vault-sidekick/formats.go

/*
Copyright 2015 Home Office All rights reserved.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

package main

import (
	"bytes"
	"encoding/json"
	"errors"
	"fmt"
	"io/ioutil"
	"os"
	"strings"

	"github.com/golang/glog"
	"gopkg.in/yaml.v2"
)

func writeIniFile(filename string, data map[string]interface{}, mode os.FileMode) error {
	var buf bytes.Buffer
	for key, val := range data {
		buf.WriteString(fmt.Sprintf("%s = %v\n", key, val))
	}

	return writeFile(filename, buf.Bytes(), mode)
}

func writeCSVFile(filename string, data map[string]interface{}, mode os.FileMode) error {
	var buf bytes.Buffer
	for key, val := range data {
		buf.WriteString(fmt.Sprintf("%s,%v\n", key, val))
	}

	return writeFile(filename, buf.Bytes(), mode)
}

func writeYAMLFile(filename string, data map[string]interface{}, mode os.FileMode) error {
	// marshall the content to yaml
	content, err := yaml.Marshal(data)
	if err != nil {
		return err
	}

	return writeFile(filename, content, mode)
}

func writeEnvFile(filename string, data map[string]interface{}, mode os.FileMode) error {
	var buf bytes.Buffer
	for key, val := range data {
		buf.WriteString(fmt.Sprintf("%s=%v\n", strings.ToUpper(key), val))
	}

	return writeFile(filename, buf.Bytes(), mode)
}

func getCombinedCaChain(dataValue interface{}) (string, error) {
	arr, ok := dataValue.([]interface{})
	if !ok {
		return "", errors.New("ca_chain not of type array")
	}
	caChain := make([]string, len(arr))
	for i := range arr {
		caChain[i] = arr[i].(string)
	}
	return strings.Join(caChain, "\n"), nil
}

func writeCertificateFile(filename string, data map[string]interface{}, mode os.FileMode) error {
	files := map[string]string{
		"certificate": "crt",
		"issuing_ca":  "ca",
		"ca_chain":    "ca.pem",
		"private_key": "key",
	}
	for key, suffix := range files {
		name := fmt.Sprintf("%s.%s", filename, suffix)
		content, found := data[key]
		if !found {
			glog.Errorf("didn't find the certification option: %s in the resource: %s", key, name)
			continue
		}

		// step: write the file
		var contentToWrite string
		var err error
		if key == "ca_chain" {
			contentToWrite, err = getCombinedCaChain(data[key])
			if err != nil {
				glog.Errorf("failed to parse ca_chain: %s", err)
			}
		} else {
			contentToWrite = fmt.Sprintf("%s", content)
		}

		if err := writeFile(name, []byte(contentToWrite), mode); err != nil {
			glog.Errorf("failed to write resource: %s, element: %s, filename: %s, error: %s", filename, suffix, name, err)
			continue
		}
	}

	return nil

}

func writeCertificateBundleFile(filename string, data map[string]interface{}, mode os.FileMode) error {
	bundleFile := fmt.Sprintf("%s-bundle.pem", filename)
	keyFile := fmt.Sprintf("%s-key.pem", filename)
	caFile := fmt.Sprintf("%s-ca.pem", filename)
	caChainFile := fmt.Sprintf("%s-ca-chain.pem", filename)
	certFile := fmt.Sprintf("%s.pem", filename)

	bundle := fmt.Sprintf("%s\n\n%s", data["certificate"], data["issuing_ca"])
	key := fmt.Sprintf("%s\n", data["private_key"])
	ca := fmt.Sprintf("%s\n", data["issuing_ca"])
	certificate := fmt.Sprintf("%s\n", data["certificate"])
	caChain, err := getCombinedCaChain(data["ca_chain"])
	if err != nil {
		glog.Errorf("failed to parse ca_chain: %s", err)
		return err
	}

	if err := writeFile(bundleFile, []byte(bundle), mode); err != nil {
		glog.Errorf("failed to write the bundled certificate file, error: %s", err)
		return err
	}

