123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192 |
- #!/usr/bin/env node
- // -*- mode: js -*-
- // vim: set filetype=javascript :
- // Copyright 2015 Joyent, Inc. All rights reserved.
-
- var dashdash = require('dashdash');
- var sshpk = require('../lib/index');
- var fs = require('fs');
- var path = require('path');
- var getPassword = require('getpass').getPass;
-
- var options = [
- {
- names: ['hash', 'H'],
- type: 'string',
- help: 'Hash algorithm (sha1, sha256, sha384, sha512)'
- },
- {
- names: ['verbose', 'v'],
- type: 'bool',
- help: 'Display verbose info about key and hash used'
- },
- {
- names: ['identity', 'i'],
- type: 'string',
- help: 'Path to key to use'
- },
- {
- names: ['file', 'f'],
- type: 'string',
- help: 'Input filename'
- },
- {
- names: ['out', 'o'],
- type: 'string',
- help: 'Output filename'
- },
- {
- names: ['format', 't'],
- type: 'string',
- help: 'Signature format (asn1, ssh, raw)'
- },
- {
- names: ['binary', 'b'],
- type: 'bool',
- help: 'Output raw binary instead of base64'
- },
- {
- names: ['help', 'h'],
- type: 'bool',
- help: 'Shows this help text'
- }
- ];
-
- var parseOpts = {};
-
- if (require.main === module) {
- var parser = dashdash.createParser({
- options: options
- });
-
- try {
- var opts = parser.parse(process.argv);
- } catch (e) {
- console.error('sshpk-sign: error: %s', e.message);
- process.exit(1);
- }
-
- if (opts.help || opts._args.length > 1) {
- var help = parser.help({}).trimRight();
- console.error('sshpk-sign: sign data using an SSH key\n');
- console.error(help);
- process.exit(1);
- }
-
- if (!opts.identity) {
- var help = parser.help({}).trimRight();
- console.error('sshpk-sign: the -i or --identity option ' +
- 'is required\n');
- console.error(help);
- process.exit(1);
- }
-
- var keyData = fs.readFileSync(opts.identity);
- parseOpts.filename = opts.identity;
-
- run();
- }
-
- function run() {
- var key;
- try {
- key = sshpk.parsePrivateKey(keyData, 'auto', parseOpts);
- } catch (e) {
- if (e.name === 'KeyEncryptedError') {
- getPassword(function (err, pw) {
- parseOpts.passphrase = pw;
- run();
- });
- return;
- }
- console.error('sshpk-sign: error loading private key "' +
- opts.identity + '": ' + e.name + ': ' + e.message);
- process.exit(1);
- }
-
- var hash = opts.hash || key.defaultHashAlgorithm();
-
- var signer;
- try {
- signer = key.createSign(hash);
- } catch (e) {
- console.error('sshpk-sign: error creating signer: ' +
- e.name + ': ' + e.message);
- process.exit(1);
- }
-
- if (opts.verbose) {
- console.error('sshpk-sign: using %s-%s with a %d bit key',
- key.type, hash, key.size);
- }
-
- var inFile = process.stdin;
- var inFileName = 'stdin';
-
- var inFilePath;
- if (opts.file) {
- inFilePath = opts.file;
- } else if (opts._args.length === 1) {
- inFilePath = opts._args[0];
- }
-
- if (inFilePath)
- inFileName = path.basename(inFilePath);
-
- try {
- if (inFilePath) {
- fs.accessSync(inFilePath, fs.R_OK);
- inFile = fs.createReadStream(inFilePath);
- }
- } catch (e) {
- console.error('sshpk-sign: error opening input file' +
- ': ' + e.name + ': ' + e.message);
- process.exit(1);
- }
-
- var outFile = process.stdout;
-
- try {
- if (opts.out && !opts.identify) {
- fs.accessSync(path.dirname(opts.out), fs.W_OK);
- outFile = fs.createWriteStream(opts.out);
- }
- } catch (e) {
- console.error('sshpk-sign: error opening output file' +
- ': ' + e.name + ': ' + e.message);
- process.exit(1);
- }
-
- inFile.pipe(signer);
- inFile.on('end', function () {
- var sig;
- try {
- sig = signer.sign();
- } catch (e) {
- console.error('sshpk-sign: error signing data: ' +
- e.name + ': ' + e.message);
- process.exit(1);
- }
-
- var fmt = opts.format || 'asn1';
- var output;
- try {
- output = sig.toBuffer(fmt);
- if (!opts.binary)
- output = output.toString('base64');
- } catch (e) {
- console.error('sshpk-sign: error converting signature' +
- ' to ' + fmt + ' format: ' + e.name + ': ' +
- e.message);
- process.exit(1);
- }
-
- outFile.write(output);
- if (!opts.binary)
- outFile.write('\n');
- outFile.once('drain', function () {
- process.exit(0);
- });
- });
- }
|