增加自定义证书支持

README.md

@@ -43,6 +43,11 @@ curl -x localhost:8080 https://www.baidu.com
 中间人代理, 解密HTTPS
 ---
 系统需导入根证书 mitm-proxy.crt
+---
+.p12证书转换 
+openssl pkcs12 -in 1111.p12 -nocerts -nodes -out 1.key
+openssl rsa -in 1.key -out apple_pay_pri.pem
+openssl pkcs12 -in 1111.p12 -out filename.cer
 ```go
 package main
 
@@ -53,6 +58,7 @@ import (
 	"time"
 
 	"github.com/ouqiang/goproxy"
+    "github.com/ouqiang/goproxy/cert"
 )
 // 实现证书缓存接口
 type Cache struct {
@@ -72,6 +78,12 @@ func (c *Cache) Get(host string) *tls.Certificate {
 }
 
 func main() {
+    crtData, err := ioutil.ReadFile("resources/filename.crt")
+    fmt.Println(err)
+    pemData, err := ioutil.ReadFile("resources/apple_pay_pri.pem")
+    fmt.Println(err)
+
+    cert.ResetTlsKey(pemData, crtData)
 	proxy := goproxy.New(goproxy.WithDecryptHTTPS(&Cache{}))
 	server := &http.Server{
 		Addr:         ":8080",

cert/certificate.go

@@ -127,17 +127,7 @@ var (
 )
 
 func init() {
-	var err error
-	block, _ := pem.Decode(defaultRootCAPem)
-	defaultRootCA, err = x509.ParseCertificate(block.Bytes)
-	if err != nil {
-		panic(fmt.Errorf("加载根证书失败: %s", err))
-	}
-	block, _ = pem.Decode(defaultRootKeyPem)
-	defaultRootKey, err = x509.ParsePKCS1PrivateKey(block.Bytes)
-	if err != nil {
-		panic(fmt.Errorf("加载根证书私钥失败: %s", err))
-	}
+	ResetTlsKey(defaultRootKeyPem, defaultRootCAPem)
 }
 
 // Certificate 证书管理
@@ -152,6 +142,23 @@ type Pair struct {
 	PrivateKeyBytes []byte
 }
 
+// 允许用户设置用户证书
+// rootKeyPem   PRIVATE KEY 文件
+// rootCaPem    ert 文件
+func ResetTlsKey(rootKeyPem, rootCaPem []byte)  {
+	var err error
+	block, _ := pem.Decode(rootCaPem)
+	defaultRootCA, err = x509.ParseCertificate(block.Bytes)
+	if err != nil {
+		panic(fmt.Errorf("加载根证书失败: %s", err))
+	}
+	block, _ = pem.Decode(rootKeyPem)
+	defaultRootKey, err = x509.ParsePKCS1PrivateKey(block.Bytes)
+	if err != nil {
+		panic(fmt.Errorf("加载根证书私钥失败: %s", err))
+	}
+}
+
 func NewCertificate(cache Cache) *Certificate {
 	return &Certificate{
 		cache: cache,