wip(examples): debug cert example

Author: ndyakov

examples/entraid/clientcert/main.go

@@ -2,7 +2,9 @@ package main
 
 import (
 	"context"
+	"crypto/rsa"
 	"crypto/x509"
+	"encoding/base64"
 	"encoding/pem"
 	"fmt"
 	"log"
@@ -23,6 +25,8 @@ func main() {
 	if err != nil {
 		log.Fatalf("Failed to load config: %v", err)
 	}
+	fmt.Println(cfg)
+	fmt.Println(cfg.AzureCert)
 
 	// Create a confidential identity credentials provider with certificate authentication
 	cp, err := entraid.NewConfidentialCredentialsProvider(entraid.ConfidentialCredentialsProviderOptions{
@@ -36,7 +40,7 @@ func main() {
 			},
 			Scopes:           cfg.GetRedisScopes(),
 			ClientCert:       parseCertificates(cfg.AzureCert),
-			ClientPrivateKey: []byte(cfg.AzurePrivateKey),
+			ClientPrivateKey: parsePrivateKey(cfg.AzurePrivateKey),
 		},
 	})
 	if err != nil {
@@ -102,10 +106,37 @@ func main() {
 	fmt.Printf("Retrieved value from cluster: %s\n", clusterVal)
 }
 
+func decodeBase64Pem(pemData string) string {
+	decoded, err := base64.StdEncoding.DecodeString(pemData)
+	if err != nil {
+		log.Fatalf("Failed to decode base64: %v", err)
+	}
+	return string(decoded)
+}
+
+func parsePrivateKey(base64data string) *rsa.PrivateKey {
+	var privateKey *rsa.PrivateKey
+	var err error
+	pk, err := x509.ParsePKCS8PrivateKey([]byte(base64data))
+	if err != nil {
+		log.Printf("Failed to parse pkcs8 key: %v", err)
+	} else {
+		privateKey, _ = pk.(*rsa.PrivateKey)
+		return privateKey
+	}
+	pk, err = x509.ParsePKCS1PrivateKey([]byte(base64data))
+	if err != nil {
+		log.Fatalf("Failed to parse pkcs1 key: %v", err)
+	}
+	privateKey, _ = pk.(*rsa.PrivateKey)
+	return privateKey
+}
+
 func parseCertificates(pemData string) []*x509.Certificate {
 	var certs []*x509.Certificate
+	decoded := decodeBase64Pem(pemData)
 	for {
-		block, rest := pem.Decode([]byte(pemData))
+		block, rest := pem.Decode([]byte(decoded))
 		if block == nil {
 			break
 		}
@@ -116,7 +147,15 @@ func parseCertificates(pemData string) []*x509.Certificate {
 			}
 			certs = append(certs, cert)
 		}
-		pemData = string(rest)
+		decoded = string(rest)
+	}
+	if len(certs) == 0 {
+		decoded := decodeBase64Pem(pemData)
+		cert, err := x509.ParseCertificate([]byte(decoded))
+		if err != nil {
+			log.Fatalf("Failed to parse certificate: %v", err)
+		}
+		certs = append(certs, cert)
 	}
 	return certs
 }