/*
Copyright 2018 The Kubernetes Authors.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

package main

import (
	"os"

	"k8s.io/klog"
)

type certsContainer struct {
	caCert, serverKey, serverCert []byte
}

type certsConfig struct {
	clientCaFile, tlsCertFile, tlsPrivateKey *string
}

func readFile(filePath string) []byte {
	file, err := os.Open(filePath)
	if err != nil {
		klog.Error(err)
		return nil
	}
	res := make([]byte, 5000)
	count, err := file.Read(res)
	if err != nil {
		klog.Error(err)
		return nil
	}
	klog.Infof("Successfully read %d bytes from %v", count, filePath)
	return res[:count]
}

func initCerts(config certsConfig) certsContainer {
	res := certsContainer{}
	res.caCert = readFile(*config.clientCaFile)
	res.serverCert = readFile(*config.tlsCertFile)
	res.serverKey = readFile(*config.tlsPrivateKey)
	return res
}

/*
Copyright 2018 The Kubernetes Authors.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

package main

import (
	"io/ioutil"

	"k8s.io/klog"
)

type certsContainer struct {
	caCert, serverKey, serverCert []byte
}

type certsConfig struct {
	clientCaFile, tlsCertFile, tlsPrivateKey *string
}

func readFile(filePath string) []byte {
	res, err := ioutil.ReadFile(filePath)
	if err != nil {
		klog.Errorf("Error reading certificate file at %s: %v", filePath, err)
		return nil
	}

	klog.V(3).Infof("Successfully read %d bytes from %v", len(res), filePath)
	return res
}

func initCerts(config certsConfig) certsContainer {
	res := certsContainer{}
	res.caCert = readFile(*config.clientCaFile)
	res.serverCert = readFile(*config.tlsCertFile)
	res.serverKey = readFile(*config.tlsPrivateKey)
	return res
}

Use ioutil for certificate file reading.
Use ioutil for certificate file reading.

Currently we read certificate files into a buffer of 5000 bytes. This
sets a max size for our certificates; above this max, we will get
invalid certs, most likely, leading to runtime bad certificate errors.
