verifier: use pki-playground API to generate test PKI

Author: flihp

Cargo.lock

@@ -17,6 +17,7 @@ resolver = "2"
 anyhow = { version = "1.0.103", default-features = false }
 async-trait = "0.1.89"
 attest.path = "attest"
+camino = { version = "1.2.4", default-features = false }
 chrono = { version = "0.4.45", default-features=false }
 clap = { version = "4.6.1", features = ["derive", "env"] }
 clap-verbosity = "2.1.0"
@@ -36,6 +37,7 @@ log = { version = "0.4.33", features = ["std"] }
 miette = { version = "7.6.0", features = ["fancy"] }
 p384 = { version = "0.13.1", default-features = false }
 pem-rfc7468 = { version = "1.0.0", default-features = false }
+pki-playground = { git = "https://github.com/oxidecomputer/pki-playground", rev = "bcd3bf2dfe36468c494eac17463a4e10be366b35" }
 rats-corim.git = "https://github.com/oxidecomputer/rats-corim"
 ron = "0.8"
 rpassword = "7.4.0"

Cargo.toml

@@ -26,6 +26,10 @@ tempfile.workspace = true
 thiserror.workspace = true
 x509-cert = { workspace = true, default-features = true }
 
+[build-dependencies]
+anyhow.workspace = true
+camino.workspace = true
+pki-playground.workspace = true
 
 [dev-dependencies]
 attest-data = { path = "../attest-data", features = ["std", "testing"] }

verifier/Cargo.toml

@@ -0,0 +1,31 @@
+// This Source Code Form is subject to the terms of the Mozilla Public
+// License, v. 2.0. If a copy of the MPL was not distributed with this
+// file, You can obtain one at https://mozilla.org/MPL/2.0/.
+
+use anyhow::{anyhow, Context, Result};
+use camino::Utf8PathBuf;
+use pki_playground::{config, OutputFileExistsBehavior};
+
+use std::env;
+
+fn main() -> Result<()> {
+    // output directory where we put:
+    // generated test inputs
+    let out = Utf8PathBuf::from(
+        env::var("OUT_DIR").context("Failed to get OUT_DIR")?,
+    );
+
+    let config_path = "test-pki.kdl";
+    let doc = config::load_and_validate(config_path.as_ref()).map_err(|e| {
+        anyhow!("Loading config from \"{}\" failed: {e:?}", config_path)
+    })?;
+
+    doc.write_key_pairs(out.clone(), OutputFileExistsBehavior::Skip)
+        .map_err(|e| anyhow!("write key pairs to {out}: {e:?}"))?;
+    doc.write_certificates(out.clone(), OutputFileExistsBehavior::Skip)
+        .map_err(|e| anyhow!("write certificates to {out}: {e:?}"))?;
+    doc.write_certificate_lists(out.clone(), OutputFileExistsBehavior::Skip)
+        .map_err(|e| anyhow!("write certificate chains to {out}: {e:?}"))?;
+
+    Ok(())
+}