mirror of
https://github.com/strukturag/nextcloud-spreed-signaling
synced 2024-05-10 17:46:33 +02:00
8704bc3b5b
Depending on filesystem time resolution, the modified certificates could have the same timestamp in tests, causing the reload to fail.
119 lines
2.9 KiB
Go
119 lines
2.9 KiB
Go
/**
|
|
* Standalone signaling server for the Nextcloud Spreed app.
|
|
* Copyright (C) 2022 struktur AG
|
|
*
|
|
* @author Joachim Bauch <bauch@struktur.de>
|
|
*
|
|
* @license GNU AGPL version 3 or any later version
|
|
*
|
|
* This program is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Affero General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Affero General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Affero General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
package signaling
|
|
|
|
import (
|
|
"crypto/rand"
|
|
"crypto/rsa"
|
|
"crypto/x509"
|
|
"crypto/x509/pkix"
|
|
"encoding/pem"
|
|
"io/fs"
|
|
"math/big"
|
|
"net"
|
|
"os"
|
|
"testing"
|
|
"time"
|
|
)
|
|
|
|
func GenerateSelfSignedCertificateForTesting(t *testing.T, bits int, organization string, key *rsa.PrivateKey) []byte {
|
|
template := x509.Certificate{
|
|
SerialNumber: big.NewInt(1),
|
|
Subject: pkix.Name{
|
|
Organization: []string{organization},
|
|
},
|
|
NotBefore: time.Now(),
|
|
NotAfter: time.Now().Add(time.Hour * 24 * 180),
|
|
|
|
KeyUsage: x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature,
|
|
ExtKeyUsage: []x509.ExtKeyUsage{
|
|
x509.ExtKeyUsageClientAuth,
|
|
x509.ExtKeyUsageServerAuth,
|
|
},
|
|
BasicConstraintsValid: true,
|
|
IPAddresses: []net.IP{net.ParseIP("127.0.0.1")},
|
|
}
|
|
|
|
data, err := x509.CreateCertificate(rand.Reader, &template, &template, &key.PublicKey, key)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
|
|
data = pem.EncodeToMemory(&pem.Block{
|
|
Type: "CERTIFICATE",
|
|
Bytes: data,
|
|
})
|
|
return data
|
|
}
|
|
|
|
func WritePrivateKey(key *rsa.PrivateKey, filename string) error {
|
|
data := pem.EncodeToMemory(&pem.Block{
|
|
Type: "RSA PRIVATE KEY",
|
|
Bytes: x509.MarshalPKCS1PrivateKey(key),
|
|
})
|
|
|
|
return os.WriteFile(filename, data, 0600)
|
|
}
|
|
|
|
func WritePublicKey(key *rsa.PublicKey, filename string) error {
|
|
data, err := x509.MarshalPKIXPublicKey(key)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
data = pem.EncodeToMemory(&pem.Block{
|
|
Type: "RSA PUBLIC KEY",
|
|
Bytes: data,
|
|
})
|
|
|
|
return os.WriteFile(filename, data, 0755)
|
|
}
|
|
|
|
func replaceFile(t *testing.T, filename string, data []byte, perm fs.FileMode) {
|
|
t.Helper()
|
|
oldStat, err := os.Stat(filename)
|
|
if err != nil {
|
|
t.Fatalf("can't stat old file %s: %s", filename, err)
|
|
return
|
|
}
|
|
|
|
for {
|
|
if err := os.WriteFile(filename, data, perm); err != nil {
|
|
t.Fatalf("can't write file %s: %s", filename, err)
|
|
return
|
|
}
|
|
|
|
newStat, err := os.Stat(filename)
|
|
if err != nil {
|
|
t.Fatalf("can't stat new file %s: %s", filename, err)
|
|
return
|
|
}
|
|
|
|
// We need different modification times.
|
|
if !newStat.ModTime().Equal(oldStat.ModTime()) {
|
|
break
|
|
}
|
|
|
|
time.Sleep(time.Millisecond)
|
|
}
|
|
}
|