Function LoadOrCreateNodeCA

internal/cert/ca.go:26–53

(certPath, keyPath string)

}

func LoadOrCreateNodeCA(certPath, keyPath string) (*NodeCA, error) {
	if certPath == "" || keyPath == "" {
		return nil, fmt.Errorf("cert path and key path are required")
	}

	certInfo, certErr := os.Stat(certPath)
	keyInfo, keyErr := os.Stat(keyPath)
	bothExist := certErr == nil && keyErr == nil && !certInfo.IsDir() && !keyInfo.IsDir()

	if bothExist {
		ca, err := loadNodeCA(certPath, keyPath)
		if err == nil {
			return ca, nil
		}
		return nil, err
	}
	if (certErr == nil) != (keyErr == nil) {
		return nil, fmt.Errorf("cert file and key file must exist together")
	}
	if certErr != nil && !os.IsNotExist(certErr) {
		return nil, fmt.Errorf("stat cert file: %w", certErr)
	}
	if keyErr != nil && !os.IsNotExist(keyErr) {
		return nil, fmt.Errorf("stat key file: %w", keyErr)
	}

	return createNodeCA(certPath, keyPath)
}

func loadNodeCA(certPath, keyPath string) (*NodeCA, error) {
	certBytes, err := os.ReadFile(certPath)