You can not select more than 25 topics
			Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
		
		
		
		
		
			
		
			
				
					
					
						
							192 lines
						
					
					
						
							3.9 KiB
						
					
					
				
			
		
		
	
	
							192 lines
						
					
					
						
							3.9 KiB
						
					
					
				| #!/usr/bin/env node
 | |
| // -*- mode: js -*-
 | |
| // vim: set filetype=javascript :
 | |
| // Copyright 2015 Joyent, Inc.  All rights reserved.
 | |
| 
 | |
| var dashdash = require('dashdash');
 | |
| var sshpk = require('../lib/index');
 | |
| var fs = require('fs');
 | |
| var path = require('path');
 | |
| var getPassword = require('getpass').getPass;
 | |
| 
 | |
| var options = [
 | |
| 	{
 | |
| 		names: ['hash', 'H'],
 | |
| 		type: 'string',
 | |
| 		help: 'Hash algorithm (sha1, sha256, sha384, sha512)'
 | |
| 	},
 | |
| 	{
 | |
| 		names: ['verbose', 'v'],
 | |
| 		type: 'bool',
 | |
| 		help: 'Display verbose info about key and hash used'
 | |
| 	},
 | |
| 	{
 | |
| 		names: ['identity', 'i'],
 | |
| 		type: 'string',
 | |
| 		help: 'Path to key to use'
 | |
| 	},
 | |
| 	{
 | |
| 		names: ['file', 'f'],
 | |
| 		type: 'string',
 | |
| 		help: 'Input filename'
 | |
| 	},
 | |
| 	{
 | |
| 		names: ['out', 'o'],
 | |
| 		type: 'string',
 | |
| 		help: 'Output filename'
 | |
| 	},
 | |
| 	{
 | |
| 		names: ['format', 't'],
 | |
| 		type: 'string',
 | |
| 		help: 'Signature format (asn1, ssh, raw)'
 | |
| 	},
 | |
| 	{
 | |
| 		names: ['binary', 'b'],
 | |
| 		type: 'bool',
 | |
| 		help: 'Output raw binary instead of base64'
 | |
| 	},
 | |
| 	{
 | |
| 		names: ['help', 'h'],
 | |
| 		type: 'bool',
 | |
| 		help: 'Shows this help text'
 | |
| 	}
 | |
| ];
 | |
| 
 | |
| var parseOpts = {};
 | |
| 
 | |
| if (require.main === module) {
 | |
| 	var parser = dashdash.createParser({
 | |
| 		options: options
 | |
| 	});
 | |
| 
 | |
| 	try {
 | |
| 		var opts = parser.parse(process.argv);
 | |
| 	} catch (e) {
 | |
| 		console.error('sshpk-sign: error: %s', e.message);
 | |
| 		process.exit(1);
 | |
| 	}
 | |
| 
 | |
| 	if (opts.help || opts._args.length > 1) {
 | |
| 		var help = parser.help({}).trimRight();
 | |
| 		console.error('sshpk-sign: sign data using an SSH key\n');
 | |
| 		console.error(help);
 | |
| 		process.exit(1);
 | |
| 	}
 | |
| 
 | |
| 	if (!opts.identity) {
 | |
| 		var help = parser.help({}).trimRight();
 | |
| 		console.error('sshpk-sign: the -i or --identity option ' +
 | |
| 		    'is required\n');
 | |
| 		console.error(help);
 | |
| 		process.exit(1);
 | |
| 	}
 | |
| 
 | |
| 	var keyData = fs.readFileSync(opts.identity);
 | |
| 	parseOpts.filename = opts.identity;
 | |
| 
 | |
| 	run();
 | |
| }
 | |
| 
 | |
| function run() {
 | |
| 	var key;
 | |
| 	try {
 | |
| 		key = sshpk.parsePrivateKey(keyData, 'auto', parseOpts);
 | |
