- adding the certs easying testing, along with the cfssl files (#47)

- adding a certs stage to the Makefile to generate the certs

.gitignore

@@ -2,7 +2,6 @@
 .idea/
 bin/
 release/
-tests/
 cover.html
 cover.out
 

Makefile

@@ -43,6 +43,17 @@ docker-push:
 	@echo "--> Pushing the docker images to the registry"
 	${SUDO} docker push ${REGISTRY}/${AUTHOR}/${NAME}:${VERSION}
 
+certs:
+	@echo "--> Generating the root CA"
+	@cfssl gencert -initca tests/ca-csr.json | cfssljson -bare tests/ca
+	@echo "--> Generating the Test Certs"
+	cfssl gencert \
+		-ca=tests/ca.pem \
+		-ca-key=tests/ca-key.pem \
+		-config=tests/ca-config.json \
+		-profile=server \
+		tests/proxy-csr.json | cfssljson -bare tests/proxy
+
 release: static
 	mkdir -p release
 	gzip -c bin/${NAME} > release/${NAME}_${VERSION}_linux_${HARDWARE}.gz

tests/ca-config.json

+{
+  "signing": {
+    "default": {
+      "expiry": "17520h"
+    },
+    "profiles": {
+      "server": {
+        "usages": [
+          "signing",
+          "key encipherment",
+          "server auth"
+        ],
+        "expiry": "17520h"
+      },
+      "client": {
+        "usages": [
+          "signing",
+          "key encipherment",
+          "client auth"
+        ],
+        "expiry": "17520h"
+      }
+    }
+  }
+}

tests/ca-csr.json

+{
+  "CN": "Keycloak Proxy",
+  "CA": {
+    "expiry": "87600h"
+  },
+  "key": {
+    "algo": "rsa",
+    "size": 2048
+  },
+  "names": [
+    {
+      "C": "GB",
+      "L": "London",
+      "O": "Keycloak Proxy",
+      "OU": "Dev Environment",
+      "ST": "London"
+    }
+  ]
+}

tests/ca-key.pem

+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

tests/ca.pem

+-----BEGIN CERTIFICATE-----
+MIID6jCCAtKgAwIBAgIUAi2xiTeqKlnxLNnrGSj2vgkJzNUwDQYJKoZIhvcNAQEL
+BQAwezELMAkGA1UEBhMCR0IxDzANBgNVBAgTBkxvbmRvbjEPMA0GA1UEBxMGTG9u
+ZG9uMRcwFQYDVQQKEw5LZXljbG9hayBQcm94eTEYMBYGA1UECxMPRGV2IEVudmly
+b25tZW50MRcwFQYDVQQDEw5LZXljbG9hayBQcm94eTAeFw0xNjA0MjMwOTE1MDBa
+Fw0yNjA0MjEwOTE1MDBaMHsxCzAJBgNVBAYTAkdCMQ8wDQYDVQQIEwZMb25kb24x
+DzANBgNVBAcTBkxvbmRvbjEXMBUGA1UEChMOS2V5Y2xvYWsgUHJveHkxGDAWBgNV
+BAsTD0RldiBFbnZpcm9ubWVudDEXMBUGA1UEAxMOS2V5Y2xvYWsgUHJveHkwggEi
+MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCl5rniIrJD4UR8y/clS90wTTE
+ZMsbuoWQ2BrfEWHBVdXFzwLaCiUQQz9iQ93yawU2FpcaKDuO/hsciiljBOu++3wZ
+mKuU/OHmOnVE7ucv39RjzhPfW0wN5QPYy0IVCGLH1SedjexjRYXNSirqHDEtsuSU
+x40+OS9YF+C2HxgLFk1xr3BF6M15gqIveTFwskeV0yRiSf2RtPUVQfbb1XwVVStY
+ho6qLs2JMs3AWx5jnQS5malTamwOVFGw+9wMm+PM9Ui76aQCMtNNMUdpACSKH1vi
+jx5d7VcLa8vAajgqfT0A1sPA3r9953o3xJ7EMNnOAgWh6iCWbM/+F1arCgjpAgMB
+AAGjZjBkMA4GA1UdDwEB/wQEAwIBBjASBgNVHRMBAf8ECDAGAQH/AgECMB0GA1Ud
+DgQWBBRVovC8Fu3J1oxaUX2cQyroP+vArTAfBgNVHSMEGDAWgBRVovC8Fu3J1oxa
+UX2cQyroP+vArTANBgkqhkiG9w0BAQsFAAOCAQEAb8nttca4vZYgiYxtwfM6HWRH
+dQbGNfEX5nEz84lHmmP46oItfh7xxbD2boDRUa/FQ8nDw9bG8FZWuxYF4beka097
+auHbTTF1RmbyRHD4auHJAOO0RLCe9xQTGI4hAqTq4L7Zpral/4Ss7q1V122I6OB3
+0pgNM+9Cqrlur6JSociGdEv6l0GBE8jjRSOFQaBYWq46sb1T8IfxUpcT/UTyTceQ
+lW/vDF4V4CtrB4Rn01CTN4zcG06bo7m8idxnKoSD51PvXioVoX44g3j5PJvvOdH0
+7yMcfENwj3QL98KNeUXzyDqjL8krmfH0+vNyoI+fhfsNEcJN9NSrD6RUtm8zcg==
+-----END CERTIFICATE-----

tests/proxy-csr.json

+{
+  "CN": "*.localhost",
+  "hosts": [
+    "localhost",
+    "127.0.0.1"
+  ],
+  "key": {
+   "algo": "rsa",
+   "size": 2048
+  },
+  "names": [
+    {
+      "C": "GB",
+      "L": "London",
+      "O": "Keycloay Proxy",
+      "OU": "IT",
+      "ST": "London"
+    }
+  ]
+}

tests/proxy-key.pem

+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

tests/proxy.pem

+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----