chore: update the icon and cert

Signed-off-by: saltbo <saltbo@foxmail.com>

hack/certs/openssl-gen.sh

@@ -0,0 +1,8 @@
+#!/bin/bash
+set -ex
+# generate CA's  key
+openssl genrsa -aes256 -passout pass:1 -out ca.key.pem 4096
+openssl rsa -passin pass:1 -in ca.key.pem -out ca.key.pem.tmp
+mv ca.key.pem.tmp ca.key.pem
+
+openssl req -config openssl.cnf -key ca.key.pem -new -x509 -days 7300 -sha256 -extensions v3_ca -out ca.pem

hack/certs/openssl.cnf

@@ -0,0 +1,39 @@
+[ ca ]
+default_ca	= CA_default
+[ CA_default ]
+default_md	= sha256
+[ v3_ca ]
+subjectKeyIdentifier=hash
+authorityKeyIdentifier=keyid:always,issuer
+basicConstraints = critical,CA:true
+[ req ]
+distinguished_name	= req_distinguished_name
+[ req_distinguished_name ]
+countryName			= Country Name (2 letter code)
+countryName_default		= IL
+countryName_min			= 2
+countryName_max			= 2
+
+stateOrProvinceName		= State or Province Name (full name)
+stateOrProvinceName_default	= Center
+
+localityName			= Locality Name (eg, city)
+localityName_default		= Lod
+
+0.organizationName		= Organization Name (eg, company)
+0.organizationName_default	= Bonaysoft
+
+# we can do this but it is not needed normally :-)
+#1.organizationName		= Second Organization Name (eg, company)
+#1.organizationName_default	= World Wide Web Pty Ltd
+
+organizationalUnitName		= Organizational Unit Name (eg, section)
+organizationalUnitName_default	= Bonaysoft
+
+commonName			= Common Name (e.g. server FQDN or YOUR name)
+commonName_default		= relingo-desktop
+commonName_max			= 64
+
+emailAddress			= Email Address
+emailAddress_default		= saltbo@foxmail.com
+emailAddress_max		= 64

pkg/proxy/ca.go

@@ -5,6 +5,9 @@ import _ "embed"
 //go:embed ca.pem
 var ca []byte
 
+//go:embed ca.key
+var caKey []byte
+
 func GetCert() []byte {
 	return ca
 }

pkg/proxy/ca.key

@@ -0,0 +1,51 @@
+-----BEGIN RSA PRIVATE KEY-----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=
+-----END RSA PRIVATE KEY-----