	if err := writeFile(certFile, []byte(certificate), mode); err != nil {
		glog.Errorf("failed to write the certificate file, errro: %s", err)
		return err
	}

	if err := writeFile(caFile, []byte(ca), mode); err != nil {
		glog.Errorf("failed to write the ca file, errro: %s", err)
		return err
	}

	if err := writeFile(caChainFile, []byte(caChain), mode); err != nil {
		glog.Errorf("failed to write the ca_chain file, errro: %s", err)
		return err
	}

	if err := writeFile(keyFile, []byte(key), mode); err != nil {
		glog.Errorf("failed to write the key file, errro: %s", err)
		return err
	}

	return nil
}

func writeKeyCertificateBundleFile(filename string, data map[string]interface{}, mode os.FileMode) error {
	bundleFile := fmt.Sprintf("%s-bundle.pem", filename)
	keyFile := fmt.Sprintf("%s-key.pem", filename)
	caFile := fmt.Sprintf("%s-ca.pem", filename)
	caChainFile := fmt.Sprintf("%s-ca-chain.pem", filename)
	certFile := fmt.Sprintf("%s.pem", filename)

	bundle := fmt.Sprintf("%s\n%s", data["private_key"], data["certificate"])
	key := fmt.Sprintf("%s\n", data["private_key"])
	ca := fmt.Sprintf("%s\n", data["issuing_ca"])
	certificate := fmt.Sprintf("%s\n", data["certificate"])
	caChain, err := getCombinedCaChain(data["ca_chain"])
	if err != nil {
		glog.Errorf("failed to parse ca_chain: %s", err)
		return err
	}

	if err := writeFile(bundleFile, []byte(bundle), mode); err != nil {
		glog.Errorf("failed to write the bundled certificate file, error: %s", err)
		return err
	}

	if err := writeFile(certFile, []byte(certificate), mode); err != nil {
		glog.Errorf("failed to write the certificate file, errro: %s", err)
		return err
	}

	if err := writeFile(caFile, []byte(ca), mode); err != nil {
		glog.Errorf("failed to write the ca file, errro: %s", err)
		return err
	}

	if err := writeFile(caChainFile, []byte(caChain), mode); err != nil {
		glog.Errorf("failed to write the ca_chain file, errro: %s", err)
		return err
	}

	if err := writeFile(keyFile, []byte(key), mode); err != nil {
		glog.Errorf("failed to write the key file, errro: %s", err)
		return err
	}

	return nil
}

func writeTxtFile(filename string, data map[string]interface{}, mode os.FileMode) error {
	keys := getKeys(data)
	if len(keys) > 1 {
		// step: for plain formats we need to iterate the keys and produce a file per key
		for suffix, content := range data {
			name := fmt.Sprintf("%s.%s", filename, suffix)
			if err := writeFile(name, []byte(fmt.Sprintf("%v", content)), mode); err != nil {
				glog.Errorf("failed to write resource: %s, elemment: %s, filename: %s, error: %s",
					filename, suffix, name, err)
				continue
			}
		}
		return nil
	}

	// step: we only have the one key, so will write plain
	value, _ := data[keys[0]]
	content := []byte(fmt.Sprintf("%s", value))

	return writeFile(filename, content, mode)
}

func writeJSONFile(filename string, data map[string]interface{}, mode os.FileMode) error {
	content, err := json.MarshalIndent(data, "", "    ")
	if err != nil {
		return err
	}

	return writeFile(filename, content, mode)
}

// writeFile writes the file to stdout or an actual file
func writeFile(filename string, content []byte, mode os.FileMode) error {
	if options.dryRun {
		glog.Infof("dry-run: filename: %s, content:", filename)
		fmt.Printf("%s\n", string(content))
		return nil
	}
	glog.V(3).Infof("saving the file: %s", filename)

	return ioutil.WriteFile(filename, content, mode)
}