feat: 支持证书托管和节点自动安装

2026-09-29 13:06:56 +08:00
parent ab7d1c937a
commit 586c2399d1
20 changed files with 1600 additions and 20 deletions
@@ -0,0 +1,38 @@
+import { execFileSync } from "node:child_process";
+import { mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import path from "node:path";
+export function certificateFixture(domain = "*.p.xn--876a.net") {
+  const dir = mkdtempSync(path.join(tmpdir(), "hy2-cert-fixture-"));
+  try {
+    writeFileSync(
+      path.join(dir, "openssl.cnf"),
+      `[req]\nprompt=no\ndistinguished_name=dn\nx509_extensions=ext\n[dn]\nCN=${domain}\n[ext]\nsubjectAltName=DNS:${domain}\n`,
+    );
+    execFileSync(
+      "openssl",
+      [
+        "req",
+        "-x509",
+        "-newkey",
+        "rsa:2048",
+        "-nodes",
+        "-keyout",
+        path.join(dir, "key"),
+        "-out",
+        path.join(dir, "crt"),
+        "-days",
+        "60",
+        "-config",
+        path.join(dir, "openssl.cnf"),
+      ],
+      { stdio: "ignore" },
+    );
+    return {
+      certificate: readFileSync(path.join(dir, "crt"), "utf8"),
+      privateKey: readFileSync(path.join(dir, "key"), "utf8"),
+    };
+  } finally {
+    rmSync(dir, { recursive: true, force: true });
+  }
+}