nebula-cert: Make version 3 CAs, keys and certificates, and pq-extend v2 certificates in place

cmd/nebula-cert/main.go

@@ -89,6 +89,8 @@ func main() {
 		err = printCert(args[1:], os.Stdout, os.Stderr)
 	case "verify":
 		err = verify(args[1:], os.Stdout, os.Stderr)
+	case "pq-extend":
+		err = pqExtend(args[1:], os.Stdout, os.Stderr, StdinPasswordReader{})
 	default:
 		err = fmt.Errorf("unknown mode: %s", args[0])
 	}
@@ -122,6 +124,8 @@ func handleError(mode string, e error, out io.Writer) int {
 			printHelp(out)
 		case "verify":
 			verifyHelp(out)
+		case "pq-extend":
+			pqExtendHelp(out)
 		}
 	}
 
@@ -145,6 +149,7 @@ func help(err string, out io.Writer) {
 	fmt.Fprintln(out, "    "+signSummary())
 	fmt.Fprintln(out, "    "+printSummary())
 	fmt.Fprintln(out, "    "+verifySummary())
+	fmt.Fprintln(out, "    "+pqExtendSummary())
 	fmt.Fprintln(out, "")
 	fmt.Fprintf(out, "  To see usage for a given mode, use %s <mode> -h\n", os.Args[0])
 }