certmanager updates

pkg/cm509/x509.go

@@ -3,6 +3,7 @@ package cm509
 import (
 	"crypto/rand"
 	"crypto/rsa"
+	"crypto/tls"
 	"crypto/x509"
 	"crypto/x509/pkix"
 	"encoding/base64"
@@ -13,6 +14,23 @@ import (
 	"time"
 )
 
+func DoubleEncodedCertKeyMatch(cert, key string) error {
+	var err error
+	certPEM, err := base64.StdEncoding.DecodeString(cert)
+	if err != nil {
+		return err
+	}
+	keyPEM, err := base64.StdEncoding.DecodeString(key)
+	if err != nil {
+		return err
+	}
+	_, err = tls.X509KeyPair(certPEM, keyPEM)
+	if err != nil {
+		return err
+	}
+	return err
+}
+
 type CreateIssuerPairParams struct {
 	CommonName string
 	SignerCert string