Return DER of public key from create_key

Signed-off-by: Marcel Guzik <marcel.guzik@cumulocity.com>

Author: Bravo555

Cargo.lock

@@ -32,7 +32,7 @@ mime_guess = { workspace = true }
 mqtt_channel = { workspace = true }
 nix = { workspace = true }
 pad = { workspace = true }
-pem = { workspace = true }
+pem.workspace = true
 rasn = { workspace = true }
 rasn-cms = { workspace = true }
 reqwest = { workspace = true, features = [

crates/core/tedge/Cargo.toml

@@ -38,8 +38,13 @@ impl Command for CreateKeyCmd {
             token: None,
             label: self.label.clone(),
         };
-        pkcs11client.create_key(None, params)?;
+        let pubkey_der = pkcs11client.create_key(None, params)?;
+        let pubkey_pem = pem::Pem::new("PUBLIC KEY", pubkey_der);
+        let pubkey_pem = pem::encode(&pubkey_pem);
+
         eprintln!("New keypair was successfully created.");
+        eprintln!("Public key:\n{pubkey_pem}\n");
+
         Ok(())
     }
 }

crates/core/tedge/src/cli/certificate/create_key.rs

@@ -20,6 +20,7 @@ oid-registry = "0.8.1"
 percent-encoding.workspace = true
 postcard.workspace = true
 rand = "0.9.1"
+rsa = "0.9.8"
 rustls.workspace = true
 sd-listen-fds.workspace = true
 serde.workspace = true

crates/extensions/tedge-p11-server/Cargo.toml

@@ -114,7 +114,11 @@ impl TedgeP11Client {
         Ok(response.0)
     }
 
-    pub fn create_key(&self, uri: Option<String>, params: CreateKeyParams) -> anyhow::Result<()> {
+    pub fn create_key(
+        &self,
+        uri: Option<String>,
+        params: CreateKeyParams,
+    ) -> anyhow::Result<Vec<u8>> {
         let stream = UnixStream::connect(&self.socket_path).with_context(|| {
             format!(
                 "Failed to connect to tedge-p11-server UNIX socket at '{}'",
@@ -130,13 +134,13 @@ impl TedgeP11Client {
 
         let response = connection.read_frame()?;
 
-        let Frame1::CreateKeyResponse = response else {
+        let Frame1::CreateKeyResponse(pubkey_der) = response else {
             bail!("protocol error: bad response, expected create_key, received: {response:?}");
         };
 
         debug!("Sign complete");
 
-        Ok(())
+        Ok(pubkey_der)
     }
 
     fn do_request(&self, request: Frame1) -> anyhow::Result<Frame1> {

crates/extensions/tedge-p11-server/src/client.rs

@@ -91,7 +91,7 @@ pub enum Frame1 {
     ChooseSchemeResponse(ChooseSchemeResponse),
     SignResponse(SignResponse),
     CreateKeyRequest(CreateKeyRequest),
-    CreateKeyResponse,
+    CreateKeyResponse(Vec<u8>),
 }
 
 /// An error that can be returned to the client by the server.