proxmox-mirrors/pve-common
1
0
Fork 0
mirror of https://git.proxmox.com/git/pve-common synced 2025-04-28 15:57:11 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

certificate: add subroutine that checks if cert and key match

Browse Source 
This is done here in order to allow other packages to make use of
this subroutine.

Signed-off-by: Max Carrara <m.carrara@proxmox.com>
This commit is contained in:
Max Carrara 2023-03-03 18:57:02 +01:00 committed by Fabian Grünbichler
parent d8a0dff1b5
commit a3baf76738
1 changed files with 41 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

41
src/PVE/Certificate.pm
View File

@ -228,6 +228,47 @@ sub get_certificate_fingerprint {
return $fp;
}
sub certificate_matches_key {
my ($cert_path, $key_path) = @_;
die "No certificate path given!\n" if !$cert_path;
die "No certificate key path given!\n" if !$key_path;
die "Certificate at '$cert_path' does not exist!\n" if ! -e $cert_path;
die "Certificate key '$key_path' does not exist!\n" if ! -e $key_path;
my $ctx = Net::SSLeay::CTX_new()
or $ssl_die->(
"Failed to create SSL context in order to verify private key"
);
eval {
my $filetype = &Net::SSLeay::FILETYPE_PEM;
Net::SSLeay::CTX_use_PrivateKey_file($ctx, $key_path, $filetype)
or $ssl_die->(
"Failed to load private key from '$key_path' into SSL context"
);
Net::SSLeay::CTX_use_certificate_file($ctx, $cert_path, $filetype)
or $ssl_die->(
"Failed to load certificate from '$cert_path' into SSL context"
);
Net::SSLeay::CTX_check_private_key($ctx)
or $ssl_die->(
"Failed to validate private key and certificate"
);
};
my $err = $@;
Net::SSLeay::CTX_free($ctx);
die $err if $err;
return 1;
}
sub get_certificate_info {
my ($cert_path) = @_;