feat: implement main application with example usage
- Add main application demonstrating certificate management - Include example of creating root and intermediate CAs - Demonstrate certificate generation for enterprise use cases - Add example certificate creation for AdGuard and Paperless NGX - Implement proper database initialization and setup - Include comprehensive logging and error handling - Add helper functions for time management and certificate creation
This commit is contained in:
Björn Benouarets
206
main.go
Normal file
206
main.go
Normal file
@@ -0,0 +1,206 @@
|
|||||||
|
package main
|
||||||
|
|
||||||
|
import (
|
||||||
|
"log"
|
||||||
|
"net"
|
||||||
|
"time"
|
||||||
|
|
||||||
|
"git.secnex.io/secnex/certman/certificate"
|
||||||
|
"git.secnex.io/secnex/certman/database"
|
||||||
|
"git.secnex.io/secnex/certman/models"
|
||||||
|
"git.secnex.io/secnex/certman/repositories"
|
||||||
|
"github.com/google/uuid"
|
||||||
|
)
|
||||||
|
|
||||||
|
func defaultData() (*models.User, *models.Organization, error) {
|
||||||
|
userRepository := repositories.NewUserRepository(database.GetDB())
|
||||||
|
adminUser := models.User{
|
||||||
|
Username: "admin",
|
||||||
|
Email: "admin@secnex.io",
|
||||||
|
Password: "password",
|
||||||
|
}
|
||||||
|
createdUser, err := userRepository.Create(adminUser)
|
||||||
|
if err != nil {
|
||||||
|
log.Printf("❌ Failed to create admin user: %v", err)
|
||||||
|
return nil, nil, err
|
||||||
|
}
|
||||||
|
|
||||||
|
log.Println("✅ Admin user created.")
|
||||||
|
|
||||||
|
organizationRepository := repositories.NewOrganizationRepository(database.GetDB())
|
||||||
|
createdOrganization, err := organizationRepository.Create(models.Organization{
|
||||||
|
Name: "SecNex",
|
||||||
|
Description: "SecNex",
|
||||||
|
Address: "In der Bellersbach 12",
|
||||||
|
City: "Altenkirchen",
|
||||||
|
State: "Rheinland-Pfalz",
|
||||||
|
Country: "DE",
|
||||||
|
Email: "info@secnex.io",
|
||||||
|
Website: "secnex.io",
|
||||||
|
CreatedBy: createdUser.ID,
|
||||||
|
UpdatedBy: createdUser.ID,
|
||||||
|
})
|
||||||
|
if err != nil {
|
||||||
|
log.Printf("❌ Failed to create default organization: %v", err)
|
||||||
|
return nil, nil, err
|
||||||
|
}
|
||||||
|
|
||||||
|
log.Println("✅ Default organization created.")
|
||||||
|
|
||||||
|
return &createdUser, &createdOrganization, nil
|
||||||
|
}
|
||||||
|
|
||||||
|
func defaultCA(createdOrganization *models.Organization) (*models.CertificateAuthority, *models.CertificateAuthority, error) {
|
||||||
|
ca := certificate.NewCertificateAuthorityService(database.GetDB(), "data/certs/ca", "data/private/ca")
|
||||||
|
reqRootCA := certificate.CreateRootCARequest{
|
||||||
|
Name: "SecNex Enterprise Root CA",
|
||||||
|
CommonName: "SecNex Enterprise Root CA",
|
||||||
|
Organization: "SecNex",
|
||||||
|
Country: "DE",
|
||||||
|
OrganizationID: createdOrganization.ID,
|
||||||
|
ValidityYears: 50, // 50 Jahre für Enterprise-Produktion
|
||||||
|
}
|
||||||
|
rootCA, err := ca.CreateRootCA(&reqRootCA)
|
||||||
|
if err != nil {
|
||||||
|
log.Printf("❌ Failed to create default root CA: %v", err)
|
||||||
|
return nil, nil, err
|
||||||
|
