add cert install on macos

Author: umbynos

certificates/certificates.go

@@ -19,6 +19,8 @@ import (
 	"math/big"
 	"net"
 	"os"
+	"os/exec"
+	"runtime"
 	"strings"
 	"text/template"
 	"time"
@@ -261,6 +263,20 @@ func GenerateCertificates(certsDir *paths.Path) {
 	}
 }
 
+// InstallCertificates will install the certificates in the system keychain
+func InstallCertificates(certsDir *paths.Path) {
+	switch runtime.GOOS {
+	case "darwin":
+		stdoutStderr, err := exec.Command("sudo", "/usr/bin/osascript", "-e", `'do shell script "security add-trusted-cert -d -r trustRoot -k /Library/Keychains/System.keychain `, certsDir.String(), `/ca.cert.pem" with administration privileges'`).CombinedOutput()
+		if err != nil {
+			log.Errorf("cannot install certificate in the system keychain: %s", err)
+		}
+		log.Infof("stdout: %s", stdoutStderr)
+	default:
+		log.Infof("cannot install certificate: OS not supported")
+	}
+}
+
 // CertHandler will expone the certificate (we do not know why this was required)
 func CertHandler(c *gin.Context) {
 	if strings.Contains(c.Request.UserAgent(), "Firefox") {

systray/systray_real.go

@@ -64,7 +64,7 @@ func (s *Systray) start() {
 	mRmCrashes := systray.AddMenuItem("Remove crash reports", "")
 	s.updateMenuItem(mRmCrashes, config.LogsIsEmpty())
 
-	mGenCerts := systray.AddMenuItem("Generate HTTPS certificates", "HTTPS Certs")
+	mGenCerts := systray.AddMenuItem("Generate and Install HTTPS certificates", "HTTPS Certs")
 	s.updateMenuItem(mGenCerts, config.CertsExist())
 
 	// Add pause/quit
@@ -90,6 +90,7 @@ func (s *Systray) start() {
 				s.updateMenuItem(mRmCrashes, config.LogsIsEmpty())
 			case <-mGenCerts.ClickedCh:
 				cert.GenerateCertificates(config.GetCertificatesDir())
+				cert.InstallCertificates(config.GetCertificatesDir())
 				s.Restart()
 			case <-mPause.ClickedCh:
 				s.Pause()