update repo

traefik/traefik-certs-dumper/dumper/kv/config.go

@@ -0,0 +1,11 @@
+package kv
+
+import "github.com/abronan/valkeyrie/store"
+
+// Config KV configuration.
+type Config struct {
+	Backend   store.Backend
+	Prefix    string
+	Endpoints []string
+	Options   *store.Config
+}

traefik/traefik-certs-dumper/dumper/kv/convert.go

@@ -0,0 +1,65 @@
+package kv
+
+import (
+	"github.com/go-acme/lego/certcrypto"
+	"github.com/go-acme/lego/registration"
+	"github.com/ldez/traefik-certs-dumper/v2/dumper"
+)
+
+// CertificateV1 is used to store certificate info
+type CertificateV1 struct {
+	Domain        string
+	CertURL       string
+	CertStableURL string
+	PrivateKey    []byte
+	Certificate   []byte
+}
+
+// AccountV1 is used to store lets encrypt registration info
+type AccountV1 struct {
+	Email              string
+	Registration       *registration.Resource
+	PrivateKey         []byte
+	KeyType            certcrypto.KeyType
+	DomainsCertificate DomainsCertificates
+	ChallengeCerts     map[string]*ChallengeCert
+	HTTPChallenge      map[string]map[string][]byte
+}
+
+// DomainsCertificates stores a certificate for multiple domains
+type DomainsCertificates struct {
+	Certs []*DomainsCertificate
+}
+
+// ChallengeCert stores a challenge certificate
+type ChallengeCert struct {
+	Certificate []byte
+	PrivateKey  []byte
+}
+
+// DomainsCertificate contains a certificate for multiple domains
+type DomainsCertificate struct {
+	Domains     dumper.Domain
+	Certificate *CertificateV1
+}
+
+// convertAccountV1ToV2 converts account information from version 1 to 2
+func convertAccountV1ToV2(account *AccountV1) *dumper.StoredData {
+	storedData := &dumper.StoredData{}
+	storedData.Account = &dumper.Account{
+		PrivateKey:   account.PrivateKey,
+		Registration: account.Registration,
+		Email:        account.Email,
+		KeyType:      account.KeyType,
+	}
+	var certs []*dumper.Certificate
+	for _, oldCert := range account.DomainsCertificate.Certs {
+		certs = append(certs, &dumper.Certificate{
+			Certificate: oldCert.Certificate.Certificate,
+			Domain:      oldCert.Domains,
+			Key:         oldCert.Certificate.PrivateKey,
+		})
+	}
+	storedData.Certificates = certs
+	return storedData
+}

traefik/traefik-certs-dumper/dumper/kv/kv.go

@@ -0,0 +1,99 @@
+package kv
+
+import (
+	"bytes"
+	"compress/gzip"
+	"encoding/json"
+	"fmt"
+	"io/ioutil"
+	"log"
+	"os"
+	"strings"
+
+	"github.com/abronan/valkeyrie"
+	"github.com/abronan/valkeyrie/store"
+	"github.com/ldez/traefik-certs-dumper/v2/dumper"
+	"github.com/ldez/traefik-certs-dumper/v2/hook"
+)
+
+const storeKeySuffix = "/acme/account/object"
+
+// Dump Dumps KV content to certificates.
+func Dump(config *Config, baseConfig *dumper.BaseConfig) error {
+	kvStore, err := valkeyrie.NewStore(config.Backend, config.Endpoints, config.Options)
+	if err != nil {
+		return fmt.Errorf("unable to create client of the store: %v", err)
+	}
+
+	storeKey := config.Prefix + storeKeySuffix
+
+	if baseConfig.Watch {
+		return watch(kvStore, storeKey, baseConfig)
+	}
+
+	pair, err := kvStore.Get(storeKey, nil)
+	if err != nil {
+		return fmt.Errorf("unable to retrieve %s value: %v", storeKey, err)
+	}
+
+	return dumpPair(pair, baseConfig)
+}
+
+func watch(kvStore store.Store, storeKey string, baseConfig *dumper.BaseConfig) error {
+	stopCh := make(<-chan struct{})
+
+	pairs, err := kvStore.Watch(storeKey, stopCh, nil)
+	if err != nil {
+		return err
+	}
+
+	for {
+		pair := <-pairs
+		if pair == nil {
+			return fmt.Errorf("could not fetch Key/Value pair for key %v", storeKey)
+		}
+
+		err = dumpPair(pair, baseConfig)
+		if err != nil {
+			return err
+		}
+
+		if isDebug() {
+			log.Println("Dumped new certificate data.")
+		}
+
+		hook.Exec(baseConfig.Hook)
+	}
+}
+
+func dumpPair(pair *store.KVPair, baseConfig *dumper.BaseConfig) error {
+	data, err := getStoredDataFromGzip(pair)
+	if err != nil {
+		return err
+	}
+
+	return dumper.Dump(data, baseConfig)
+}
+
+func getStoredDataFromGzip(pair *store.KVPair) (*dumper.StoredData, error) {
+	reader, err := gzip.NewReader(bytes.NewBuffer(pair.Value))
+	if err != nil {
+		return nil, fmt.Errorf("fail to create GZip reader: %v", err)
+	}
+
+	acmeData, err := ioutil.ReadAll(reader)
+	if err != nil {
+		return nil, fmt.Errorf("unable to read the pair content: %v", err)
+	}
+
+	account := &AccountV1{}
+	if err := json.Unmarshal(acmeData, &account); err != nil {
+		return nil, fmt.Errorf("unable marshal AccountV1: %v", err)
+	}
+
+	return convertAccountV1ToV2(account), nil
+}
+
+func isDebug() bool {
+	return strings.EqualFold(os.Getenv("TCD_DEBUG"), "true")
+}