open-nomad/command/tls_ca_info.go

95 lines
2.1 KiB
Go

// Copyright (c) HashiCorp, Inc.
// SPDX-License-Identifier: MPL-2.0
package command
import (
"fmt"
"os"
"strings"
"github.com/hashicorp/nomad/helper/tlsutil"
"github.com/posener/complete"
"github.com/ryanuber/columnize"
)
type TLSCAInfoCommand struct {
Meta
}
func (c *TLSCAInfoCommand) Help() string {
helpText := `
Usage: nomad tls ca info <CA file>
Show information about a certificate authority.
`
return strings.TrimSpace(helpText)
}
func (c *TLSCAInfoCommand) AutocompleteFlags() complete.Flags {
return mergeAutocompleteFlags(c.Meta.AutocompleteFlags(FlagSetClient),
complete.Flags{})
}
func (c *TLSCAInfoCommand) AutocompleteArgs() complete.Predictor {
return complete.PredictOr(
complete.PredictFiles("*.pem"),
)
}
func (c *TLSCAInfoCommand) Synopsis() string {
return "Show certificate authority information"
}
func (c *TLSCAInfoCommand) Name() string { return "tls cert info" }
func (c *TLSCAInfoCommand) Run(args []string) int {
flags := c.Meta.FlagSet(c.Name(), FlagSetClient)
flags.Usage = func() { c.Ui.Output(c.Help()) }
if err := flags.Parse(args); err != nil {
return 1
}
// Check that we got no arguments
args = flags.Args()
if l := len(args); l < 0 || l > 1 {
c.Ui.Error("This command takes up to one argument")
c.Ui.Error(commandErrorText(c))
return 1
}
var certFile []byte
var err error
var file string
if len(args) == 0 {
c.Ui.Error(fmt.Sprintf("Error reading CA file: %v", err))
return 1
}
if len(args) == 1 {
file = args[0]
certFile, err = os.ReadFile(file)
if err != nil {
c.Ui.Error(fmt.Sprintf("Error reading CA file: %v", err))
return 1
}
}
certInfo, err := tlsutil.ParseCert(string(certFile))
if err != nil {
c.Ui.Error(err.Error())
return 1
}
// Format the certificate info
basic := []string{
fmt.Sprintf("Serial Number|%s", certInfo.SerialNumber),
fmt.Sprintf("Issuer CN|%s", certInfo.Issuer.CommonName),
fmt.Sprintf("Common Name|%s", certInfo.Subject),
fmt.Sprintf("Expiry Date|%s", certInfo.NotAfter),
fmt.Sprintf("Permitted DNS Domains|%s", certInfo.PermittedDNSDomains),
}
// Print out the information
c.Ui.Output(columnize.SimpleFormat(basic))
return 0
}