[wpr-go] Add support install test root CA on Android

web_page_replay_go/src/webpagereplay/installroot.go

 // Copyright 2017 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 package webpagereplay
 
 import (
+        "crypto/tls"
         "fmt"
         "os"
         "os/exec"
         "path/filepath"
         "runtime"
 )
 
 func getCAName() string {
         return "wpr-local"
 }
 func getDbPath() string {
         return "sql:" + filepath.Join(os.Getenv("HOME"), ".pki/nssdb")
 }
 
 // TODO: Implement root CA installation for platforms other than Linux.
-func InstallRoot(derBytes []byte) error {
+func InstallRoot(certPath string, keyPath string, isAndroid bool) error {
         if runtime.GOOS != "linux" {
                 fmt.Printf("Root certificate is skipped for %s\n", runtime.GOOS)
                 return nil
         }
+        if isAndroid {

[Tom Bergan, 2017/08/09 15:20:51]

Do you want to do this before the runtime.GOOS check? (If AdbInstallRoot only
works on linux, I'd add another runtime.GOOS check there.)

[xunjieli, 2017/08/09 15:51:32]

Done. I added a check here. 

+                fmt.Println("Installing test root CA on Android...")
+                return AdbInstallRoot(certPath)
+        }
+        fmt.Printf("Loading cert from %v\n", certPath)
+        fmt.Printf("Loading key from %v\n", keyPath)
+        rootCert, err := tls.LoadX509KeyPair(certPath, keyPath)
+        derBytes := rootCert.Certificate[0]
+        if err != nil {
+                return fmt.Errorf("error opening cert or key files: %v", err)
+        }
         CAName := getCAName()
         dbPath := getDbPath()
 
         fmt.Printf("Attempting to install root certificate in %q\n", dbPath)
 
-        RemoveRoot()
+        RemoveRoot(isAndroid)
         cmd := exec.Command("certutil", "-d", dbPath, "-A", "-n", CAName, "-t", "C,p,p")
         cmd.Stdout = os.Stdout
         cmd.Stderr = os.Stderr
 
         stdin, err := cmd.StdinPipe()
         if err != nil {
                 return err
         }
         if err := cmd.Start(); err != nil {
                 return err
         }
         if _, err := stdin.Write(derBytes); err != nil {
                 return err
         }
         stdin.Close()
         if err := cmd.Wait(); err != nil {
                 return fmt.Errorf("NSS certutil failed: %s\n", err)
         }
 
         fmt.Println("Root certificate should now be installed for NSS (i.e. Chrome).")
         return err
 }
 
-func RemoveRoot() {
+func RemoveRoot(isAndroid bool) {
         if runtime.GOOS != "linux" {
                 fmt.Printf("Root certificate is skipped for %s\n", runtime.GOOS)
                 return
         }
+        if isAndroid {

[Tom Bergan, 2017/08/09 15:20:50]

ditto here

[xunjieli, 2017/08/09 15:51:32]

Done.

+                fmt.Println("Uninstalling test root CA on Android...")
+                err := AdbUninstallRoot()
+                if err != nil {
+                        fmt.Fprintf(os.Stderr, "remove test root CA on android device failed %v", err)
+                }
+                return
+        }
         fmt.Printf("Removing root certificate %s from NSS (i.e. Chrome)\n", getCAName())
         // Try to delete any existing certificate. We ignore failures since the
         // root might not yet exist.
         cmd := exec.Command("certutil", "-d", getDbPath(), "-D", "-n", getCAName())
         cmd.Run()
 }