// GenerateTestCerts generate certs for testing or hacking
func GenerateTestCerts() (*Certs, error) {
priv, err := rsa.GenerateKey(rand.Reader, 2048)
if err != nil {
return nil, err
}
notBefore := time.Now()
notAfter := notBefore.Add(365 * 24 * time.Hour)
serialNumberLimit := new(big.Int).Lsh(big.NewInt(1), 128)
serialNumber, err := rand.Int(rand.Reader, serialNumberLimit)
if err != nil {
return nil, err
}
template := x509.Certificate{
SerialNumber: serialNumber,
Subject: pkix.Name{
Organization: []string{"Acme Co"},
},
NotBefore: notBefore,
NotAfter: notAfter,
KeyUsage: x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature,
ExtKeyUsage: []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
BasicConstraintsValid: true,
}
template.DNSNames = append(template.DNSNames, "example.com")
derBytes, err := x509.CreateCertificate(rand.Reader, &template, &template, &priv.PublicKey, priv)
if err != nil {
return nil, err
}
var cbuf bytes.Buffer
pem.Encode(&cbuf, &pem.Block{Type: "CERTIFICATE", Bytes: derBytes})
var kbuf bytes.Buffer
pem.Encode(&kbuf, &pem.Block{Type: "RSA PRIVATE KEY", Bytes: x509.MarshalPKCS1PrivateKey(priv)})
privateKey, err := crypto.ParseRSAPrivateKeyFromPEM(kbuf.Bytes())
if err != nil {
return nil, err
}
publicKey, err := crypto.ParseRSAPublicKeyFromPEM(cbuf.Bytes())
if err != nil {
return nil, err
}
return &Certs{PrivateKey: privateKey, PublicKey: publicKey}, nil
}
// UnmarshalJSON is the custom unmarshaler for GoogleServiceAccountCredential.
// Private key is parsed from PEM format.
func (c *GoogleServiceAccountCredential) UnmarshalJSON(data []byte) error {
var aux struct {
ProjectID string `json:"project_id"`
PrivateKey string `json:"private_key"`
ClientEmail string `json:"client_email"`
}
if err := json.Unmarshal(data, &aux); err != nil {
return err
}
privKey, err := crypto.ParseRSAPrivateKeyFromPEM([]byte(aux.PrivateKey))
if err != nil {
return err
}
c.PrivateKey = privKey
c.ProjectID = aux.ProjectID
c.ClientEmail = aux.ClientEmail
return nil
}