[wpr-go] Add support install test root CA on Android

web_page_replay_go/src/webpagereplay/installroot.go

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 package webpagereplay
 
 import (
+        "crypto/tls"
         "fmt"
         "os"
         "os/exec"
         "path/filepath"
         "runtime"
 )
 
 func getCAName() string {
         return "wpr-local"
 }
 func getDbPath() string {
         return "sql:" + filepath.Join(os.Getenv("HOME"), ".pki/nssdb")
 }
 
-// TODO: Implement root CA installation for platforms other than Linux.
-func InstallRoot(derBytes []byte) error {
+// TODO: Implement root CA installation for platforms other than Linux and Android.
+func (i *Installer) InstallRoot(certFile string, keyFile string) error {
         if runtime.GOOS != "linux" {
                 fmt.Printf("Root certificate is skipped for %s\n", runtime.GOOS)
                 return nil
         }
+        if i.AndroidDeviceId != "" {
+                if runtime.GOOS != "linux" {
+                        return fmt.Errorf("test root CA for Android is only supported on a Linux host machine")
+                }
+                fmt.Println("Installing test root CA on Android...")
+                return i.AdbInstallRoot(certFile)
+        }
+        fmt.Printf("Loading cert from %v\n", certFile)
+        fmt.Printf("Loading key from %v\n", keyFile)
+        rootCert, err := tls.LoadX509KeyPair(certFile, keyFile)
+        if err != nil {
+                return fmt.Errorf("error opening cert or key files: %v", err)
+        }
+        derBytes := rootCert.Certificate[0]
         CAName := getCAName()
         dbPath := getDbPath()
 
         fmt.Printf("Attempting to install root certificate in %q\n", dbPath)
 
-        RemoveRoot()
+        i.RemoveRoot()
         cmd := exec.Command("certutil", "-d", dbPath, "-A", "-n", CAName, "-t", "C,p,p")
         cmd.Stdout = os.Stdout
         cmd.Stderr = os.Stderr
 
         stdin, err := cmd.StdinPipe()
         if err != nil {
                 return err
         }
         if err := cmd.Start(); err != nil {
                 return err
         }
         if _, err := stdin.Write(derBytes); err != nil {
                 return err
         }
         stdin.Close()
         if err := cmd.Wait(); err != nil {
                 return fmt.Errorf("NSS certutil failed: %s\n", err)
         }
 
         fmt.Println("Root certificate should now be installed for NSS (i.e. Chrome).")
         return err
 }
 
-func RemoveRoot() {
+func (i *Installer) RemoveRoot() {
         if runtime.GOOS != "linux" {
                 fmt.Printf("Root certificate is skipped for %s\n", runtime.GOOS)
                 return
         }
+        if i.AndroidDeviceId != "" {
+                if runtime.GOOS != "linux" {
+                        fmt.Printf("test root CA for Android is only supported on a Linux host machine")
+                        return
+                }
+                fmt.Println("Uninstalling test root CA on Android...")
+                err := i.AdbUninstallRoot()
+                if err != nil {
+                        fmt.Fprintf(os.Stderr, "remove test root CA on android device failed %v", err)
+                }
+                return
+        }
         fmt.Printf("Removing root certificate %s from NSS (i.e. Chrome)\n", getCAName())
         // Try to delete any existing certificate. We ignore failures since the
         // root might not yet exist.
         cmd := exec.Command("certutil", "-d", getDbPath(), "-D", "-n", getCAName())
         cmd.Run()
 }