Add support for key activation on remote KME zone (TODO test and doc)

Cargo.toml

@@ -29,10 +29,10 @@ rustls-pemfile = "2.0.0"
 log = "0.4.20"
 simple_logger = "4.3.3"
 notify = "6.1.1"
-clap = { version = "4.4.18", features = ["derive"] }
+reqwest = { version = "0.11.24" , features = ["native-tls", "blocking", "json"] }
 
 [dev-dependencies]
 assert_cmd = "2.0.12"
-reqwest = {version = "0.11.23", features = ["native-tls"]}
+reqwest = {version = "0.11.24", features = ["native-tls"]}
 serial_test = "2.0.0"
 const_format = "0.2.32"

certs/zone2/CA-zone2.crt

@@ -0,0 +1,30 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

certs/zone2/CA-zone2.csr

@@ -0,0 +1,26 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

certs/zone2/CA-zone2.key

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

certs/zone2/CA-zone2.srl

@@ -0,0 +1 @@
+2D286EC177465AB8DF0090DB0469A0AB0A973851

certs/zone2/client.cnf

@@ -0,0 +1,8 @@
+[client]
+basicConstraints = CA:FALSE
+nsCertType = client, email
+nsComment = "SAE Client Certificate"
+subjectKeyIdentifier = hash
+authorityKeyIdentifier = keyid,issuer
+keyUsage = critical, nonRepudiation, digitalSignature, keyEncipherment
+extendedKeyUsage = clientAuth, emailProtection

certs/zone2/generate-client-cert.sh

@@ -0,0 +1,9 @@
+#!/usr/bin/env bash
+
+SAE="sae3"
+
+openssl genrsa -out "$SAE.key" 4096
+openssl req -new -key "$SAE.key" -out "$SAE.csr" -sha256 -subj "/CN=$SAE Client certificate"
+openssl x509 -req -days 3650 -in "$SAE.csr" -sha256 -CA "CA-zone2.crt" -CAkey "CA-zone2.key" -CAcreateserial -out "$SAE.crt" -extfile "client.cnf" -extensions client
+cat "$SAE.key" "$SAE.crt" "CA-zone2.crt" > "$SAE.pem"
+openssl pkcs12 -export -out "$SAE.pfx" -inkey "$SAE.key" -in "$SAE.pem" -certfile "CA-zone2.crt"

certs/zone2/generate-root-ca.sh

@@ -0,0 +1,7 @@
+#!/usr/bin/env bash
+
+openssl genrsa -out "CA-zone2.key" 4096
+openssl req -new -key "CA-zone2.key" -out "CA-zone2.csr" -sha256 -subj '/CN=Root CA for KME in zone2'
+openssl x509 -req -days 3650 -in "CA-zone2.csr" -signkey "CA-zone2.key" -sha256 -out "CA-zone2.crt" -extfile "root-ca.cnf" -extensions root_ca
+sudo cp CA-zone2.crt /usr/local/share/ca-certificates/
+sudo update-ca-certificates

certs/zone2/generate_kme2_server_cert.sh

@@ -0,0 +1,4 @@
+#!/usr/bin/env bash
+
+openssl req -new -nodes -out kme2.csr -newkey rsa:4096 -keyout kme2.key -subj '/CN=localhost/C=FR/ST=Biot/L=Biot/O=Unice'
+openssl x509 -req -in kme2.csr -CA CA-zone2.crt -CAkey CA-zone2.key -CAcreateserial -out kme2.crt -days 3650 -sha256 -extfile kme2.v3.ext

certs/zone2/kme2.crt

@@ -0,0 +1,32 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

certs/zone2/kme2.csr

@@ -0,0 +1,27 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

certs/zone2/kme2.key

@@ -0,0 +1,52 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

certs/zone2/kme2.v3.ext

@@ -0,0 +1,8 @@
+authorityKeyIdentifier=keyid,issuer
+basicConstraints=CA:FALSE
+keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
+subjectAltName = @alt_names
+
+[alt_names]
+DNS.1 = localhost
+IP.1 = 127.0.0.1

certs/zone2/root-ca.cnf

@@ -0,0 +1,4 @@
+[root_ca]
+basicConstraints = critical,CA:TRUE,pathlen:1
+keyUsage = critical, nonRepudiation, cRLSign, keyCertSign
+subjectKeyIdentifier=hash

certs/zone2/sae3.crt

@@ -0,0 +1,32 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

certs/zone2/sae3.csr

@@ -0,0 +1,26 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----