Function gen_prod_certs

gateway/src/main.rs:109–136

(tls_config: &TlsConfig, alt_names: Vec<String>)

}

async fn gen_prod_certs(tls_config: &TlsConfig, alt_names: Vec<String>) -> Result<()> {
    info!("Using dstack guest agent for certificate generation");
    let agent_client = dstack_agent().context("Failed to create dstack client")?;

    let response = agent_client
        .get_tls_key(GetTlsKeyArgs {
            subject: "dstack-gateway".to_string(),
            alt_names,
            usage_ra_tls: true,
            usage_server_auth: true,
            usage_client_auth: true,
            not_before: None,
            not_after: None,
            with_app_info: true,
        })
        .await?;

    let ca_cert = response
        .certificate_chain
        .last()
        .context("Empty certificate chain")?
        .to_string();
    let certs = response.certificate_chain.join("\n");
    write_cert(&tls_config.mutual.ca_certs, &ca_cert)?;
    write_cert(&tls_config.certs, &certs)?;
    write_cert(&tls_config.key, &response.key)?;
    Ok(())
}

async fn gen_debug_certs(
    config: &Config,