}
|
||||||
|
|
||||||
|
reqIntermediateCA := certificate.CreateIntermediateCARequest{
|
||||||
|
Name: "SecNex Enterprise Intermediate CA #1",
|
||||||
|
CommonName: "SecNex Enterprise Intermediate CA #1",
|
||||||
|
Organization: "SecNex",
|
||||||
|
Country: "DE",
|
||||||
|
OrganizationID: createdOrganization.ID,
|
||||||
|
ParentCAID: rootCA.ID,
|
||||||
|
ValidityYears: 30, // 30 Jahre für Enterprise-Produktion
|
||||||
|
}
|
||||||
|
intermediateCA, err := ca.CreateIntermediateCA(&reqIntermediateCA)
|
||||||
|
if err != nil {
|
||||||
|
log.Printf("❌ Failed to create default intermediate CA: %v", err)
|
||||||
|
return nil, nil, err
|
||||||
|
}
|
||||||
|
return rootCA, intermediateCA, nil
|
||||||
|
}
|
||||||
|
|
||||||
|
func createNewCertificate(intermediateCAID string, req certificate.CreateCertificateRequest) (*models.Certificate, error) {
|
||||||
|
caService := certificate.NewCertificateAuthorityService(database.GetDB(), "data/certs/ca", "data/private/ca")
|
||||||
|
certService := certificate.NewCertificateService(database.GetDB(), "data/certs", "data/private", caService)
|
||||||
|
|
||||||
|
cert, err := certService.CreateCertificate(&req)
|
||||||
|
if err != nil {
|
||||||
|
log.Printf("❌ Failed to create new certificate: %v", err)
|
||||||
|
return nil, err
|
||||||
|
}
|
||||||
|
|
||||||
|
return cert, nil
|
||||||
|
}
|
||||||
|
|
||||||
|
func createAdGuardCertificate(intermediateCA *models.CertificateAuthority) (*models.Certificate, error) {
|
||||||
|
caService := certificate.NewCertificateAuthorityService(database.GetDB(), "data/certs/ca", "data/private/ca")
|
||||||
|
certService := certificate.NewCertificateService(database.GetDB(), "data/certs", "data/private", caService)
|
||||||
|
|
||||||
|
// Create enterprise web certificate request for AdGuard
|
||||||
|
req := &certificate.CreateCertificateRequest{
|
||||||
|
Name: "AdGuard Certificate",
|
||||||
|
Description: "Enterprise HTTPS certificate for AdGuard DNS server",
|
||||||
|
CommonName: "adguard.secnex.internal",
|
||||||
|
Organization: "SecNex",
|
||||||
|
OrganizationalUnit: "Internal",
|
||||||
|
Country: "DE",
|
||||||
|
State: "Rheinland-Pfalz",
|
||||||
|
Locality: "Altenkirchen",
|
||||||
|
Street: "In der Bellersbach 12",
|
||||||
|
Address: "In der Bellersbach 12, 57610 Altenkirchen",
|
||||||
|
PostalCode: "57610",
|
||||||
|
Email: "admin@secnex.io",
|
||||||
|
Type: models.CertificateTypeWeb,
|
||||||
|
CertificateAuthorityID: intermediateCA.ID,
|
||||||
|
NotAfter: timePtr(time.Now().AddDate(2, 0, 0)), // 2 Jahre für Enterprise
|
||||||
|
DNSNames: []string{"adguard.secnex.internal", "adguard.cloud.lab", "*.secnex.internal"},
|
||||||
|
IPAddresses: []net.IP{net.ParseIP("10.2.2.3")},
|
||||||
|
KeyType: "rsa",
|
||||||
|
KeySize: 4096, // 4096 Bit für Enterprise-Sicherheit
|
||||||
|
ValidityYears: 1, // 2 Jahre für Enterprise-Produktion
|
||||||
|
}
|
||||||
|
|
||||||
|
cert, err := certService.CreateCertificate(req)
|
||||||
|
if err != nil {
|
||||||
|
log.Printf("❌ Failed to create AdGuard certificate: %v", err)
|
||||||
|
return nil, err
|
||||||
|
}
|
||||||
|
|
||||||
|
log.Println("✅ AdGuard web certificate created.")
