feat: persist and reuse generated https certificates

src/_cert.ts

@@ -2,12 +2,16 @@
 import { promisify } from "node:util";
 import nodeOS from "node:os";
 import { promises as fs } from "node:fs";
+import { mkdir, writeFile } from "node:fs/promises";
 import type nodeForge from "node-forge";
 import forge from "node-forge";
 import ipRegex from "ip-regex";
 import { defu } from "defu";
+import { resolve } from "pathe";
 import type { Certificate, HTTPSOptions } from "./types";
 
+const certificateDirectory = "node_modules/.listhen/certs/";
+
 export interface CertificateOptions {
   validityDays: number;
   subject: nodeForge.pki.CertificateField[];
@@ -40,10 +44,36 @@
   passphrase?: string;
 }
 
+function pathExists(path: string) {
+  return new Promise((resolve) => {
+    fs.access(path, fs.constants.F_OK)
+      .then(() => resolve(true))
+      .catch(() => resolve(false));
+  });
+}
+
 export async function resolveCertificate(
   options: HTTPSOptions,
 ): Promise<Certificate> {
   let https: Certificate;
+
+  if (typeof options === "object" && options.reuse) {
+    // Reuse previously autogenerated certificates if exists
+    const certsExists = await pathExists(certificateDirectory + "certs.json");
+
+    if (certsExists) {
+      const certs = JSON.parse(
+        (await fs.readFile(certificateDirectory + "certs.json")).toString(
+          "utf8",
+        ),
+      );
+      return {
+        cert: certs.cert + certs.caCert,
+        key: certs.key,
+      };
+    }
+  }
+
   if (typeof options === "object" && options.key && options.cert) {
     // Resolve actual certificate and cert
     https = await resolveCert(options);
@@ -70,7 +100,8 @@
       cert: forge.pki.certificateToPem(_cert!),
     };
   } else {
-    const { cert } = await generateCertificates(options);
+    const { cert, ca } = await generateCertificates(options);
+    cert.cert += ca.cert;
     https = cert;
   }
 
@@ -95,6 +126,8 @@
   caOptions.passphrase = options.signingKeyPassphrase;
   const ca = await generateCACert(caOptions);
 
+  await mkdir(resolve(certificateDirectory), { recursive: true });
+
   const domains = Array.isArray(options.domains)
     ? options.domains
     : ["localhost", "127.0.0.1", "::1"];
@@ -106,7 +139,24 @@
     signingKey: ca.key,
     domains,
   });
-  return { ca, cert };
+
+  await writeFile(
+    resolve(certificateDirectory + "certs.json"),
+    JSON.stringify({
+      cert: cert.cert,
+      key: cert.key,
+      caCert: ca.cert,
+      caKey: ca.key,
+    }),
+  );
+
+  return {
+    ca,
+    cert: {
+      cert: cert.cert,
+      key: cert.key,
+    },
+  };
 }
 
 async function resolveCert(options: HTTPSOptions): Promise<Certificate> {

src/cli.ts

@@ -94,6 +94,11 @@
       type: "boolean",
       description: "Enable HTTPS",
     },
+    "https.reuse": {
+      type: "boolean",
+      description: "Reuse previously autogenerated certificate",
+      default: false,
+    },
     "https.cert": {
       type: "string",
       description: "Path to TLS certificate used with HTTPS in PEM format",
@@ -160,6 +165,7 @@
     tunnel: args.tunnel,
     https: args.https
       ? <HTTPSOptions>{
+          reuse: args["https.reuse"],
           cert: args["https.cert"],
           key: args["https.key"],
           pfx: args["https.pfx"],

src/types.ts

@@ -13,6 +13,7 @@ export interface Certificate {
 }
 
 export interface HTTPSOptions {
+  reuse?: boolean;
   cert?: string;
   key?: string;
   pfx?: string;