36 lines
973 B
Go
36 lines
973 B
Go
|
package leafcert
|
||
|
|
|
||
|
|
import (
|
||
|
|
"context"
|
||
|
|
|
||
|
|
"github.com/hashicorp/consul/agent/structs"
|
||
|
|
)
|
||
|
|
|
||
|
|
// NetRPC is an interface that an NetRPC client must implement. This is a helper
|
||
|
|
// interface that is implemented by the agent delegate so that Type
|
||
|
|
// implementations can request NetRPC access.
|
||
|
|
type NetRPC interface {
|
||
|
|
RPC(ctx context.Context, method string, args any, reply any) error
|
||
|
|
}
|
||
|
|
|
||
|
|
// NewNetRPCCertSigner returns a CertSigner that uses net-rpc to sign certs.
|
||
|
|
func NewNetRPCCertSigner(netRPC NetRPC) CertSigner {
|
||
|
|
return &netRPCCertSigner{netRPC: netRPC}
|
||
|
|
}
|
||
|
|
|
||
|
|
type netRPCCertSigner struct {
|
||
|
|
// NetRPC is an RPC client for remote cert signing requests.
|
||
|
|
netRPC NetRPC
|
||
|
|
}
|
||
|
|
|
||
|
|
var _ CertSigner = (*netRPCCertSigner)(nil)
|
||
|
|
|
||
|
|
func (s *netRPCCertSigner) SignCert(ctx context.Context, args *structs.CASignRequest) (*structs.IssuedCert, error) {
|
||
|
|
var reply structs.IssuedCert
|
||
|
|
err := s.netRPC.RPC(ctx, "ConnectCA.Sign", args, &reply)
|
||
|
|
if err != nil {
|
||
|
|
return nil, err
|
||
|
|
}
|
||
|
|
return &reply, nil
|
||
|
|
}
|