MCPcopy Create free account
hub / github.com/NVIDIA/OpenShell / generate_server_cert

Function generate_server_cert

crates/openshell-server/src/tls.rs:360–370  ·  view source on GitHub ↗

Generate a new server cert + key in `dir`, signed by the given CA. Overwrites `server-cert.pem` and `server-key.pem`.

(ca_cert: &rcgen::Certificate, ca_key: &KeyPair, dir: &Path)

Source from the content-addressed store, hash-verified

358 /// Generate a new server cert + key in `dir`, signed by the given CA.
359 /// Overwrites `server-cert.pem` and `server-key.pem`.
360 fn generate_server_cert(ca_cert: &rcgen::Certificate, ca_key: &KeyPair, dir: &Path) {
361 let server_params = CertificateParams::new(vec!["localhost".to_string()])
362 .expect("failed to create server params");
363 let server_key = KeyPair::generate().expect("failed to generate server key");
364 let server_cert = server_params
365 .signed_by(&server_key, ca_cert, ca_key)
366 .expect("failed to sign server cert");
367
368 write_test_file(dir, "server-cert.pem", server_cert.pem().as_bytes());
369 write_test_file(dir, "server-key.pem", server_key.serialize_pem().as_bytes());
370 }
371
372 fn build_test_client_config(ca_path: &Path) -> Arc<rustls::ClientConfig> {
373 let ca_certs = load_certs(ca_path).expect("failed to load CA certs");

Calls 1

write_test_fileFunction · 0.85