mirror of
https://github.com/netbirdio/netbird.git
synced 2024-11-22 16:13:31 +01:00
1f29975737
* feature: basic auth0 support * refactor: improve auth flow * refactor: extract HttpServer config * feature: merge HTTP API layer with Let's Encrypt
31 lines
846 B
Go
31 lines
846 B
Go
package encryption
|
|
|
|
import (
|
|
log "github.com/sirupsen/logrus"
|
|
"golang.org/x/crypto/acme/autocert"
|
|
"os"
|
|
"path/filepath"
|
|
)
|
|
|
|
// CreateCertManager wraps common logic of generating Let's encrypt certificate.
|
|
func CreateCertManager(datadir string, letsencryptDomain string) *autocert.Manager {
|
|
certDir := filepath.Join(datadir, "letsencrypt")
|
|
|
|
if _, err := os.Stat(certDir); os.IsNotExist(err) {
|
|
err = os.MkdirAll(certDir, os.ModeDir)
|
|
if err != nil {
|
|
log.Fatalf("failed creating Let's encrypt certdir: %s: %v", certDir, err)
|
|
}
|
|
}
|
|
|
|
log.Infof("running with Let's encrypt with domain %s. Cert will be stored in %s", letsencryptDomain, certDir)
|
|
|
|
certManager := &autocert.Manager{
|
|
Prompt: autocert.AcceptTOS,
|
|
Cache: autocert.DirCache(certDir),
|
|
HostPolicy: autocert.HostWhitelist(letsencryptDomain),
|
|
}
|
|
|
|
return certManager
|
|
}
|