swanctl --load-creds equivalent in govici about govici

[enr0n]

In swanctl, the load-creds command is a wrapper around a series of load-key and load-cert command requests. I.e., there is no direct load-creds command in the vici protocol.

To create an equivalent, you may start by doing:

type Cert struct {
        Flag string `vici:"flag"`
        Type string `vici:"type"`
        Data string `vici:"data"`
}

func LoadCert(s *vici.Session, cert *Cert) error {
        m, err := vici.MarshalMessage(cert)
        if err != nil {
                return err
        }

        _, err = s.CommandRequest("load-cert", m)

        return err
}

type Key struct {
        Type string `vici:"type"`
        Data string `vici:"data"`
}

func LoadKey(s *vici.Session, key *Key) error {
        m, err := vici.MarshalMessage(key)
        if err != nil {
                return err
        }

        _, err = s.CommandRequest("load-key", m)

        return err
}

func LoadCreds() {
        s, err := vici.NewSession()
        if err != nil {
                return err
        }
        defer s.Close()
        
        //  Iterate over directories with certs and keys, and make LoadCert and LoadKey calls...
}

Hope this helps.

[nnbu]

thank you for the explanation. I don't need certificate.
I used "load-shared" instead of "load-key". It worked for my case.
How is 'load-shared' different from 'load-key', apart from obviously they take a little different input ? But essentially, both accept 'Type' and "data' parameters.

[enr0n]

They are different in the types of credentials they load: load-shared is used to load shared secrets, like a PSK or EAP secret, whereas load-key loads a private key.

[nnbu]

thank you for the information