owncast/activitypub/crypto/keys.go

package crypto

import (
	"crypto/rand"
	"crypto/rsa"
	"crypto/x509"
	"encoding/pem"
	"errors"
	"net/url"

	"github.com/owncast/owncast/persistence/configrepository"
	log "github.com/sirupsen/logrus"
)

// GetPublicKey will return the public key for the provided actor.
func GetPublicKey(actorIRI *url.URL) PublicKey {
	configRepository := configrepository.Get()

	key := configRepository.GetPublicKey()
	idURL, err := url.Parse(actorIRI.String() + "#main-key")
	if err != nil {
		log.Errorln("unable to parse actor iri string", idURL, err)
	}

	return PublicKey{
		ID:           idURL,
		Owner:        actorIRI,
		PublicKeyPem: key,
	}
}

// GetPrivateKey will return the internal server private key.
func GetPrivateKey() *rsa.PrivateKey {
	configRepository := configrepository.Get()

	key := configRepository.GetPrivateKey()

	block, _ := pem.Decode([]byte(key))
	if block == nil {
		log.Errorln(errors.New("failed to parse PEM block containing the key"))
		return nil
	}

	priv, err := x509.ParsePKCS1PrivateKey(block.Bytes)
	if err != nil {
		log.Errorln("unable to parse private key", err)
		return nil
	}

	return priv
}

// GenerateKeys will generate the private/public key pair needed for federation.
func GenerateKeys() ([]byte, []byte, error) {
	// generate key
	privatekey, err := rsa.GenerateKey(rand.Reader, 2048)
	if err != nil {
		log.Errorln("Cannot generate RSA key", err)
		return nil, nil, err
	}
	publickey := &privatekey.PublicKey

	privateKeyBytes := x509.MarshalPKCS1PrivateKey(privatekey)
	privateKeyBlock := &pem.Block{
		Type:  "RSA PRIVATE KEY",
		Bytes: privateKeyBytes,
	}
	privatePem := pem.EncodeToMemory(privateKeyBlock)

	publicKeyBytes, err := x509.MarshalPKIXPublicKey(publickey)
	if err != nil {
		log.Errorln("error when dumping publickey:", err)
		return nil, nil, err
	}
	publicKeyBlock := &pem.Block{
		Type:  "PUBLIC KEY",
		Bytes: publicKeyBytes,
	}
	publicPem := pem.EncodeToMemory(publicKeyBlock)

	return privatePem, publicPem, nil
}