| // Copyright 2015 The Vanadium Authors. All rights reserved. |
| // Use of this source code is governed by a BSD-style |
| // license that can be found in the LICENSE file. |
| package main |
| |
| import ( |
| "fmt" |
| |
| "v.io/v23" |
| "v.io/v23/context" |
| "v.io/v23/security" |
| |
| "v.io/x/lib/cmdline" |
| "v.io/x/lib/ibe" |
| "v.io/x/ref/lib/signals" |
| "v.io/x/ref/lib/v23cmd" |
| _ "v.io/x/ref/runtime/factories/roaming" |
| iroot "v.io/x/ref/services/iberoot/iberootd/internal" |
| ) |
| |
| var ( |
| genmode bool |
| keyDir string |
| objName string |
| idpName string |
| ) |
| |
| func main() { |
| cmdRootD.Flags.StringVar(&keyDir, "key-dir", "", "The directory where the master private key and params are stored.") |
| cmdRootD.Flags.BoolVar(&genmode, "generate", false, "Generate fresh master private key and params, save them in the directory specified by --key-dir and exit") |
| // TODO(ataly): We could also obtain this name from the default |
| // blessing of this service. Unfortuantely that gets messy when |
| // there are multiple default blessings, and it forces starting |
| // this service under the same set of blessings as the identity |
| // provider. Therefore for now we keep the mapping between this |
| // service and the IDP explicit by taking in the IDP's blessing |
| // name as a flag. This TODO is for revisiting this choice in the |
| // future. |
| cmdRootD.Flags.StringVar(&idpName, "idp", "", "The name of the identity provider represented by this service.") |
| cmdRootD.Flags.StringVar(&objName, "name", "", "The name to publish for this service.") |
| cmdline.HideGlobalFlagsExcept() |
| cmdline.Main(cmdRootD) |
| } |
| |
| var cmdRootD = &cmdline.Command{ |
| Runner: v23cmd.RunnerFunc(runRootD), |
| Name: "iberootd", |
| Short: "Runs the bcrypter.Root interface daemon.", |
| Long: "Command iberootd runs the bcrypter.Root interface daemon.", |
| } |
| |
| func runRootD(ctx *context.T, env *cmdline.Env, args []string) error { |
| if len(keyDir) == 0 { |
| return env.UsageErrorf("-key-dir must be specified") |
| } |
| if genmode { |
| master, err := ibe.SetupBB2() |
| if err != nil { |
| return fmt.Errorf("ibe.SetupBB2() failed: %v", err) |
| } |
| if err := iroot.SaveMaster(master, keyDir); err != nil { |
| return fmt.Errorf("SaveMaster failed: %v", err) |
| } |
| return nil |
| } |
| if len(objName) == 0 { |
| return env.UsageErrorf("-name must be specified") |
| } |
| if len(idpName) == 0 { |
| return env.UsageErrorf("-idp must be specified") |
| } |
| root, err := iroot.NewRootServer(keyDir, idpName) |
| if err != nil { |
| return fmt.Errorf("Cannot create iberoot.Root object: %v", err) |
| } |
| ctx, server, err := v23.WithNewServer(ctx, objName, root, security.AllowEveryone()) |
| if err != nil { |
| return fmt.Errorf("WithNewServer failed: %v", err) |
| } |
| fmt.Println("ENDPOINT=", server.Status().Endpoints[0].Name()) |
| <-signals.ShutdownOnSignals(ctx) |
| return nil |
| } |