You can not select more than 25 topics
			Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
		
		
		
		
			
				
					192 lines
				
				3.9 KiB
			
		
		
			
		
	
	
					192 lines
				
				3.9 KiB
			| 
											6 months ago
										 | #!/usr/bin/env node | ||
|  | // -*- mode: js -*- | ||
|  | // vim: set filetype=javascript : | ||
|  | // Copyright 2015 Joyent, Inc.  All rights reserved. | ||
|  | 
 | ||
|  | var dashdash = require('dashdash'); | ||
|  | var sshpk = require('../lib/index'); | ||
|  | var fs = require('fs'); | ||
|  | var path = require('path'); | ||
|  | var getPassword = require('getpass').getPass; | ||
|  | 
 | ||
|  | var options = [ | ||
|  | 	{ | ||
|  | 		names: ['hash', 'H'], | ||
|  | 		type: 'string', | ||
|  | 		help: 'Hash algorithm (sha1, sha256, sha384, sha512)' | ||
|  | 	}, | ||
|  | 	{ | ||
|  | 		names: ['verbose', 'v'], | ||
|  | 		type: 'bool', | ||
|  | 		help: 'Display verbose info about key and hash used' | ||
|  | 	}, | ||
|  | 	{ | ||
|  | 		names: ['identity', 'i'], | ||
|  | 		type: 'string', | ||
|  | 		help: 'Path to key to use' | ||
|  | 	}, | ||
|  | 	{ | ||
|  | 		names: ['file', 'f'], | ||
|  | 		type: 'string', | ||
|  | 		help: 'Input filename' | ||
|  | 	}, | ||
|  | 	{ | ||
|  | 		names: ['out', 'o'], | ||
|  | 		type: 'string', | ||
|  | 		help: 'Output filename' | ||
|  | 	}, | ||
|  | 	{ | ||
|  | 		names: ['format', 't'], | ||
|  | 		type: 'string', | ||
|  | 		help: 'Signature format (asn1, ssh, raw)' | ||
|  | 	}, | ||
|  | 	{ | ||
|  | 		names: ['binary', 'b'], | ||
|  | 		type: 'bool', | ||
|  | 		help: 'Output raw binary instead of base64' | ||
|  | 	}, | ||
|  | 	{ | ||
|  | 		names: ['help', 'h'], | ||
|  | 		type: 'bool', | ||
|  | 		help: 'Shows this help text' | ||
|  | 	} | ||
|  | ]; | ||
|  | 
 | ||
|  | var parseOpts = {}; | ||
|  | 
 | ||
|  | if (require.main === module) { | ||
|  | 	var parser = dashdash.createParser({ | ||
|  | 		options: options | ||
|  | 	}); | ||
|  | 
 | ||
|  | 	try { | ||
|  | 		var opts = parser.parse(process.argv); | ||
|  | 	} catch (e) { | ||
|  | 		console.error('sshpk-sign: error: %s', e.message); | ||
|  | 		process.exit(1); | ||
|  | 	} | ||
|  | 
 | ||
|  | 	if (opts.help || opts._args.length > 1) { | ||
|  | 		var help = parser.help({}).trimRight(); | ||
|  | 		console.error('sshpk-sign: sign data using an SSH key\n'); | ||
|  | 		console.error(help); | ||
|  | 		process.exit(1); | ||
|  | 	} | ||
|  | 
 | ||
|  | 	if (!opts.identity) { | ||
|  | 		var help = parser.help({}).trimRight(); | ||
|  | 		console.error('sshpk-sign: the -i or --identity option ' + | ||
|  | 		    'is required\n'); | ||
|  | 		console.error(help); | ||
|  | 		process.exit(1); | ||
|  | 	} | ||
|  | 
 | ||
|  | 	var keyData = fs.readFileSync(opts.identity); | ||
|  | 	parseOpts.filename = opts.identity; | ||
|  | 
 | ||
|  | 	run(); | ||
|  | } | ||
|  | 
 | ||
|  | function run() { | ||
|  | 	var key; | ||
|  | 	try { | ||
|  | 		key = sshpk.parsePrivateKey(keyData, 'auto', parseOpts); | ||
|  | 	} catch (e) { | ||
|  | 		if (e.name === 'KeyEncryptedError') { | ||
