[6a3a178] | 1 | #!/usr/bin/env node
|
---|
| 2 | // -*- mode: js -*-
|
---|
| 3 | // vim: set filetype=javascript :
|
---|
| 4 | // Copyright 2015 Joyent, Inc. All rights reserved.
|
---|
| 5 |
|
---|
| 6 | var dashdash = require('dashdash');
|
---|
| 7 | var sshpk = require('../lib/index');
|
---|
| 8 | var fs = require('fs');
|
---|
| 9 | var path = require('path');
|
---|
| 10 | var getPassword = require('getpass').getPass;
|
---|
| 11 |
|
---|
| 12 | var options = [
|
---|
| 13 | {
|
---|
| 14 | names: ['hash', 'H'],
|
---|
| 15 | type: 'string',
|
---|
| 16 | help: 'Hash algorithm (sha1, sha256, sha384, sha512)'
|
---|
| 17 | },
|
---|
| 18 | {
|
---|
| 19 | names: ['verbose', 'v'],
|
---|
| 20 | type: 'bool',
|
---|
| 21 | help: 'Display verbose info about key and hash used'
|
---|
| 22 | },
|
---|
| 23 | {
|
---|
| 24 | names: ['identity', 'i'],
|
---|
| 25 | type: 'string',
|
---|
| 26 | help: 'Path to key to use'
|
---|
| 27 | },
|
---|
| 28 | {
|
---|
| 29 | names: ['file', 'f'],
|
---|
| 30 | type: 'string',
|
---|
| 31 | help: 'Input filename'
|
---|
| 32 | },
|
---|
| 33 | {
|
---|
| 34 | names: ['out', 'o'],
|
---|
| 35 | type: 'string',
|
---|
| 36 | help: 'Output filename'
|
---|
| 37 | },
|
---|
| 38 | {
|
---|
| 39 | names: ['format', 't'],
|
---|
| 40 | type: 'string',
|
---|
| 41 | help: 'Signature format (asn1, ssh, raw)'
|
---|
| 42 | },
|
---|
| 43 | {
|
---|
| 44 | names: ['binary', 'b'],
|
---|
| 45 | type: 'bool',
|
---|
| 46 | help: 'Output raw binary instead of base64'
|
---|
| 47 | },
|
---|
| 48 | {
|
---|
| 49 | names: ['help', 'h'],
|
---|
| 50 | type: 'bool',
|
---|
| 51 | help: 'Shows this help text'
|
---|
| 52 | }
|
---|
| 53 | ];
|
---|
| 54 |
|
---|
| 55 | var parseOpts = {};
|
---|
| 56 |
|
---|
| 57 | if (require.main === module) {
|
---|
| 58 | var parser = dashdash.createParser({
|
---|
| 59 | options: options
|
---|
| 60 | });
|
---|
| 61 |
|
---|
| 62 | try {
|
---|
| 63 | var opts = parser.parse(process.argv);
|
---|
| 64 | } catch (e) {
|
---|
| 65 | console.error('sshpk-sign: error: %s', e.message);
|
---|
| 66 | process.exit(1);
|
---|
| 67 | }
|
---|
| 68 |
|
---|
| 69 | if (opts.help || opts._args.length > 1) {
|
---|
| 70 | var help = parser.help({}).trimRight();
|
---|
| 71 | console.error('sshpk-sign: sign data using an SSH key\n');
|
---|
| 72 | console.error(help);
|
---|
| 73 | process.exit(1);
|
---|
| 74 | }
|
---|
| 75 |
|
---|
| 76 | if (!opts.identity) {
|
---|
| 77 | var help = parser.help({}).trimRight();
|
---|
| 78 | console.error('sshpk-sign: the -i or --identity option ' +
|
---|
| 79 | 'is required\n');
|
---|
| 80 | console.error(help);
|
---|
| 81 | process.exit(1);
|
---|
| 82 | }
|
---|
| 83 |
|
---|
| 84 | var keyData = fs.readFileSync(opts.identity);
|
---|
| 85 | parseOpts.filename = opts.identity;
|
---|
| 86 |
|
---|
| 87 | run();
|
---|
| 88 | }
|
---|
| 89 |
|
---|
| 90 | function run() {
|
---|
| 91 | var key;
|
---|
| 92 | try {
|
---|
| 93 | key = sshpk.parsePrivateKey(keyData, 'auto', parseOpts);
|
---|
| 94 | } catch (e) {
|
---|
| 95 | if (e.name === 'KeyEncryptedError') {
|
---|
| 96 | getPassword(function (err, pw) {
|
---|
| 97 | parseOpts.passphrase = pw;
|
---|
| 98 | run();
