mirror of https://github.com/hashicorp/consul
36 lines
769 B
Go
36 lines
769 B
Go
package connect
|
|
|
|
import (
|
|
"bytes"
|
|
"crypto"
|
|
"crypto/ecdsa"
|
|
"crypto/elliptic"
|
|
"crypto/rand"
|
|
"crypto/x509"
|
|
"encoding/pem"
|
|
"fmt"
|
|
)
|
|
|
|
// GeneratePrivateKey generates a new Private key
|
|
func GeneratePrivateKey() (crypto.Signer, string, error) {
|
|
var pk *ecdsa.PrivateKey
|
|
|
|
pk, err := ecdsa.GenerateKey(elliptic.P256(), rand.Reader)
|
|
if err != nil {
|
|
return nil, "", fmt.Errorf("error generating private key: %s", err)
|
|
}
|
|
|
|
bs, err := x509.MarshalECPrivateKey(pk)
|
|
if err != nil {
|
|
return nil, "", fmt.Errorf("error generating private key: %s", err)
|
|
}
|
|
|
|
var buf bytes.Buffer
|
|
err = pem.Encode(&buf, &pem.Block{Type: "EC PRIVATE KEY", Bytes: bs})
|
|
if err != nil {
|
|
return nil, "", fmt.Errorf("error encoding private key: %s", err)
|
|
}
|
|
|
|
return pk, buf.String(), nil
|
|
}
|