schematics/src/symbols/tls/self_signed_cert.rs

use std::borrow::Cow;
use std::error::Error;
use std::fmt;
use std::path::Path;

use command_runner::CommandRunner;
use resources::Resource;
use symbols::{Action, OwnedSymbolAction, Symbol, SymbolAction, SymbolRunner};

pub struct SelfSignedTlsCert<'a, C: 'a + CommandRunner> {
  domain: Cow<'a, str>,
  command_runner: &'a C,
}

impl<'a, C: CommandRunner> SelfSignedTlsCert<'a, C> {
  pub fn new(domain: Cow<'a, str>, command_runner: &'a C) -> Self {
    SelfSignedTlsCert {
      domain,
      command_runner,
    }
  }

  fn get_key_path(&self) -> String {
    format!("/etc/ssl/private/{}.key", self.domain)
  }

  fn get_cert_path(&self) -> String {
    format!("/etc/ssl/local_certs/{}.chained.crt", self.domain)
  }
}

impl<'a, C: CommandRunner> fmt::Display for SelfSignedTlsCert<'a, C> {
  fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result {
    write!(f, "SelfSignedTlsCert {}", self.domain)
  }
}

const DAYS_IN_SECONDS: u32 = 24 * 60 * 60;

impl<'a, C: CommandRunner> Symbol for SelfSignedTlsCert<'a, C> {
  fn target_reached(&self) -> Result<bool, Box<dyn Error>> {
    if !Path::new(&self.get_cert_path()).exists() {
      return Ok(false);
    }
    let output = self.command_runner.run_with_args(
      "openssl",
      &[
        "x509",
        "-in",
        &self.get_cert_path(),
        "-noout",
        "-subject",
        "-checkend",
        &(30 * DAYS_IN_SECONDS).to_string(),
      ],
    )?;
    println!("{}", output.status.code().unwrap());
    match output.status.code() {
      Some(0) => Ok(
        output.stdout
          == format!(
            "subject=CN = {}\nCertificate will not expire\n",
            self.domain
          )
          .as_bytes(),
      ),
      Some(_) => {
        if output.stdout
          == format!("subject=CN = {}\nCertificate will expire\n", self.domain).as_bytes()
        {
          Ok(false)
        } else {
          Err("Exit code non-zero, but wrong stdout".to_string().into())
        }
      }
      _ => Err("Apparently killed by signal".to_string().into()),
    }
  }

  fn execute(&self) -> Result<(), Box<dyn Error>> {
    self.command_runner.run_successfully(
      "openssl",
      &[
        "req",
        "-x509",
        "-sha256",
        "-days",
        "90",
        "-key",
        &self.get_key_path(),
        "-out",
        &self.get_cert_path(),
        "-subj",
        &format!("/CN={}", self.domain),
      ],
    )
  }

  fn get_prerequisites(&self) -> Vec<Resource> {
    vec![Resource::new("file", self.get_key_path())]
  }

  fn as_action<'b>(&'b self, runner: &'b dyn SymbolRunner) -> Box<dyn Action + 'b> {
    Box::new(SymbolAction::new(runner, self))
  }

  fn into_action<'b>(self: Box<Self>, runner: &'b dyn SymbolRunner) -> Box<dyn Action + 'b>
  where
    Self: 'b,
  {
    Box::new(OwnedSymbolAction::new(runner, *self))
  }
}

#[cfg(test)]
mod test {}