You can not select more than 25 topics
			Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
		
		
		
		
		
			
		
			
				
					
					
						
							167 lines
						
					
					
						
							3.5 KiB
						
					
					
				
			
		
		
	
	
							167 lines
						
					
					
						
							3.5 KiB
						
					
					
				#!/usr/bin/env node | 
						|
// -*- mode: js -*- | 
						|
// vim: set filetype=javascript : | 
						|
// Copyright 2015 Joyent, Inc.  All rights reserved. | 
						|
 | 
						|
var dashdash = require('dashdash'); | 
						|
var sshpk = require('../lib/index'); | 
						|
var fs = require('fs'); | 
						|
var path = require('path'); | 
						|
var Buffer = require('safer-buffer').Buffer; | 
						|
 | 
						|
var options = [ | 
						|
	{ | 
						|
		names: ['hash', 'H'], | 
						|
		type: 'string', | 
						|
		help: 'Hash algorithm (sha1, sha256, sha384, sha512)' | 
						|
	}, | 
						|
	{ | 
						|
		names: ['verbose', 'v'], | 
						|
		type: 'bool', | 
						|
		help: 'Display verbose info about key and hash used' | 
						|
	}, | 
						|
	{ | 
						|
		names: ['identity', 'i'], | 
						|
		type: 'string', | 
						|
		help: 'Path to (public) key to use' | 
						|
	}, | 
						|
	{ | 
						|
		names: ['file', 'f'], | 
						|
		type: 'string', | 
						|
		help: 'Input filename' | 
						|
	}, | 
						|
	{ | 
						|
		names: ['format', 't'], | 
						|
		type: 'string', | 
						|
		help: 'Signature format (asn1, ssh, raw)' | 
						|
	}, | 
						|
	{ | 
						|
		names: ['signature', 's'], | 
						|
		type: 'string', | 
						|
		help: 'base64-encoded signature data' | 
						|
	}, | 
						|
	{ | 
						|
		names: ['help', 'h'], | 
						|
		type: 'bool', | 
						|
		help: 'Shows this help text' | 
						|
	} | 
						|
]; | 
						|
 | 
						|
if (require.main === module) { | 
						|
	var parser = dashdash.createParser({ | 
						|
		options: options | 
						|
	}); | 
						|
 | 
						|
	try { | 
						|
		var opts = parser.parse(process.argv); | 
						|
	} catch (e) { | 
						|
		console.error('sshpk-verify: error: %s', e.message); | 
						|
		process.exit(3); | 
						|
	} | 
						|
 | 
						|
	if (opts.help || opts._args.length > 1) { | 
						|
		var help = parser.help({}).trimRight(); | 
						|
		console.error('sshpk-verify: sign data using an SSH key\n'); | 
						|
		console.error(help); | 
						|
		process.exit(3); | 
						|
	} | 
						|
 | 
						|
	if (!opts.identity) { | 
						|
		var help = parser.help({}).trimRight(); | 
						|
		console.error('sshpk-verify: the -i or --identity option ' + | 
						|
		    'is required\n'); | 
						|
		console.error(help); | 
						|
		process.exit(3); | 
						|
	} | 
						|
 | 
						|
	if (!opts.signature) { | 
						|
		var help = parser.help({}).trimRight(); | 
						|
		console.error('sshpk-verify: the -s or --signature option ' + | 
						|
		    'is required\n'); | 
						|
		console.error(help); | 
						|
		process.exit(3); | 
						|
	} | 
						|
 | 
						|
	var keyData = fs.readFileSync(opts.identity); | 
						|
 | 
						|
	var key; | 
						|
	try { | 
						|
		key = sshpk.parseKey(keyData); | 
						|
	} catch (e) { | 
						|
		console.error('sshpk-verify: error loading key "' + | 
						|
		    opts.identity + '": ' + e.name + ': ' + e.message); | 
						|
		process.exit(2); | 
						|
	} | 
						|
 | 
						|
	var fmt = opts.format || 'asn1'; | 
						|
	var sigData = Buffer.from(opts.signature, 'base64'); | 
						|
 | 
						|
	var sig; | 
						|
	try { | 
						|
		sig = sshpk.parseSignature(sigData, key.type, fmt); | 
						|
	} catch (e) { | 
						|
		console.error('sshpk-verify: error parsing signature: ' + | 
						|
		    e.name + ': ' + e.message); | 
						|
		process.exit(2); | 
						|
	} | 
						|
 | 
						|
	var hash = opts.hash || key.defaultHashAlgorithm(); | 
						|
 | 
						|
	var verifier; | 
						|
	try { | 
						|
		verifier = key.createVerify(hash); | 
						|
	} catch (e) { | 
						|
		console.error('sshpk-verify: error creating verifier: ' + | 
						|
		    e.name + ': ' + e.message); | 
						|
		process.exit(2); | 
						|
	} | 
						|
 | 
						|
	if (opts.verbose) { | 
						|
		console.error('sshpk-verify: using %s-%s with a %d bit key', | 
						|
		    key.type, hash, key.size); | 
						|
	} | 
						|
 | 
						|
	var inFile = process.stdin; | 
						|
	var inFileName = 'stdin'; | 
						|
 | 
						|
	var inFilePath; | 
						|
	if (opts.file) { | 
						|
		inFilePath = opts.file; | 
						|
	} else if (opts._args.length === 1) { | 
						|
		inFilePath = opts._args[0]; | 
						|
	} | 
						|
 | 
						|
	if (inFilePath) | 
						|
		inFileName = path.basename(inFilePath); | 
						|
 | 
						|
	try { | 
						|
		if (inFilePath) { | 
						|
			fs.accessSync(inFilePath, fs.R_OK); | 
						|
			inFile = fs.createReadStream(inFilePath); | 
						|
		} | 
						|
	} catch (e) { | 
						|
		console.error('sshpk-verify: error opening input file' + | 
						|
		     ': ' + e.name + ': ' + e.message); | 
						|
		process.exit(2); | 
						|
	} | 
						|
 | 
						|
	inFile.pipe(verifier); | 
						|
	inFile.on('end', function () { | 
						|
		var ret; | 
						|
		try { | 
						|
			ret = verifier.verify(sig); | 
						|
		} catch (e) { | 
						|
			console.error('sshpk-verify: error verifying data: ' + | 
						|
			    e.name + ': ' + e.message); | 
						|
			process.exit(1); | 
						|
		} | 
						|
 | 
						|
		if (ret) { | 
						|
			console.error('OK'); | 
						|
			process.exit(0); | 
						|
		} | 
						|
 | 
						|
		console.error('NOT OK'); | 
						|
		process.exit(1); | 
						|
	}); | 
						|
}
 | 
						|
 |