| 	} catch (e) {
 | |
| 		if (e.name === 'KeyEncryptedError') {
 | |
| 			getPassword(function (err, pw) {
 | |
| 				parseOpts.passphrase = pw;
 | |
| 				run();
 | |
| 			});
 | |
| 			return;
 | |
| 		}
 | |
| 		console.error('sshpk-sign: error loading private key "' +
 | |
| 		    opts.identity + '": ' + e.name + ': ' + e.message);
 | |
| 		process.exit(1);
 | |
| 	}
 | |
| 
 | |
| 	var hash = opts.hash || key.defaultHashAlgorithm();
 | |
| 
 | |
| 	var signer;
 | |
| 	try {
 | |
| 		signer = key.createSign(hash);
 | |
| 	} catch (e) {
 | |
| 		console.error('sshpk-sign: error creating signer: ' +
 | |
| 		    e.name + ': ' + e.message);
 | |
| 		process.exit(1);
 | |
| 	}
 | |
| 
 | |
| 	if (opts.verbose) {
 | |
| 		console.error('sshpk-sign: using %s-%s with a %d bit key',
 | |
| 		    key.type, hash, key.size);
 | |
| 	}
 | |
| 
 | |
| 	var inFile = process.stdin;
 | |
| 	var inFileName = 'stdin';
 | |
| 
 | |
| 	var inFilePath;
 | |
| 	if (opts.file) {
 | |
| 		inFilePath = opts.file;
 | |
| 	} else if (opts._args.length === 1) {
 | |
| 		inFilePath = opts._args[0];
 | |
| 	}
 | |
| 
 | |
| 	if (inFilePath)
 | |
| 		inFileName = path.basename(inFilePath);
 | |
| 
 | |
| 	try {
 | |
| 		if (inFilePath) {
 | |
| 			fs.accessSync(inFilePath, fs.R_OK);
 | |
| 			inFile = fs.createReadStream(inFilePath);
 | |
| 		}
 | |
| 	} catch (e) {
 | |
| 		console.error('sshpk-sign: error opening input file' +
 | |
| 		     ': ' + e.name + ': ' + e.message);
 | |
| 		process.exit(1);
 | |
| 	}
 | |
| 
 | |
| 	var outFile = process.stdout;
 | |
| 
 | |
| 	try {
 | |
| 		if (opts.out && !opts.identify) {
 | |
| 			fs.accessSync(path.dirname(opts.out), fs.W_OK);
 | |
| 			outFile = fs.createWriteStream(opts.out);
 | |
| 		}
 | |
| 	} catch (e) {
 | |
| 		console.error('sshpk-sign: error opening output file' +
 | |
| 		    ': ' + e.name + ': ' + e.message);
 | |
| 		process.exit(1);
 | |
| 	}
 | |
| 
 | |
| 	inFile.pipe(signer);
 | |
| 	inFile.on('end', function () {
 | |
| 		var sig;
 | |
| 		try {
 | |
| 			sig = signer.sign();
 | |
| 		} catch (e) {
 | |
| 			console.error('sshpk-sign: error signing data: ' +
 | |
| 			    e.name + ': ' + e.message);
 | |
| 			process.exit(1);
 | |
| 		}
 | |
| 
 | |
| 		var fmt = opts.format || 'asn1';
 | |
| 		var output;
 | |
| 		try {
 | |
| 			output = sig.toBuffer(fmt);
 | |
| 			if (!opts.binary)
 | |
| 				output = output.toString('base64');
 | |
| 		} catch (e) {
 | |
| 			console.error('sshpk-sign: error converting signature' +
 | |
| 			    ' to ' + fmt + ' format: ' + e.name + ': ' +
 | |
| 			    e.message);
 | |
| 			process.exit(1);
 | |
| 		}
 | |
| 
 | |
| 		outFile.write(output);
 | |
| 		if (!opts.binary)
 | |
| 			outFile.write('\n');
 | |
| 		outFile.once('drain', function () {
 | |
| 			process.exit(0);
 | |
| 		});
 | |
| 	});
 | |
| }
 |