// Create a Program Public/Private key.
func CreateSigningKey(t tao.Tao) (*tao.Keys, []byte, error) {
self, err := t.GetTaoName()
k, err := tao.NewTemporaryKeys(tao.Signing)
if k == nil || err != nil {
return nil, nil, errors.New("Can't generate signing key")
}
publicString := strings.Replace(self.String(), "(", "", -1)
publicString = strings.Replace(publicString, ")", "", -1)
// publicString is now a canonicalized Tao Principal name
us := "US"
google := "Google"
details := tao.X509Details{
Country: &us,
Organization: &google,
CommonName: &publicString}
subjectname := tao.NewX509Name(&details)
derCert, err := k.SigningKey.CreateSelfSignedDER(subjectname)
if err != nil {
return nil, nil, errors.New("Can't self sign cert\n")
}
cert, err := x509.ParseCertificate(derCert)
if err != nil {
return nil, nil, err
}
// Construct statement: "ProgramKey (new key) speaksfor Principal Name"
// ToPrincipal retrieves key's Tao Principal Name.
k.Cert = cert
s := &auth.Speaksfor{
Delegate: k.SigningKey.ToPrincipal(),
Delegator: self}
if s == nil {
return nil, nil, errors.New("Can't produce speaksfor")
}
// Sign attestation statement
k.Delegation, err = t.Attest(&self, nil, nil, s)
if err != nil {
return nil, nil, err
}
_, _ = auth.UnmarshalForm(k.Delegation.SerializedStatement)
return k, derCert, nil
}
