mobileconfig.go RawHistoryFolder

1package pki
2
3import (
4	"encoding/base64"
5	"fmt"
6	"html"
7
8	"github.com/google/uuid"
9)
10
11// GenerateMobileconfig generates an iOS configuration profile containing
12// the root CA certificate for one-tap trust installation.
13func GenerateMobileconfig(rootDER []byte, rootCN string) []byte {
14	b64Cert := base64.StdEncoding.EncodeToString(rootDER)
15	profileUUID := uuid.New().String()
16	certUUID := uuid.New().String()
17
18	safeCN := html.EscapeString(rootCN)
19	profile := fmt.Sprintf(`<?xml version="1.0" encoding="UTF-8"?>
20<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
21<plist version="1.0">
22<dict>
23	<key>PayloadContent</key>
24	<array>
25		<dict>
26			<key>PayloadCertificateFileName</key>
27			<string>gordon-ca.crt</string>
28			<key>PayloadContent</key>
29			<data>%s</data>
30			<key>PayloadDescription</key>
31			<string>Installs the Gordon internal CA root certificate</string>
32			<key>PayloadDisplayName</key>
33			<string>%s</string>
34			<key>PayloadIdentifier</key>
35			<string>dev.gordon.ca.%s</string>
36			<key>PayloadType</key>
37			<string>com.apple.security.root</string>
38			<key>PayloadUUID</key>
39			<string>%s</string>
40			<key>PayloadVersion</key>
41			<integer>1</integer>
42		</dict>
43	</array>
44	<key>PayloadDescription</key>
45	<string>Trust Gordon's internal Certificate Authority for HTTPS access</string>
46	<key>PayloadDisplayName</key>
47	<string>Gordon CA Trust</string>
48	<key>PayloadIdentifier</key>
49	<string>dev.gordon.ca-profile</string>
50	<key>PayloadType</key>
51	<string>Configuration</string>
52	<key>PayloadUUID</key>
53	<string>%s</string>
54	<key>PayloadVersion</key>
55	<integer>1</integer>
56</dict>
57</plist>`, b64Cert, safeCN, certUUID, certUUID, profileUUID)
58
59	return []byte(profile)
60}