From 88133aa4a60098a76c7373b3e4474f7a93051e44 Mon Sep 17 00:00:00 2001
From: Darien Raymond <admin@v2ray.com>
Date: Mon, 9 Apr 2018 12:42:18 +0200
Subject: [PATCH] move cert generation code to common

---
 common/protocol/tls/cert/cert.go             | 67 ++++++++++++++++++++
 common/protocol/tls/cert/errors.generated.go |  5 ++
 2 files changed, 72 insertions(+)
 create mode 100644 common/protocol/tls/cert/cert.go
 create mode 100644 common/protocol/tls/cert/errors.generated.go

diff --git a/common/protocol/tls/cert/cert.go b/common/protocol/tls/cert/cert.go
new file mode 100644
index 000000000..441d20acf
--- /dev/null
+++ b/common/protocol/tls/cert/cert.go
@@ -0,0 +1,67 @@
+package cert
+
+import (
+	"crypto/rand"
+	"crypto/rsa"
+	"crypto/x509"
+	"crypto/x509/pkix"
+	"encoding/pem"
+	"log"
+	"math/big"
+	"time"
+
+	"v2ray.com/core/common"
+)
+
+//go:generate go run $GOPATH/src/v2ray.com/core/common/errors/errorgen/main.go -pkg cert -path Protocol,TLS,Cert
+
+type Certificate struct {
+	// Cerificate in x509 format
+	Certificate []byte
+	// Private key in x509 format
+	PrivateKey []byte
+}
+
+type Option func(*x509.Certificate)
+
+func Authority(isCA bool) Option {
+	return func(cert *x509.Certificate) {
+		cert.IsCA = isCA
+	}
+}
+
+func Generate() (Certificate, error) {
+	priv, err := rsa.GenerateKey(rand.Reader, 2048)
+	common.Must(err)
+
+	serialNumberLimit := new(big.Int).Lsh(big.NewInt(1), 128)
+	serialNumber, err := rand.Int(rand.Reader, serialNumberLimit)
+	if err != nil {
+
+		log.Fatalf("failed to generate serial number: %s", err)
+	}
+
+	template := x509.Certificate{
+		SerialNumber: serialNumber,
+		Subject: pkix.Name{
+			Organization: []string{"V2Ray Inc"},
+		},
+		NotBefore:             time.Now().Add(time.Hour * -1),
+		NotAfter:              time.Now().Add(time.Hour),
+		KeyUsage:              x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature,
+		ExtKeyUsage:           []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth},
+		BasicConstraintsValid: true,
+		DNSNames:              []string{"www.v2ray.com", "v2ray.com"},
+	}
+
+	derBytes, err := x509.CreateCertificate(rand.Reader, &template, &template, &priv.PublicKey, priv)
+	common.Must(err)
+
+	certPEM := pem.EncodeToMemory(&pem.Block{Type: "CERTIFICATE", Bytes: derBytes})
+	keyPEM := pem.EncodeToMemory(&pem.Block{Type: "RSA PRIVATE KEY", Bytes: x509.MarshalPKCS1PrivateKey(priv)})
+
+	return Certificate{
+		Certificate: certPEM,
+		PrivateKey:  keyPEM,
+	}, nil
+}
diff --git a/common/protocol/tls/cert/errors.generated.go b/common/protocol/tls/cert/errors.generated.go
new file mode 100644
index 000000000..e8a14452a
--- /dev/null
+++ b/common/protocol/tls/cert/errors.generated.go
@@ -0,0 +1,5 @@
+package cert
+
+import "v2ray.com/core/common/errors"
+
+func newError(values ...interface{}) *errors.Error { return errors.New(values...).Path("Protocol", "TLS", "Cert") }