You can not select more than 25 topics
			Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
		
		
		
		
		
			
		
			
				
					125 lines
				
				3.4 KiB
			
		
		
			
		
	
	
					125 lines
				
				3.4 KiB
			| 
								 
											3 years ago
										 
									 | 
							
								// Copyright 2018 Joyent, Inc.
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								module.exports = {
							 | 
						||
| 
								 | 
							
									read: read,
							 | 
						||
| 
								 | 
							
									write: write
							 | 
						||
| 
								 | 
							
								};
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								var assert = require('assert-plus');
							 | 
						||
| 
								 | 
							
								var Buffer = require('safer-buffer').Buffer;
							 | 
						||
| 
								 | 
							
								var utils = require('../utils');
							 | 
						||
| 
								 | 
							
								var Key = require('../key');
							 | 
						||
| 
								 | 
							
								var PrivateKey = require('../private-key');
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								var pem = require('./pem');
							 | 
						||
| 
								 | 
							
								var ssh = require('./ssh');
							 | 
						||
| 
								 | 
							
								var rfc4253 = require('./rfc4253');
							 | 
						||
| 
								 | 
							
								var dnssec = require('./dnssec');
							 | 
						||
| 
								 | 
							
								var putty = require('./putty');
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								var DNSSEC_PRIVKEY_HEADER_PREFIX = 'Private-key-format: v1';
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								function read(buf, options) {
							 | 
						||
| 
								 | 
							
									if (typeof (buf) === 'string') {
							 | 
						||
| 
								 | 
							
										if (buf.trim().match(/^[-]+[ ]*BEGIN/))
							 | 
						||
| 
								 | 
							
											return (pem.read(buf, options));
							 | 
						||
| 
								 | 
							
										if (buf.match(/^\s*ssh-[a-z]/))
							 | 
						||
| 
								 | 
							
											return (ssh.read(buf, options));
							 | 
						||
| 
								 | 
							
										if (buf.match(/^\s*ecdsa-/))
							 | 
						||
| 
								 | 
							
											return (ssh.read(buf, options));
							 | 
						||
| 
								 | 
							
										if (buf.match(/^putty-user-key-file-2:/i))
							 | 
						||
| 
								 | 
							
											return (putty.read(buf, options));
							 | 
						||
| 
								 | 
							
										if (findDNSSECHeader(buf))
							 | 
						||
| 
								 | 
							
											return (dnssec.read(buf, options));
							 | 
						||
| 
								 | 
							
										buf = Buffer.from(buf, 'binary');
							 | 
						||
| 
								 | 
							
									} else {
							 | 
						||
| 
								 | 
							
										assert.buffer(buf);
							 | 
						||
| 
								 | 
							
										if (findPEMHeader(buf))
							 | 
						||
| 
								 | 
							
											return (pem.read(buf, options));
							 | 
						||
| 
								 | 
							
										if (findSSHHeader(buf))
							 | 
						||
| 
								 | 
							
											return (ssh.read(buf, options));
							 | 
						||
| 
								 | 
							
										if (findPuTTYHeader(buf))
							 | 
						||
| 
								 | 
							
											return (putty.read(buf, options));
							 | 
						||
| 
								 | 
							
										if (findDNSSECHeader(buf))
							 | 
						||
| 
								 | 
							
											return (dnssec.read(buf, options));
							 | 
						||
| 
								 | 
							
									}
							 | 
						||
| 
								 | 
							
									if (buf.readUInt32BE(0) < buf.length)
							 | 
						||
| 
								 | 
							
										return (rfc4253.read(buf, options));
							 | 
						||
| 
								 | 
							
									throw (new Error('Failed to auto-detect format of key'));
							 | 
						||
| 
								 | 
							
								}
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								function findPuTTYHeader(buf) {
							 | 
						||
| 
								 | 
							
									var offset = 0;
							 | 
						||
| 
								 | 
							
									while (offset < buf.length &&
							 | 
						||
| 
								 | 
							
									    (buf[offset] === 32 || buf[offset] === 10 || buf[offset] === 9))
							 | 
						||
| 
								 | 
							
										++offset;
							 | 
						||
| 
								 | 
							
									if (offset + 22 <= buf.length &&
							 | 
						||
| 
								 | 
							
									    buf.slice(offset, offset + 22).toString('ascii').toLowerCase() ===
							 | 
						||
| 
								 | 
							