pkg/proxy/ca.pem

@@ -1,34 +1,34 @@
 -----BEGIN CERTIFICATE-----
-MIIF9DCCA9ygAwIBAgIJAODqYUwoVjJkMA0GCSqGSIb3DQEBCwUAMIGOMQswCQYD
-VQQGEwJJTDEPMA0GA1UECAwGQ2VudGVyMQwwCgYDVQQHDANMb2QxEDAOBgNVBAoM
-B0dvUHJveHkxEDAOBgNVBAsMB0dvUHJveHkxGjAYBgNVBAMMEWdvcHJveHkuZ2l0
-aHViLmlvMSAwHgYJKoZIhvcNAQkBFhFlbGF6YXJsQGdtYWlsLmNvbTAeFw0xNzA0
-MDUyMDAwMTBaFw0zNzAzMzEyMDAwMTBaMIGOMQswCQYDVQQGEwJJTDEPMA0GA1UE
-CAwGQ2VudGVyMQwwCgYDVQQHDANMb2QxEDAOBgNVBAoMB0dvUHJveHkxEDAOBgNV
-BAsMB0dvUHJveHkxGjAYBgNVBAMMEWdvcHJveHkuZ2l0aHViLmlvMSAwHgYJKoZI
-hvcNAQkBFhFlbGF6YXJsQGdtYWlsLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIP
-ADCCAgoCggIBAJ4Qy+H6hhoY1s0QRcvIhxrjSHaO/RbaFj3rwqcnpOgFq07gRdI9
-3c0TFKQJHpgv6feLRhEvX/YllFYu4J35lM9ZcYY4qlKFuStcX8Jm8fqpgtmAMBzP
-sqtqDi8M9RQGKENzU9IFOnCV7SAeh45scMuI3wz8wrjBcH7zquHkvqUSYZz035t9
-V6WTrHyTEvT4w+lFOVN2bA/6DAIxrjBiF6DhoJqnha0SZtDfv77XpwGG3EhA/qoh
-hiYrDruYK7zJdESQL44LwzMPupVigqalfv+YHfQjbhT951IVurW2NJgRyBE62dLr
-lHYdtT9tCTCrd+KJNMJ+jp9hAjdIu1Br/kifU4F4+4ZLMR9Ueji0GkkPKsYdyMnq
-j0p0PogyvP1l4qmboPImMYtaoFuYmMYlebgC9LN10bL91K4+jLt0I1YntEzrqgJo
-WsJztYDw543NzSy5W+/cq4XRYgtq1b0RWwuUiswezmMoeyHZ8BQJe2xMjAOllASD
-fqa8OK3WABHJpy4zUrnUBiMuPITzD/FuDx4C5IwwlC68gHAZblNqpBZCX0nFCtKj
-YOcI2So5HbQ2OC8QF+zGVuduHUSok4hSy2BBfZ1pfvziqBeetWJwFvapGB44nIHh
-WKNKvqOxLNIy7e+TGRiWOomrAWM18VSR9LZbBxpJK7PLSzWqYJYTRCZHAgMBAAGj
-UzBRMB0GA1UdDgQWBBR4uDD9Y6x7iUoHO+32ioOcw1ICZTAfBgNVHSMEGDAWgBR4
-uDD9Y6x7iUoHO+32ioOcw1ICZTAPBgNVHRMBAf8EBTADAQH/MA0GCSqGSIb3DQEB
-CwUAA4ICAQAaCEupzGGqcdh+L7BzhX7zyd7yzAKUoLxFrxaZY34Xyj3lcx1XoK6F
-AqsH2JM25GixgadzhNt92JP7vzoWeHZtLfstrPS638Y1zZi6toy4E49viYjFk5J0
-C6ZcFC04VYWWx6z0HwJuAS08tZ37JuFXpJGfXJOjZCQyxse0Lg0tuKLMeXDCk2Y3
-Ba0noeuNyHRoWXXPyiUoeApkVCU5gIsyiJSWOjhJ5hpJG06rQNfNYexgKrrraEin
-o0jmEMtJMx5TtD83hSnLCnFGBBq5lkE7jgXME1KsbIE3lJZzRX1mQwUK8CJDYxye
-i6M/dzSvy0SsPvz8fTAlprXRtWWtJQmxgWENp3Dv+0Pmux/l+ilk7KA4sMXGhsfr
-bvTOeWl1/uoFTPYiWR/ww7QEPLq23yDFY04Q7Un0qjIk8ExvaY8lCkXMgc8i7sGY
-VfvOYb0zm67EfAQl3TW8Ky5fl5CcxpVCD360Bzi6hwjYixa3qEeBggOixFQBFWft
-8wrkKTHpOQXjn4sDPtet8imm9UYEtzWrFX6T9MFYkBR0/yye0FIh9+YPiTA6WB86
-NCNwK5Yl6HuvF97CIH5CdgO+5C7KifUtqTOL8pQKbNwy0S3sNYvB+njGvRpR7pKV
-BUnFpB/Atptqr4CUlTXrc5IPLAqAfmwk5IKcwy3EXUbruf9Dwz69YA==
+MIIF+jCCA+KgAwIBAgIJAN4RTV3AO9hhMA0GCSqGSIb3DQEBCwUAMIGRMQswCQYD
+VQQGEwJJTDEPMA0GA1UECAwGQ2VudGVyMQwwCgYDVQQHDANMb2QxEjAQBgNVBAoM
+CUJvbmF5c29mdDESMBAGA1UECwwJQm9uYXlzb2Z0MRgwFgYDVQQDDA9yZWxpbmdv
+LWRlc2t0b3AxITAfBgkqhkiG9w0BCQEWEnNhbHRib0Bmb3htYWlsLmNvbTAeFw0y
