You can not select more than 25 topics
			Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
		
		
		
		
		
			
		
			
				
					
					
						
							191 lines
						
					
					
						
							3.9 KiB
						
					
					
				
			
		
		
	
	
							191 lines
						
					
					
						
							3.9 KiB
						
					
					
				#!/usr/bin/env node | 
						|
// -*- mode: js -*- | 
						|
// vim: set filetype=javascript : | 
						|
// Copyright 2015 Joyent, Inc.  All rights reserved. | 
						|
 | 
						|
var dashdash = require('dashdash'); | 
						|
var sshpk = require('../lib/index'); | 
						|
var fs = require('fs'); | 
						|
var path = require('path'); | 
						|
var getPassword = require('getpass').getPass; | 
						|
 | 
						|
var options = [ | 
						|
	{ | 
						|
		names: ['hash', 'H'], | 
						|
		type: 'string', | 
						|
		help: 'Hash algorithm (sha1, sha256, sha384, sha512)' | 
						|
	}, | 
						|
	{ | 
						|
		names: ['verbose', 'v'], | 
						|
		type: 'bool', | 
						|
		help: 'Display verbose info about key and hash used' | 
						|
	}, | 
						|
	{ | 
						|
		names: ['identity', 'i'], | 
						|
		type: 'string', | 
						|
		help: 'Path to key to use' | 
						|
	}, | 
						|
	{ | 
						|
		names: ['file', 'f'], | 
						|
		type: 'string', | 
						|
		help: 'Input filename' | 
						|
	}, | 
						|
	{ | 
						|
		names: ['out', 'o'], | 
						|
		type: 'string', | 
						|
		help: 'Output filename' | 
						|
	}, | 
						|
	{ | 
						|
		names: ['format', 't'], | 
						|
		type: 'string', | 
						|
		help: 'Signature format (asn1, ssh, raw)' | 
						|
	}, | 
						|
	{ | 
						|
		names: ['binary', 'b'], | 
						|
		type: 'bool', | 
						|
		help: 'Output raw binary instead of base64' | 
						|
	}, | 
						|
	{ | 
						|
		names: ['help', 'h'], | 
						|
		type: 'bool', | 
						|
		help: 'Shows this help text' | 
						|
	} | 
						|
]; | 
						|
 | 
						|
var parseOpts = {}; | 
						|
 | 
						|
if (require.main === module) { | 
						|
	var parser = dashdash.createParser({ | 
						|
		options: options | 
						|
	}); | 
						|
 | 
						|
	try { | 
						|
		var opts = parser.parse(process.argv); | 
						|
	} catch (e) { | 
						|
		console.error('sshpk-sign: error: %s', e.message); | 
						|
		process.exit(1); | 
						|
	} | 
						|
 | 
						|
	if (opts.help || opts._args.length > 1) { | 
						|
		var help = parser.help({}).trimRight(); | 
						|
		console.error('sshpk-sign: sign data using an SSH key\n'); | 
						|
		console.error(help); | 
						|
		process.exit(1); | 
						|
	} | 
						|
 | 
						|
	if (!opts.identity) { | 
						|
		var help = parser.help({}).trimRight(); | 
						|
		console.error('sshpk-sign: the -i or --identity option ' + | 
						|
		    'is required\n'); | 
						|
		console.error(help); | 
						|
		process.exit(1); | 
						|
	} | 
						|
 | 
						|
	var keyData = fs.readFileSync(opts.identity); | 
						|
	parseOpts.filename = opts.identity; | 
						|
 | 
						|
	run(); | 
						|
} | 
						|
 | 
						|
function run() { | 
						|
	var key; | 
						|
	try { | 
						|
		key = sshpk.parsePrivateKey(keyData, 'auto', parseOpts); | 
						|
	} catch (e) { | 
						|
		if (e.name === 'KeyEncryptedError') { | 
						|
			getPassword(function (err, pw) { | 
						|
				parseOpts.passphrase = pw; | 
						|
				run(); | 
						|
			}); | 
						|
			return; | 
						|
		} | 
						|
		console.error('sshpk-sign: error loading private key "' + | 
						|
		    opts.identity + '": ' + e.name + ': ' + e.message); | 
						|
		process.exit(1); | 
						|
	} | 
						|
 | 
						|
	var hash = opts.hash || key.defaultHashAlgorithm(); | 
						|
 | 
						|
	var signer; | 
						|
	try { | 
						|
		signer = key.createSign(hash); | 
						|
	} catch (e) { | 
						|
		console.error('sshpk-sign: error creating signer: ' + | 
						|
		    e.name + ': ' + e.message); | 
						|
		process.exit(1); | 
						|
	} | 
						|
 | 
						|
	if (opts.verbose) { | 
						|
		console.error('sshpk-sign: using %s-%s with a %d bit key', | 
						|
		    key.type, hash, key.size); | 
						|
	} | 
						|
 | 
						|
	var inFile = process.stdin; | 
						|
	var inFileName = 'stdin'; | 
						|
 | 
						|
	var inFilePath; | 
						|
	if (opts.file) { | 
						|
		inFilePath = opts.file; | 
						|
	} else if (opts._args.length === 1) { | 
						|
		inFilePath = opts._args[0]; | 
						|
	} | 
						|
 | 
						|
	if (inFilePath) | 
						|
		inFileName = path.basename(inFilePath); | 
						|
 | 
						|
	try { | 
						|
		if (inFilePath) { | 
						|
			fs.accessSync(inFilePath, fs.R_OK); | 
						|
			inFile = fs.createReadStream(inFilePath); | 
						|
		} | 
						|
	} catch (e) { | 
						|
		console.error('sshpk-sign: error opening input file' + | 
						|
		     ': ' + e.name + ': ' + e.message); | 
						|
		process.exit(1); | 
						|
	} | 
						|
 | 
						|
	var outFile = process.stdout; | 
						|
 | 
						|
	try { | 
						|
		if (opts.out && !opts.identify) { | 
						|
			fs.accessSync(path.dirname(opts.out), fs.W_OK); | 
						|
			outFile = fs.createWriteStream(opts.out); | 
						|
		} | 
						|
	} catch (e) { | 
						|
		console.error('sshpk-sign: error opening output file' + | 
						|
		    ': ' + e.name + ': ' + e.message); | 
						|
		process.exit(1); | 
						|
	} | 
						|
 | 
						|
	inFile.pipe(signer); | 
						|
	inFile.on('end', function () { | 
						|
		var sig; | 
						|
		try { | 
						|
			sig = signer.sign(); | 
						|
		} catch (e) { | 
						|
			console.error('sshpk-sign: error signing data: ' + | 
						|
			    e.name + ': ' + e.message); | 
						|
			process.exit(1); | 
						|
		} | 
						|
 | 
						|
		var fmt = opts.format || 'asn1'; | 
						|
		var output; | 
						|
		try { | 
						|
			output = sig.toBuffer(fmt); | 
						|
			if (!opts.binary) | 
						|
				output = output.toString('base64'); | 
						|
		} catch (e) { | 
						|
			console.error('sshpk-sign: error converting signature' + | 
						|
			    ' to ' + fmt + ' format: ' + e.name + ': ' + | 
						|
			    e.message); | 
						|
			process.exit(1); | 
						|
		} | 
						|
 | 
						|
		outFile.write(output); | 
						|
		if (!opts.binary) | 
						|
			outFile.write('\n'); | 
						|
		outFile.once('drain', function () { | 
						|
			process.exit(0); | 
						|
		}); | 
						|
	}); | 
						|
}
 | 
						|
 |