									    'putty-user-key-file-2:')
							 | 
						||
| 
								 | 
							
										return (true);
							 | 
						||
| 
								 | 
							
									return (false);
							 | 
						||
| 
								 | 
							
								}
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								function findSSHHeader(buf) {
							 | 
						||
| 
								 | 
							
									var offset = 0;
							 | 
						||
| 
								 | 
							
									while (offset < buf.length &&
							 | 
						||
| 
								 | 
							
									    (buf[offset] === 32 || buf[offset] === 10 || buf[offset] === 9))
							 | 
						||
| 
								 | 
							
										++offset;
							 | 
						||
| 
								 | 
							
									if (offset + 4 <= buf.length &&
							 | 
						||
| 
								 | 
							
									    buf.slice(offset, offset + 4).toString('ascii') === 'ssh-')
							 | 
						||
| 
								 | 
							
										return (true);
							 | 
						||
| 
								 | 
							
									if (offset + 6 <= buf.length &&
							 | 
						||
| 
								 | 
							
									    buf.slice(offset, offset + 6).toString('ascii') === 'ecdsa-')
							 | 
						||
| 
								 | 
							
										return (true);
							 | 
						||
| 
								 | 
							
									return (false);
							 | 
						||
| 
								 | 
							
								}
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								function findPEMHeader(buf) {
							 | 
						||
| 
								 | 
							
									var offset = 0;
							 | 
						||
| 
								 | 
							
									while (offset < buf.length &&
							 | 
						||
| 
								 | 
							
									    (buf[offset] === 32 || buf[offset] === 10))
							 | 
						||
| 
								 | 
							
										++offset;
							 | 
						||
| 
								 | 
							
									if (buf[offset] !== 45)
							 | 
						||
| 
								 | 
							
										return (false);
							 | 
						||
| 
								 | 
							
									while (offset < buf.length &&
							 | 
						||
| 
								 | 
							
									    (buf[offset] === 45))
							 | 
						||
| 
								 | 
							
										++offset;
							 | 
						||
| 
								 | 
							
									while (offset < buf.length &&
							 | 
						||
| 
								 | 
							
									    (buf[offset] === 32))
							 | 
						||
| 
								 | 
							
										++offset;
							 | 
						||
| 
								 | 
							
									if (offset + 5 > buf.length ||
							 | 
						||
| 
								 | 
							
									    buf.slice(offset, offset + 5).toString('ascii') !== 'BEGIN')
							 | 
						||
| 
								 | 
							
										return (false);
							 | 
						||
| 
								 | 
							
									return (true);
							 | 
						||
| 
								 | 
							
								}
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								function findDNSSECHeader(buf) {
							 | 
						||
| 
								 | 
							
									// private case first
							 | 
						||
| 
								 | 
							
									if (buf.length <= DNSSEC_PRIVKEY_HEADER_PREFIX.length)
							 | 
						||
| 
								 | 
							
										return (false);
							 | 
						||
| 
								 | 
							
									var headerCheck = buf.slice(0, DNSSEC_PRIVKEY_HEADER_PREFIX.length);
							 | 
						||
| 
								 | 
							
									if (headerCheck.toString('ascii') === DNSSEC_PRIVKEY_HEADER_PREFIX)
							 | 
						||
| 
								 | 
							
										return (true);
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
									// public-key RFC3110 ?
							 | 
						||
| 
								 | 
							
									// 'domain.com. IN KEY ...' or 'domain.com. IN DNSKEY ...'
							 | 
						||
| 
								 | 
							
									// skip any comment-lines
							 | 
						||
| 
								 | 
							
									if (typeof (buf) !== 'string') {
							 | 
						||
| 
								 | 
							
										buf = buf.toString('ascii');
							 | 
						||
| 
								 | 
							
									}
							 | 
						||
| 
								 | 
							
									var lines = buf.split('\n');
							 | 
						||
| 
								 | 
							
									var line = 0;
							 | 
						||
| 
								 | 
							
									/* JSSTYLED */
							 | 
						||
| 
								 | 
							
									while (lines[line].match(/^\;/))
							 | 
						||
| 
								 | 
							
										line++;
							 | 
						||
| 
								 | 
							
									if (lines[line].toString('ascii').match(/\. IN KEY /))
							 | 
						||
| 
								 | 
							
										return (true);
							 | 
						||
| 
								 | 
							
									if (lines[line].toString('ascii').match(/\. IN DNSKEY /))
							 | 
						||
| 
								 | 
							
										return (true);
							 | 
						||
| 
								 | 
							
									return (false);
							 | 
						||
| 
								 | 
							
								}
							 | 
						||
| 
								 | 
							
								
							 | 
						||
| 
								 | 
							
								function write(key, options) {
							 | 
						||
| 
								 | 
							
									throw (new Error('"auto" format cannot be used for writing'));
							 | 
						||
| 
								 | 
							
								}
							 |