mirror of
https://github.com/Luzifer/vault-openvpn.git
synced 2024-11-09 00:30:05 +00:00
52 lines
1.2 KiB
Go
52 lines
1.2 KiB
Go
package cmd
|
|
|
|
import (
|
|
"errors"
|
|
"fmt"
|
|
"strings"
|
|
|
|
log "github.com/sirupsen/logrus"
|
|
"github.com/spf13/cobra"
|
|
"github.com/spf13/viper"
|
|
)
|
|
|
|
// revokeSerialCmd represents the revoke-serial command
|
|
var revokeSerialCmd = &cobra.Command{
|
|
Use: "revoke-serial <serial>",
|
|
Short: "Revoke certificate by serial number",
|
|
PreRunE: func(cmd *cobra.Command, args []string) error { return initVaultClient() },
|
|
RunE: func(cmd *cobra.Command, args []string) error {
|
|
if len(args) != 1 || !validateSerial(args[0]) {
|
|
return errors.New("You need to provide a valid serial")
|
|
}
|
|
|
|
return revokeCertificateBySerial(args[0])
|
|
},
|
|
}
|
|
|
|
func init() {
|
|
RootCmd.AddCommand(revokeSerialCmd)
|
|
}
|
|
|
|
func revokeCertificateBySerial(serial string) error {
|
|
cert, revoked, err := fetchCertificateBySerial(serial)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if revoked {
|
|
return nil
|
|
}
|
|
|
|
path := strings.Join([]string{strings.Trim(viper.GetString("pki-mountpoint"), "/"), "revoke"}, "/")
|
|
if _, err := client.Logical().Write(path, map[string]interface{}{
|
|
"serial_number": serial,
|
|
}); err != nil {
|
|
return fmt.Errorf("Revoke of serial %q failed: %s", serial, err.Error())
|
|
}
|
|
log.WithFields(log.Fields{
|
|
"cn": cert.Subject.CommonName,
|
|
"serial": serial,
|
|
}).Info("Revoked certificate")
|
|
|
|
return nil
|
|
}
|