|
---|
| 99 | });
|
---|
| 100 | return;
|
---|
| 101 | }
|
---|
| 102 | console.error('sshpk-sign: error loading private key "' +
|
---|
| 103 | opts.identity + '": ' + e.name + ': ' + e.message);
|
---|
| 104 | process.exit(1);
|
---|
| 105 | }
|
---|
| 106 |
|
---|
| 107 | var hash = opts.hash || key.defaultHashAlgorithm();
|
---|
| 108 |
|
---|
| 109 | var signer;
|
---|
| 110 | try {
|
---|
| 111 | signer = key.createSign(hash);
|
---|
| 112 | } catch (e) {
|
---|
| 113 | console.error('sshpk-sign: error creating signer: ' +
|
---|
| 114 | e.name + ': ' + e.message);
|
---|
| 115 | process.exit(1);
|
---|
| 116 | }
|
---|
| 117 |
|
---|
| 118 | if (opts.verbose) {
|
---|
| 119 | console.error('sshpk-sign: using %s-%s with a %d bit key',
|
---|
| 120 | key.type, hash, key.size);
|
---|
| 121 | }
|
---|
| 122 |
|
---|
| 123 | var inFile = process.stdin;
|
---|
| 124 | var inFileName = 'stdin';
|
---|
| 125 |
|
---|
| 126 | var inFilePath;
|
---|
| 127 | if (opts.file) {
|
---|
| 128 | inFilePath = opts.file;
|
---|
| 129 | } else if (opts._args.length === 1) {
|
---|
| 130 | inFilePath = opts._args[0];
|
---|
| 131 | }
|
---|
| 132 |
|
---|
| 133 | if (inFilePath)
|
---|
| 134 | inFileName = path.basename(inFilePath);
|
---|
| 135 |
|
---|
| 136 | try {
|
---|
| 137 | if (inFilePath) {
|
---|
| 138 | fs.accessSync(inFilePath, fs.R_OK);
|
---|
| 139 | inFile = fs.createReadStream(inFilePath);
|
---|
| 140 | }
|
---|
| 141 | } catch (e) {
|
---|
| 142 | console.error('sshpk-sign: error opening input file' +
|
---|
| 143 | ': ' + e.name + ': ' + e.message);
|
---|
| 144 | process.exit(1);
|
---|
| 145 | }
|
---|
| 146 |
|
---|
| 147 | var outFile = process.stdout;
|
---|
| 148 |
|
---|
| 149 | try {
|
---|
| 150 | if (opts.out && !opts.identify) {
|
---|
| 151 | fs.accessSync(path.dirname(opts.out), fs.W_OK);
|
---|
| 152 | outFile = fs.createWriteStream(opts.out);
|
---|
| 153 | }
|
---|
| 154 | } catch (e) {
|
---|
| 155 | console.error('sshpk-sign: error opening output file' +
|
---|
| 156 | ': ' + e.name + ': ' + e.message);
|
---|
| 157 | process.exit(1);
|
---|
| 158 | }
|
---|
| 159 |
|
---|
| 160 | inFile.pipe(signer);
|
---|
| 161 | inFile.on('end', function () {
|
---|
| 162 | var sig;
|
---|
| 163 | try {
|
---|
| 164 | sig = signer.sign();
|
---|
| 165 | } catch (e) {
|
---|
| 166 | console.error('sshpk-sign: error signing data: ' +
|
---|
| 167 | e.name + ': ' + e.message);
|
---|
| 168 | process.exit(1);
|
---|
| 169 | }
|
---|
| 170 |
|
---|
| 171 | var fmt = opts.format || 'asn1';
|
---|
| 172 | var output;
|
---|
| 173 | try {
|
---|
| 174 | output = sig.toBuffer(fmt);
|
---|
| 175 | if (!opts.binary)
|
---|
| 176 | output = output.toString('base64');
|
---|
| 177 | } catch (e) {
|
---|
| 178 | console.error('sshpk-sign: error converting signature' +
|
---|
| 179 | ' to ' + fmt + ' format: ' + e.name + ': ' +
|
---|
| 180 | e.message);
|
---|
| 181 | process.exit(1);
|
---|
| 182 | }
|
---|
| 183 |
|
---|
| 184 | outFile.write(output);
|
---|
| 185 | if (!opts.binary)
|
---|
| 186 | outFile.write('\n');
|
---|
| 187 | outFile.once('drain', function () {
|
---|
| 188 | process.exit(0);
|
---|
| 189 | });
|
---|
| 190 | });
|
---|
| 191 | }
|
---|