|  | 			getPassword(function (err, pw) { | ||
|  | 				parseOpts.passphrase = pw; | ||
|  | 				run(); | ||
|  | 			}); | ||
|  | 			return; | ||
|  | 		} | ||
|  | 		console.error('sshpk-sign: error loading private key "' + | ||
|  | 		    opts.identity + '": ' + e.name + ': ' + e.message); | ||
|  | 		process.exit(1); | ||
|  | 	} | ||
|  | 
 | ||
|  | 	var hash = opts.hash || key.defaultHashAlgorithm(); | ||
|  | 
 | ||
|  | 	var signer; | ||
|  | 	try { | ||
|  | 		signer = key.createSign(hash); | ||
|  | 	} catch (e) { | ||
|  | 		console.error('sshpk-sign: error creating signer: ' + | ||
|  | 		    e.name + ': ' + e.message); | ||
|  | 		process.exit(1); | ||
|  | 	} | ||
|  | 
 | ||
|  | 	if (opts.verbose) { | ||
|  | 		console.error('sshpk-sign: using %s-%s with a %d bit key', | ||
|  | 		    key.type, hash, key.size); | ||
|  | 	} | ||
|  | 
 | ||
|  | 	var inFile = process.stdin; | ||
|  | 	var inFileName = 'stdin'; | ||
|  | 
 | ||
|  | 	var inFilePath; | ||
|  | 	if (opts.file) { | ||
|  | 		inFilePath = opts.file; | ||
|  | 	} else if (opts._args.length === 1) { | ||
|  | 		inFilePath = opts._args[0]; | ||
|  | 	} | ||
|  | 
 | ||
|  | 	if (inFilePath) | ||
|  | 		inFileName = path.basename(inFilePath); | ||
|  | 
 | ||
|  | 	try { | ||
|  | 		if (inFilePath) { | ||
|  | 			fs.accessSync(inFilePath, fs.R_OK); | ||
|  | 			inFile = fs.createReadStream(inFilePath); | ||
|  | 		} | ||
|  | 	} catch (e) { | ||
|  | 		console.error('sshpk-sign: error opening input file' + | ||
|  | 		     ': ' + e.name + ': ' + e.message); | ||
|  | 		process.exit(1); | ||
|  | 	} | ||
|  | 
 | ||
|  | 	var outFile = process.stdout; | ||
|  | 
 | ||
|  | 	try { | ||
|  | 		if (opts.out && !opts.identify) { | ||
|  | 			fs.accessSync(path.dirname(opts.out), fs.W_OK); | ||
|  | 			outFile = fs.createWriteStream(opts.out); | ||
|  | 		} | ||
|  | 	} catch (e) { | ||
|  | 		console.error('sshpk-sign: error opening output file' + | ||
|  | 		    ': ' + e.name + ': ' + e.message); | ||
|  | 		process.exit(1); | ||
|  | 	} | ||
|  | 
 | ||
|  | 	inFile.pipe(signer); | ||
|  | 	inFile.on('end', function () { | ||
|  | 		var sig; | ||
|  | 		try { | ||
|  | 			sig = signer.sign(); | ||
|  | 		} catch (e) { | ||
|  | 			console.error('sshpk-sign: error signing data: ' + | ||
|  | 			    e.name + ': ' + e.message); | ||
|  | 			process.exit(1); | ||
|  | 		} | ||
|  | 
 | ||
|  | 		var fmt = opts.format || 'asn1'; | ||
|  | 		var output; | ||
|  | 		try { | ||
|  | 			output = sig.toBuffer(fmt); | ||
|  | 			if (!opts.binary) | ||
|  | 				output = output.toString('base64'); | ||
|  | 		} catch (e) { | ||
|  | 			console.error('sshpk-sign: error converting signature' + | ||
|  | 			    ' to ' + fmt + ' format: ' + e.name + ': ' + | ||
|  | 			    e.message); | ||
|  | 			process.exit(1); | ||
|  | 		} | ||
|  | 
 | ||
|  | 		outFile.write(output); | ||
|  | 		if (!opts.binary) | ||
|  | 			outFile.write('\n'); | ||
|  | 		outFile.once('drain', function () { | ||
|  | 			process.exit(0); | ||
|  | 		}); | ||
|  | 	}); | ||
|  | } |