Generate CA & Node certificates using a config yaml file

- Use the same argument structs used in create_ca & create_node commands in create_certs command
- Use reflection to build the argument string dynamically

README.md

@@ -56,6 +56,38 @@ Generating a certificate for an EventStoreDB node:
 ./es-gencert-cli create-node -ca-certificate ./es-ca/ca.crt -ca-key ./es-ca/ca.key -out ./node1 -ip-addresses 127.0.0.1,172.20.240.1 -dns-names localhost,eventstore-node1.localhost.com
 ```
 
+Generating certificates using config file:
+```
+./es-gencert-cli create-certs --config-file ./certs.yml
+```
+
+An example config file:
+```yaml
+certificates:
+  ca-certs:
+    - out: "./root_ca"
+    - out: "./intermediate_ca"
+      cert-path: "./root_ca/ca.crt"
+      key-path: "./root_ca/ca.key"
+      days: 5
+  node-certs:
+    - out: "./node1"
+      ca-certificate: "./intermediate_ca/ca.crt"
+      ca-key: "./intermediate_ca/ca.key"
+      ip-addresses: "127.0.0.1,172.20.240.1"
+      dns-names: "localhost,eventstore-node1.localhost.com"
+    - out: "./node2"
+      ca-certificate: "./intermediate_ca/ca.crt"
+      ca-key: "./intermediate_ca/ca.key"
+      ip-addresses: "127.0.0.2,172.20.240.2"
+      dns-names: "localhost,eventstore-node2.localhost.com"
+    - out: "./node3"
+      ca-certificate: "./intermediate_ca/ca.crt"
+      ca-key: "./intermediate_ca/ca.key"
+      ip-addresses: "127.0.0.3,172.20.240.3"
+      dns-names: "localhost,eventstore-node2.localhost.com"
+```
+
 ## Development
 
 Building or working on `es-gencert-cli` requires a Go environment, version 1.14 or higher.

certificates/create_ca.go

@@ -25,10 +25,10 @@ type CreateCA struct {
 }
 
 type CreateCAArguments struct {
-	Days              int
-	OutputDir         string
-	CACertificatePath string
-	CAKeyPath         string
+	Days              int    `yaml:"days"`
+	OutputDir         string `yaml:"out"`
+	CACertificatePath string `yaml:"ca-certificate"`
+	CAKeyPath         string `yaml:"ca-key"`
 }
 
 func (c *CreateCA) Run(args []string) int {
@@ -52,7 +52,7 @@ func (c *CreateCA) Run(args []string) int {
 
 	caCertPathLen := len(config.CACertificatePath)
 	caKeyPathLen := len(config.CAKeyPath)
-	if (caCertPathLen > 0 && caKeyPathLen == 0) || (caKeyPathLen > 0 && caCertPathLen == 0){
+	if (caCertPathLen > 0 && caKeyPathLen == 0) || (caKeyPathLen > 0 && caCertPathLen == 0) {
 		multierror.Append(validationErrors, errors.New("both -ca-certificate and -ca-key options are required"))
 	}
 
@@ -69,7 +69,7 @@ func (c *CreateCA) Run(args []string) int {
 		days = config.Days
 		years = 0
 	}
-	
+
 	var caCert *x509.Certificate
 	var caKey *rsa.PrivateKey
 	var err error

certificates/create_certs.go

@@ -0,0 +1,111 @@
+package certificates
+
+import (
+	"flag"
+	"fmt"
+	"github.com/mitchellh/cli"
+	"gopkg.in/yaml.v3"
+	"io/ioutil"
+	"reflect"
+	"strings"
+)
+
+type CreateCertificates struct {
+	Ui cli.Ui
+}
+
+type CreateCertificateArguments struct {
+	ConfigPath string
+}
+
+type Config struct {
+	Certificates struct {
+		CaCerts []CreateCAArguments   `yaml:"ca-certs"`
+		Nodes   []CreateNodeArguments `yaml:"node-certs"`
+	} `yaml:"certificates"`
+}
+
+func (c *CreateCertificates) Run(args []string) int {
+	var arguments CreateCertificateArguments
+	flags := flag.NewFlagSet("create_certs", flag.ContinueOnError)
+	flags.Usage = func() { c.Ui.Info(c.Help()) }
+	flags.StringVar(&arguments.ConfigPath, "config-file", "./certs.yml", "The config yml file")
+	if err := flags.Parse(args); err != nil {
+		return 1
+	}
