)
|
|
if !ok {
|
|
return nil, errors.Errorf("unsupported cas type '%s'", t)
|
|
}
|
|
return fn(ctx, opts)
|
|
}
|
|
|
|
// NewCreator creates a new CertificateAuthorityCreator using the given options.
|
|
func NewCreator(ctx context.Context, opts apiv1.Options) (CertificateAuthorityCreator, error) {
|
|
t := apiv1.Type(strings.ToLower(opts.Type))
|
|
if t == apiv1.DefaultCAS {
|
|
t = apiv1.SoftCAS
|
|
}
|
|
if t == apiv1.SoftCAS {
|
|
return &softcas.SoftCAS{
|
|
KeyManager: opts.KeyManager,
|
|
}, nil
|
|
}
|
|
|
|
svc, err := New(ctx, opts)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
creator, ok := svc.(CertificateAuthorityCreator)
|
|
if !ok {
|
|
|
|
return nil, errors.Errorf("cas type '%s' does not implements CertificateAuthorityCreator", t)
|
|
}
|
|
|
|
return creator, nil
|
|
}
|