From 403ea232211b3d808dc79a4f4fc8a0d4ca7991db Mon Sep 17 00:00:00 2001
From: Janik Knodel <10290002+led0nk@users.noreply.github.com>
Date: Tue, 4 Feb 2025 15:26:42 +0100
Subject: [PATCH] removal of unused GenerateCert

---
 .DS_Store                     | Bin 0 -> 6148 bytes
 opcua_plugin/generate_cert.go |  62 ----------------------------------
 2 files changed, 62 deletions(-)
 create mode 100644 .DS_Store

diff --git a/.DS_Store b/.DS_Store
new file mode 100644
index 0000000000000000000000000000000000000000..80be809d135ea8096e259f9487ae55d81c7155ee
GIT binary patch
literal 6148
zcmeH~Jr2S!425lAKw|00n1usyg9yP1xBvpg1Of@zb9A16778<}(6eNJu~Vz<8=6`~
zboD$gMLH3g!i}=9&@)9omWN#Ab~@e<`|I^=CAU%13h+*P`?*a}0V+TRr~nn90s~SY
z5Ax}3K+nWSp#oH37z)_;p}>tb*@FJ*K=2U&oS^K6wa*e@u>x3=Er<$CqZN!+^)bZi
z-VT<$t|nVB+C_8t(7dzS6a&*}7cEF&S{)2jfC}^!7)RdO`M-gGoBw+)OsN1B_%j7`
zvfi#&c&R*FKVHx3yR6!}!9l+q;q4~?i5<mrxEuD1Ex?*=K~!M;5pWq8sK8GZcmbSc
B5q|&x

literal 0
HcmV?d00001

diff --git a/opcua_plugin/generate_cert.go b/opcua_plugin/generate_cert.go
index 1feae1f..eafab99 100644
--- a/opcua_plugin/generate_cert.go
+++ b/opcua_plugin/generate_cert.go
@@ -178,68 +178,6 @@ func GenerateCertWithMode(
 	return certPEM, keyPEM, nil
 }
 
-func GenerateCert(host string, rsaBits int, validFor time.Duration) (certPEM, keyPEM []byte, err error) {
-	if len(host) == 0 {
-		return nil, nil, fmt.Errorf("missing required host parameter")
-	}
-	if rsaBits == 0 {
-		rsaBits = 2048
-	}
-
-	priv, err := rsa.GenerateKey(rand.Reader, rsaBits)
-	if err != nil {
-		return nil, nil, fmt.Errorf("failed to generate private key: %s", err)
-	}
-
-	notBefore := time.Now()
-	notAfter := notBefore.Add(validFor)
-
-	// Use 127 bits instead of 128 to ensure the serial number is always positive.
-	// In ASN.1 DER encoding (used by X.509), integers are signed. If the most significant bit (MSB)
-	// is set (i.e., 1), the integer is interpreted as negative. By limiting the serial number
-	// to 127 bits, we guarantee that the MSB is 0, ensuring the serial number remains positive
-	// and complies with RFC 5280 requirements, thereby preventing parsing errors like
-	// "x509: negative serial number".
-	serialNumberLimit := new(big.Int).Lsh(big.NewInt(1), 127)
-	serialNumber, err := rand.Int(rand.Reader, serialNumberLimit)
-	if err != nil {
-		return nil, nil, fmt.Errorf("failed to generate serial number: %s", err)
-	}
-
-	template := x509.Certificate{
-		SerialNumber: serialNumber,
-		Subject: pkix.Name{
-			CommonName:   "benthos-umh",
-			Organization: []string{"UMH"},
-		},
-		NotBefore: notBefore,
-		NotAfter:  notAfter,
-
-		KeyUsage:              x509.KeyUsageContentCommitment | x509.KeyUsageKeyEncipherment | x509.KeyUsageDigitalSignature | x509.KeyUsageDataEncipherment | x509.KeyUsageCertSign,
-		ExtKeyUsage:           []x509.ExtKeyUsage{x509.ExtKeyUsageServerAuth, x509.ExtKeyUsageClientAuth},
-		BasicConstraintsValid: true,
-	}
-
-	hosts := strings.Split(host, ",")
-	for _, h := range hosts {
-		if ip := net.ParseIP(h); ip != nil {
-			template.IPAddresses = append(template.IPAddresses, ip)
-		} else {
-			template.DNSNames = append(template.DNSNames, h)
-		}
-		if uri, err := url.Parse(h); err == nil {
-			template.URIs = append(template.URIs, uri)
-		}
-	}
-
-	derBytes, err := x509.CreateCertificate(rand.Reader, &template, &template, publicKey(priv), priv)
-	if err != nil {
-		return nil, nil, fmt.Errorf("failed to create certificate: %s", err)
-	}
-
-	return pem.EncodeToMemory(&pem.Block{Type: "CERTIFICATE", Bytes: derBytes}), pem.EncodeToMemory(pemBlockForKey(priv)), nil
-}
-
 func publicKey(priv interface{}) interface{} {
 	switch k := priv.(type) {
 	case *rsa.PrivateKey: