| 360 | } |
| 361 | |
| 362 | fn cmd_gen_app_keys(args: GenAppKeysArgs) -> Result<()> { |
| 363 | use ra_tls::rcgen::{KeyPair, PKCS_ECDSA_P256_SHA256}; |
| 364 | |
| 365 | let key = KeyPair::generate_for(&PKCS_ECDSA_P256_SHA256)?; |
| 366 | let disk_key = KeyPair::generate_for(&PKCS_ECDSA_P256_SHA256)?; |
| 367 | let k256_key = SigningKey::random(&mut rand::thread_rng()); |
| 368 | let key_provider = KeyProvider::None { |
| 369 | key: key.serialize_pem(), |
| 370 | }; |
| 371 | let app_keys = make_app_keys(&key, &disk_key, &k256_key, args.ca_level, key_provider)?; |
| 372 | let app_keys = serde_json::to_string(&app_keys).context("Failed to serialize app keys")?; |
| 373 | fs::write(&args.output, app_keys).context("Failed to write app keys")?; |
| 374 | Ok(()) |
| 375 | } |
| 376 | |
| 377 | fn gen_app_keys_from_seed( |
| 378 | seed: &[u8], |