mirror of
https://github.com/hanzoai/tasks.git
synced 2026-10-04 02:04:03 +00:00
Alex ShtinandGitHub
8e8f1b0f7c
## What changed?
<!-- Describe what has changed in this PR -->
Remove license header from every file. Because it is really hard to
follow in this PR here is the summary:
1. License header is removed from all `.go` and `.proto` files
:fireworks::fireworks:🎆.
2. `LICENSE` file in the root directory has only Temporal and Uber
copyrights.
3. 5 other `LICENSE` files added to the packages which have copyrights
different from Temporal and Uber: Datadog, Xargin, "Mat Ryer, Tyler
Bunnell and contributors".
4. `license_file` flag is removed from all code generation tools.
5. `copyright_file` flag is removed from `go:generate mockgen`
directive.
6. All copyright related targets are removed from `Makefile`.
7. Updated Temporal copyright year to 2025 everywhere.
## Why?
<!-- Tell your future self why have you made these changes -->
I double checked with legal department that it is not needed to have
license header in every file. One file per repo is enough. I put all
copyrights to the root `LICENSE` file and removed header from all other
files. Also updated tools and `Makefile`.
127 lines
3.5 KiB
Go
127 lines
3.5 KiB
Go
package testutils
|
|
|
|
import (
|
|
"crypto/rand"
|
|
"crypto/rsa"
|
|
"crypto/tls"
|
|
"crypto/x509"
|
|
"crypto/x509/pkix"
|
|
"math/big"
|
|
mathrand "math/rand"
|
|
"net"
|
|
"strings"
|
|
"time"
|
|
)
|
|
|
|
// GenerateSelfSignedX509CA generates a TLS serverCert that is self-signed
|
|
func generateSelfSignedX509CA(commonName string, extUsage []x509.ExtKeyUsage, keyLengthBits int) (*tls.Certificate, error) {
|
|
now := time.Now().UTC()
|
|
|
|
template := &x509.Certificate{
|
|
SerialNumber: big.NewInt(now.Unix()),
|
|
Subject: pkix.Name{
|
|
CommonName: commonName,
|
|
Country: []string{"USA"},
|
|
Organization: []string{"TemporalTechnologiesTesting"},
|
|
},
|
|
NotBefore: now.Add(-time.Minute),
|
|
NotAfter: now.AddDate(0, 0, 1), // 1 day expiry
|
|
BasicConstraintsValid: true,
|
|
IsCA: true,
|
|
ExtKeyUsage: extUsage,
|
|
KeyUsage: x509.KeyUsageCertSign | x509.KeyUsageKeyEncipherment |
|
|
x509.KeyUsageDigitalSignature,
|
|
}
|
|
|
|
if ip := net.ParseIP(commonName); ip != nil {
|
|
if ip.IsLoopback() {
|
|
template.IPAddresses = []net.IP{net.IPv6loopback, net.IPv4(127, 0, 0, 1)}
|
|
template.DNSNames = []string{"localhost"}
|
|
} else {
|
|
template.IPAddresses = []net.IP{ip}
|
|
}
|
|
} else {
|
|
template.DNSNames = []string{commonName}
|
|
}
|
|
|
|
if strings.ToLower(commonName) == "localhost" {
|
|
template.IPAddresses = []net.IP{net.IPv6loopback, net.IPv4(127, 0, 0, 1)}
|
|
}
|
|
|
|
privateKey, err := rsa.GenerateKey(rand.Reader, keyLengthBits)
|
|
if err != nil {
|
|
return &tls.Certificate{}, err
|
|
}
|
|
|
|
cert, err := x509.CreateCertificate(rand.Reader, template, template, privateKey.Public(), privateKey)
|
|
if err != nil {
|
|
return &tls.Certificate{}, err
|
|
}
|
|
|
|
var tlsCert tls.Certificate
|
|
tlsCert.Certificate = append(tlsCert.Certificate, cert)
|
|
tlsCert.PrivateKey = privateKey
|
|
|
|
return &tlsCert, nil
|
|
}
|
|
|
|
// GenerateServerX509UsingCA generates a TLS serverCert that is self-signed
|
|
func generateServerX509UsingCAAndSerialNumber(commonName string, serialNumber int64, ca *tls.Certificate) (*tls.Certificate, *rsa.PrivateKey, error) {
|
|
now := time.Now().UTC()
|
|
|
|
i := serialNumber
|
|
if i == 0 {
|
|
i = mathrand.Int63n(100000000000000000)
|
|
}
|
|
|
|
template := &x509.Certificate{
|
|
SerialNumber: big.NewInt(i),
|
|
Subject: pkix.Name{
|
|
CommonName: commonName,
|
|
Country: []string{"USA"},
|
|
Organization: []string{"TemporalTechnologiesTesting"},
|
|
},
|
|
NotBefore: now.Add(-time.Minute),
|
|
NotAfter: now.AddDate(0, 0, 1), // 1 day expiry
|
|
BasicConstraintsValid: true,
|
|
ExtKeyUsage: []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth, x509.ExtKeyUsageClientAuth},
|
|
KeyUsage: x509.KeyUsageDigitalSignature,
|
|
}
|
|
|
|
if ip := net.ParseIP(commonName); ip != nil {
|
|
if ip.IsLoopback() {
|
|
template.IPAddresses = []net.IP{net.IPv6loopback, net.IPv4(127, 0, 0, 1)}
|
|
template.DNSNames = []string{"localhost"}
|
|
} else {
|
|
template.IPAddresses = []net.IP{ip}
|
|
}
|
|
} else {
|
|
template.DNSNames = []string{commonName}
|
|
}
|
|
|
|
if strings.ToLower(commonName) == "localhost" {
|
|
template.IPAddresses = []net.IP{net.IPv6loopback, net.IPv4(127, 0, 0, 1)}
|
|
}
|
|
|
|
privateKey, err := rsa.GenerateKey(rand.Reader, 4096)
|
|
if err != nil {
|
|
return &tls.Certificate{}, nil, err
|
|
}
|
|
|
|
caCert, err := x509.ParseCertificate(ca.Certificate[0])
|
|
if err != nil {
|
|
return nil, nil, err
|
|
}
|
|
|
|
cert, err := x509.CreateCertificate(rand.Reader, template, caCert, privateKey.Public(), ca.PrivateKey)
|
|
if err != nil {
|
|
return &tls.Certificate{}, nil, err
|
|
}
|
|
|
|
var tlsCert tls.Certificate
|
|
tlsCert.Certificate = append(tlsCert.Certificate, cert)
|
|
tlsCert.PrivateKey = privateKey
|
|
|
|
return &tlsCert, privateKey, err
|
|
}
|