cmd/read_certificate_data.go

package cmd

import (
	"encoding/json"
	"fmt"
	"log"
	"os"
	"strings"

	helper "github.com/aws/rolesanywhere-credential-helper/aws_signing_helper"
	"github.com/spf13/cobra"
)

func init() {
	rootCmd.AddCommand(readCertificateDataCmd)
	readCertificateDataCmd.PersistentFlags().StringVar(&certificateId, "certificate", "", "Path to certificate file")
	readCertificateDataCmd.PersistentFlags().StringVar(&certSelector, "cert-selector", "", "JSON structure to identify a certificate from a certificate store."+
		" Can be passed in either as string or a file name (prefixed by \"file://\")")
	readCertificateDataCmd.PersistentFlags().StringVar(&systemStoreName, "system-store-name", "MY", "Name of the system store to search for within the "+
		"CERT_SYSTEM_STORE_CURRENT_USER context. Note that this flag is only relevant for Windows certificate stores and will be ignored otherwise")
	readCertificateDataCmd.PersistentFlags().StringVar(&libPkcs11, "pkcs11-lib", "", "Library for smart card / cryptographic device (OpenSC or vendor specific)")
	readCertificateDataCmd.PersistentFlags().BoolVar(&debug, "debug", false, "To print debug output")

	readCertificateDataCmd.MarkFlagsMutuallyExclusive("certificate", "cert-selector")
	readCertificateDataCmd.MarkFlagsMutuallyExclusive("certificate", "system-store-name")
}

type PrintCertificate func(int, helper.CertificateContainer)

// Default function for printing certificate information
func DefaultPrintCertificate(index int, certContainer helper.CertificateContainer) {
	fmt.Printf("%d) %s", index+1, helper.DefaultCertContainerToString(certContainer))
}

var readCertificateDataCmd = &cobra.Command{
	Use:   "read-certificate-data [flags]",
	Short: "Diagnostic command to read certificate data",
	Long: `Diagnostic command to read certificate data, either from files or 
    from a certificate store`,
	Run: func(cmd *cobra.Command, args []string) {
		certIdentifier, err := PopulateCertIdentifier(certSelector, systemStoreName)
		if err != nil {
			log.Println("unable to populate CertIdentifier")
			os.Exit(1)
		}

		var certContainers []helper.CertificateContainer
		// In case there is information that needs to be conditionally printed
		// based on the type of integration being used (which can't be taken
		// from the CertificateContainer), a function that implements the
		// PrintCertificate interface can be assigned to this variable.
		var printFunction PrintCertificate = DefaultPrintCertificate

		if strings.HasPrefix(certificateId, "pkcs11:") {
			certContainers, err = helper.GetMatchingPKCSCerts(certificateId, libPkcs11)
			if err != nil {
				log.Println(err)
				os.Exit(1)
			}
		} else if certificateId != "" {
			data, _, err := helper.ReadCertificateData(certificateId)
			if err != nil {
				log.Println(err)
				os.Exit(1)
			}
			buf, err := json.Marshal(data)
			if err != nil {
				log.Println(err)
				os.Exit(1)
			}

			fmt.Print(string(buf[:]))
			// Exit after printing out the certificate data
			os.Exit(0)
		} else {
			certContainers, err = helper.GetMatchingCerts(certIdentifier)
			if err != nil {
				log.Println(err)
				os.Exit(1)
			}
		}
		if len(certContainers) == 0 {
			fmt.Println("No matching identities")
		} else {
			fmt.Println("Matching identities")
			for index, certContainer := range certContainers {
				printFunction(index, certContainer)
			}
		}
	},
}