+MzAzMTkxNDEzMjVaFw00MzAzMTQxNDEzMjVaMIGRMQswCQYDVQQGEwJJTDEPMA0G
+A1UECAwGQ2VudGVyMQwwCgYDVQQHDANMb2QxEjAQBgNVBAoMCUJvbmF5c29mdDES
+MBAGA1UECwwJQm9uYXlzb2Z0MRgwFgYDVQQDDA9yZWxpbmdvLWRlc2t0b3AxITAf
+BgkqhkiG9w0BCQEWEnNhbHRib0Bmb3htYWlsLmNvbTCCAiIwDQYJKoZIhvcNAQEB
+BQADggIPADCCAgoCggIBAKldOUJYNy6rNHkTvd5MqM118Z8hAC49rrMYXM9C2fL4
+1qchD9ICnoZXzMxL/qzF4NQ9aLjHBgl4D3pHWURG3MT3he8y3nsUaKMLoVpsMtD5
+NtJuNV1rRkUMbcAMBWQC43MUTRQpOCju4bpS79qk2uS/j1NmieSXFlW0BNTOvX/U
+RgCVNPDL3IyXInumOwCKOYHV9ypbezn/lIKmbp82VON8qA0E4xqySZNVFTRYbjbL
+60YTOOWYCCJy9ySw4Tz76oilBKKPspX3QzYzRtwcDWfpqwualMj3TyWNmrSVzhro
+RfVWfdQHodHN/NInHcViOVBRe/Ls7VBS79d2YiXNk7JtVxQNe3d9PIqliAdV9ZWX
+Qy1JbgSGpPmhHzVQgvAXjcMuouePita5HuXTcyZSE0b+3Zl6scAst6jLCNaacD6p
+P3/nHA62r/wMoTbSb5EGpgWFcCjU/JO8Ab91e2TXpWgu3qVJDBt3mQegepGQVJlN
+owdCgWNImPYuMLZBelM7X66hRDE+H7ohqfqmCGFvD6rKc+OZJLq6UCxbhgGDtK9P
+t2oeAFAvMlUUsr0HVFXpkxLsfvjR7DexwKFe+oqlJyuCQOHGbzw6cvvSd8J95QQH
+ifXXcJBbMlfsdELYoljOn5hPMvnSx6ReICThd5NUuvpKeAgzE8rzTftWq94fPzd7
+AgMBAAGjUzBRMB0GA1UdDgQWBBQkgPFQzowYxL+KMOlr8egbLsG2ojAfBgNVHSME
+GDAWgBQkgPFQzowYxL+KMOlr8egbLsG2ojAPBgNVHRMBAf8EBTADAQH/MA0GCSqG
+SIb3DQEBCwUAA4ICAQCU6HgE6SanRgLN5L2+8ePMY2vK+2ZKcZiEGXKFfZr2bGsy
+ovisbkrWtxSrfpsCptEnGKLpuefAWMzeUGvPovcN12cYjQKGY3LjPc//YsNyCrSJ
+AZrC/SAkpEsqo92cwYCVnwR4r15nfk0BzB8m+REnwTegLPFm05GYrm8mwR7PaWWI
+XFSWUXh4kxp9znZhPTgO06u+jeroSxJOfDZIr2ZtxSYSdF+4z+BTx/o6fWtPBTO9
+VzZGLYS/b+lEC3xBubEZBzRmuMBTpMpmrk2562HjJeaSmsjcJul/QyyoRP4POdAr
+KDlTIW7tA8xrB155PGdCLU2TQ6Um97eIWQW21FbILBvKNVWw+2G3UFVIz5E8PuTc
+L583r9Fr7TPvhwv1eEVZApLaugMDXaNekBZ6L/RmtGBfJwtJe8MshS/DgntTFDBp
+2h9BIGWgY9dz2iNlT7O4LCc0jH5phRQjejPvdrheyYhcBH070HbGMeMtheMreiOQ
+0XDuh09LkvMIMgQ3aVAMQhP1G/NoD5t37c+sJ4/2tNcDbD2m3AE7hVf+n6StWF9r
+sKQpKT88FLmDh6LITQjPNNqF9j7fwkv6bhr1cEzoe3+whidlQ1tIFMfQZNJCO2gV
+/lHR2JAjXy+O3s3YnwYwwxHZafkReLcaLZ/rWTK0Zeo3MW9X2Bh1VULpScl/9Q==
 -----END CERTIFICATE-----

pkg/proxy/proxy.go

@@ -3,6 +3,7 @@ package proxy
 import (
 	"bytes"
 	"context"
+	"crypto/tls"
 	"encoding/json"
 	"io"
 	"log"
@@ -30,6 +31,12 @@ func NewProxy(query *query.Query, rc *relingo.Client) *Proxy {
 }
 
 func (p *Proxy) Run() error {
+	var caErr error
+	goproxy.GoproxyCa, caErr = tls.X509KeyPair(ca, caKey)
+	if caErr != nil {
+		return caErr
+	}
+
 	proxy := goproxy.NewProxyHttpServer()
 	proxy.OnRequest().HandleConnect(goproxy.AlwaysMitm)
 	proxy.OnRequest(goproxy.ReqHostIs("api.relingo.net:443")).DoFunc(func(req *http.Request, ctx *goproxy.ProxyCtx) (*http.Request, *http.Response) {