handler_ca.go RawHistoryFolder

1package admin
2
3import (
4	"net/http"
5
6	"github.com/bnema/gordon/internal/adapters/dto"
7	"github.com/bnema/gordon/internal/domain"
8)
9
10const caDisabledMessage = "internal TLS is disabled on this server (no TLS-capable entrypoint configured)"
11
12func (h *Handler) handleCA(w http.ResponseWriter, r *http.Request) {
13	if !HasAccess(r.Context(), domain.AdminResourceStatus, domain.AdminActionRead) {
14		h.sendError(w, http.StatusForbidden, "insufficient permissions for status:read")
15		return
16	}
17	if r.Method != http.MethodGet {
18		h.sendError(w, http.StatusMethodNotAllowed, "method not allowed")
19		return
20	}
21	if h.caSvc == nil {
22		h.sendError(w, http.StatusNotFound, caDisabledMessage)
23		return
24	}
25	h.sendJSON(w, http.StatusOK, dto.CAResponse{
26		RootCN:             h.caSvc.RootCommonName(),
27		Fingerprint:        h.caSvc.RootFingerprint(),
28		IntermediateExpiry: h.caSvc.IntermediateExpiresAt().UTC(),
29		RootPEM:            string(h.caSvc.RootCertificate()),
30	})
31}