1 files changed, 102 insertions, 0 deletions
diff --git a/src/lib/req.rs b/src/lib/req.rs
new file mode 100644
index 0000000..2b5974f
--- /dev/null
+++ b/src/lib/req.rs
@@ -0,0 +1,102 @@
+use openssl::hash::MessageDigest;
+use openssl::nid::Nid;
+use openssl::pkey::{Id, PKey, Private};
+use openssl::stack::Stack;
+use openssl::x509::extension::SubjectAlternativeName;
+use openssl::x509::{X509Name, X509Req};
+
+use std::fs::{read, write};
+use std::net::IpAddr;
+use std::str::FromStr;
+
+use crate::path;
+
+#[allow(clippy::too_many_arguments)]
+pub fn generate_req(
+    common_name: &Option<String>,
+    country: &Option<String>,
+    state: &Option<String>,
+    locality: &Option<String>,
+    organization: &Option<String>,
+    organizational_unit: &Option<String>,
+    subject_alternative_names: &Option<String>,
+    pkey: &PKey<Private>,
+) -> X509Req {
+    let mut x509req_builder = X509Req::builder().unwrap();
+
+    x509req_builder.set_pubkey(pkey).unwrap();
+    x509req_builder.set_version(0).unwrap();
+
+    let mut x509_name_builder = X509Name::builder().unwrap();
+    if let Some(cn) = common_name {
+        x509_name_builder
+            .append_entry_by_nid(Nid::COMMONNAME, cn)
+            .unwrap();
+    }
+    if let Some(c) = country {
+        x509_name_builder
+            .append_entry_by_nid(Nid::COUNTRYNAME, c)
+            .unwrap();
+    }
+    if let Some(s) = state {
+        x509_name_builder
+            .append_entry_by_nid(Nid::STATEORPROVINCENAME, s)
+            .unwrap();
+    }
+    if let Some(l) = locality {
+        x509_name_builder
+            .append_entry_by_nid(Nid::LOCALITYNAME, l)
+            .unwrap();
+    }
+    if let Some(o) = organization {
+        x509_name_builder
+            .append_entry_by_nid(Nid::ORGANIZATIONNAME, o)
+            .unwrap();
+    }
+    if let Some(ou) = organizational_unit {
+        x509_name_builder
+            .append_entry_by_nid(Nid::ORGANIZATIONALUNITNAME, ou)
+            .unwrap();
+    }
+    let x509_name = x509_name_builder.build();
+    x509req_builder.set_subject_name(&x509_name).unwrap();
+
+    let mut subject_alt_name = SubjectAlternativeName::new();
+
+    if let Some(san) = subject_alternative_names {
+        let alt_names = san.split(',');
+        for name in alt_names {
+            if IpAddr::from_str(name).is_ok() {
+                subject_alt_name.ip(name);
+            } else {
+                subject_alt_name.dns(name);
+            }
+        }
+    }
+    let subject_alt_name = subject_alt_name
+        .build(&x509req_builder.x509v3_context(None))
+        .unwrap();
+    let mut stack = Stack::new().unwrap();
+    stack.push(subject_alt_name).unwrap();
+    x509req_builder.add_extensions(&stack).unwrap();
+
+    let digest_algorithm = match pkey.id() {
+        Id::RSA => MessageDigest::sha256(),
+        Id::EC => MessageDigest::sha384(),
+        _ => MessageDigest::sha256(),
+    };
+
+    x509req_builder.sign(pkey, digest_algorithm).unwrap();
+
+    x509req_builder.build()
+}
+
+pub fn save_req(path: &str, req: &X509Req) {
+    println!("{}", path);
+    path::ensure_dir(path);
+    write(path, req.to_pem().unwrap()).unwrap();
+}
+
+pub fn read_req(path: &str) -> X509Req {
+    X509Req::from_pem(&read(path).unwrap()).unwrap()
+}