+	configData, err := ioutil.ReadFile(arguments.ConfigPath)
+	if err != nil {
+		c.Ui.Error(err.Error())
+		return 1
+	}
+	config := Config{}
+
+	if yaml.Unmarshal(configData, &config) != nil {
+		c.Ui.Error(err.Error())
+		return 1
+	}
+
+	if c.generateCaCerts(config) != 0 || c.generateNodes(config) != 0 {
+		return 1
+	}
+
+	return 0
+
+}
+
+func (c *CreateCertificates) generateNodes(config Config) int {
+	for _, node := range config.Certificates.Nodes {
+		createNode := CreateNode{
+			Ui: &cli.ColoredUi{
+				Ui:          c.Ui,
+				OutputColor: cli.UiColorBlue,
+			},
+		}
+		if createNode.Run(toArguments(node)) != 0 {
+			return 1
+		}
+	}
+	return 0
+}
+
+func (c *CreateCertificates) generateCaCerts(config Config) int {
+	for _, ca := range config.Certificates.CaCerts {
+		createCa := CreateCA{
+			Ui: &cli.ColoredUi{
+				Ui:          c.Ui,
+				OutputColor: cli.UiColorBlue,
+			},
+		}
+		if createCa.Run(toArguments(ca)) != 0 {
+			return 1
+		}
+	}
+	return 0
+}
+
+func toArguments(config interface{}) []string {
+	var args strings.Builder
+	fields := reflect.ValueOf(config)
+	for i := 0; i < fields.NumField(); i++ {
+		key := reflect.TypeOf(config).Field(i).Tag.Get("yaml")
+		value := fmt.Sprintf("%v", fields.Field(i).Interface())
+		if len(value) > 0 {
+			args.WriteString(fmt.Sprintf("-%s %s ", key, value))
+		}
+	}
+	return strings.Fields(args.String())
+}
+
+func (c *CreateCertificates) Help() string {
+	helpText := `
+Usage: create_certs [options]
+  Generate ca and node Certificates from an yml configuration file.
+Options:
+  -config-file    the path to the yml config file
+`
+	return strings.TrimSpace(helpText)
+}
+
+func (c *CreateCertificates) Synopsis() string {
+	return "Generate Certificates for both the CA and the eventstore Nodes in a single command using a config yml"
+}

certificates/create_node.go

@@ -27,13 +27,13 @@ type CreateNode struct {
 }
 
 type CreateNodeArguments struct {
-	CACertificatePath string
-	CAKeyPath         string
-	IPAddresses       string
-	DNSNames          string
-	Days              int
-	OutputDir         string
-	CommonName        string
+	CACertificatePath string `yaml:"ca-certificate"`
+	CAKeyPath         string `yaml:"ca-key"`
+	IPAddresses       string `yaml:"ip-addresses"`
+	DNSNames          string `yaml:"dns-names"`
+	Days              int    `yaml:"days"`
+	OutputDir         string `yaml:"out"`
+	CommonName        string `yaml:"common-name"`
 }
 
 func readCertificateFromFile(path string) (*x509.Certificate, error) {

go.mod

@@ -5,4 +5,5 @@ go 1.14
 require (
 	github.com/hashicorp/go-multierror v1.0.0
 	github.com/mitchellh/cli v1.1.1
+	gopkg.in/yaml.v3 v3.0.1 // indirect
 )

go.sum

@@ -18,3 +18,6 @@ github.com/posener/complete v1.1.1 h1:ccV59UEOTzVDnDUEFdT95ZzHVZ+5+158q8+SJb2QV5
 github.com/posener/complete v1.1.1/go.mod h1:em0nMJCgc9GFtwrmVmEMR/ZL6WyhyjMBndrE9hABlRI=
 golang.org/x/sys v0.0.0-20180823144017-11551d06cbcc h1:MeuS1UDyZyFH++6vVy44PuufTeFF0d0nfI6XB87YGSk=
 golang.org/x/sys v0.0.0-20180823144017-11551d06cbcc/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
+gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
+gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=

main.go

@@ -53,6 +53,14 @@ func main() {
 				},
 			}, nil
 		},
+		"create-certs": func() (cli.Command, error) {
+			return &certificates.CreateCertificates{
+				Ui: &cli.ColoredUi{
+					Ui:          ui,
+					OutputColor: cli.UiColorBlue,
+				},
+			}, nil
+		},
 	}
 	c.HelpFunc = createGeneralHelpFunc(appName, flags)