Function create_tls_secrets

crates/openshell-server/src/certgen.rs:266–294

(
    api: &Api<Secret>,
    server_name: &str,
    client_name: &str,
    bundle: &PkiBundle,
)

}

async fn create_tls_secrets(
    api: &Api<Secret>,
    server_name: &str,
    client_name: &str,
    bundle: &PkiBundle,
) -> Result<()> {
    let server_secret = tls_secret(
        server_name,
        &bundle.server_cert_pem,
        &bundle.server_key_pem,
        &bundle.ca_cert_pem,
    );
    let client_secret = tls_secret(
        client_name,
        &bundle.client_cert_pem,
        &bundle.client_key_pem,
        &bundle.ca_cert_pem,
    );

    api.create(&PostParams::default(), &server_secret)
        .await
        .into_diagnostic()
        .wrap_err_with(|| format!("failed to create secret {server_name}"))?;
    api.create(&PostParams::default(), &client_secret)
        .await
        .into_diagnostic()
        .wrap_err_with(|| format!("failed to create secret {client_name}"))?;
    Ok(())
}

fn tls_secret(name: &str, crt_pem: &str, key_pem: &str, ca_pem: &str) -> Secret {
    let mut data = BTreeMap::new();