|
||||||
|
log.Println("------------------------------------")
|
||||||
|
log.Println("🔎 Certificate ID:", cert.ID)
|
||||||
|
log.Println("🔎 Certificate Name:", cert.Name)
|
||||||
|
log.Println("🔎 Common Name:", cert.AttributeCommonName)
|
||||||
|
log.Println("🔎 Serial Number:", cert.SerialNumber)
|
||||||
|
log.Println("🔎 Valid From:", cert.AttributeNotBefore.Format("2006-01-02 15:04:05"))
|
||||||
|
log.Println("🔎 Valid Until:", cert.AttributeNotAfter.Format("2006-01-02 15:04:05"))
|
||||||
|
log.Println("🔎 Certificate Type:", cert.Type)
|
||||||
|
log.Println("🔎 Status:", cert.Status)
|
||||||
|
log.Println("🔎 Certificate File ID:", cert.FileID)
|
||||||
|
log.Println("🔎 Private Key File ID:", cert.PrivateKeyID)
|
||||||
|
log.Println("------------------------------------")
|
||||||
|
|
||||||
|
return cert, nil
|
||||||
|
}
|
||||||
|
|
||||||
|
func main() {
|
||||||
|
// Connect to database
|
||||||
|
database.Connect()
|
||||||
|
|
||||||
|
intermediateID := "3786b6af-39d4-4c10-a9d6-7f3603ecaf6b"
|
||||||
|
|
||||||
|
req := &certificate.CreateCertificateRequest{
|
||||||
|
Name: "Paperless NGX Certificate",
|
||||||
|
Description: "Paperless NGX Certificate",
|
||||||
|
CommonName: "paperless.services.internal",
|
||||||
|
Organization: "SecNex",
|
||||||
|
OrganizationalUnit: "Internal",
|
||||||
|
Country: "DE",
|
||||||
|
State: "Rheinland-Pfalz",
|
||||||
|
Locality: "Altenkirchen",
|
||||||
|
Street: "In der Bellersbach 12",
|
||||||
|
Address: "In der Bellersbach 12, 57610 Altenkirchen",
|
||||||
|
PostalCode: "57610",
|
||||||
|
Email: "admin@secnex.io",
|
||||||
|
Type: models.CertificateTypeWeb,
|
||||||
|
CertificateAuthorityID: uuid.MustParse(intermediateID),
|
||||||
|
NotAfter: timePtr(time.Now().AddDate(2, 0, 0)), // 2 Jahre für Enterprise
|
||||||
|
DNSNames: []string{"paperless.services.internal", "*.paperless.services.internal"},
|
||||||
|
IPAddresses: []net.IP{net.ParseIP("10.2.2.6")},
|
||||||
|
KeyType: "rsa",
|
||||||
|
KeySize: 4096, // 4096 Bit für Enterprise-Sicherheit
|
||||||
|
ValidityYears: 1, // 2 Jahre für Enterprise-Produktion
|
||||||
|
}
|
||||||
|
|
||||||
|
cert, err := createNewCertificate(
|
||||||
|
intermediateID,
|
||||||
|
*req,
|
||||||
|
)
|
||||||
|
if err != nil {
|
||||||
|
log.Printf("❌ Failed to create BetterBahn certificate: %v", err)
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
log.Println("✅ BetterBahn certificate created.")
|
||||||
|
log.Println("------------------------------------")
|
||||||
|
log.Println("🔎 Certificate ID:", cert.ID)
|
||||||
|
log.Println("🔎 Certificate Name:", cert.Name)
|
||||||
|
log.Println("🔎 Common Name:", cert.AttributeCommonName)
|
||||||
|
log.Println("🔎 Serial Number:", cert.SerialNumber)
|
||||||
|
log.Println("🔎 Valid From:", cert.AttributeNotBefore.Format("2006-01-02 15:04:05"))
|
||||||
|
log.Println("🔎 Valid Until:", cert.AttributeNotAfter.Format("2006-01-02 15:04:05"))
|
||||||
|
log.Println("🔎 Certificate Type:", cert.Type)
|
||||||
|
log.Println("🔎 Status:", cert.Status)
|
||||||
|
log.Println("🔎 Certificate File ID:", cert.FileID)
|
||||||
|
log.Println("🔎 Private Key File ID:", cert.PrivateKeyID)
|
||||||
|
log.Println("------------------------------------")
|
||||||
|
}
|
||||||
|
|
||||||
|
// Helper function to create time pointer
|
||||||
|
func timePtr(t time.Time) *time.Time {
|
||||||
|
return &t
|
||||||
|
}
|
||||||
Reference in New Issue
Block a user