|
1
|
|
|
# frozen_string_literal: true |
|
2
|
|
|
|
|
3
|
|
|
require 'English' |
|
4
|
|
|
|
|
5
|
|
|
require_relative 'exception/invalid_key_exception' |
|
6
|
|
|
require_relative 'exception/ssh_keygen_missing_exception' |
|
7
|
|
|
|
|
8
|
|
|
module AMA |
|
9
|
|
|
module Chef |
|
10
|
|
|
module SSHPrivateKeys |
|
11
|
|
|
# A simple wrapper class for ssh-keygen CLI utility |
|
12
|
|
|
class Generator |
|
13
|
|
|
def initialize(binary) |
|
14
|
|
|
@binary = binary |
|
15
|
|
|
end |
|
16
|
|
|
|
|
17
|
|
|
def public_key_fingerprint(public_key) |
|
18
|
|
|
execution = run_with_temporary_file(public_key) do |path| |
|
19
|
|
|
return [@binary, '-l', '-f', path] |
|
20
|
|
|
end |
|
21
|
|
|
if execution.error |
|
22
|
|
|
message = 'Failed to generate fingerprint for ' \ |
|
23
|
|
|
"public key #{public_key}" |
|
24
|
|
|
raise_execution_exception(execution, message) |
|
25
|
|
|
end |
|
26
|
|
|
execution |
|
27
|
|
|
end |
|
28
|
|
|
|
|
29
|
|
|
# @param [AMA::Chef::SSHPrivateKeys::Model::PrivateKey] private_key |
|
30
|
|
|
# @param [String, NilClass] comment |
|
31
|
|
|
# @return [AMA::Chef::SSHPrivateKeys::Model::PublicKey] |
|
32
|
|
|
def generate_public_key(private_key, comment = nil) |
|
33
|
|
|
execution = run_with_temporary_file(private_key.content) do |path| |
|
34
|
|
|
[@binary, '-y', '-f', path, '-P', private_key.passphrase.to_s] |
|
35
|
|
|
end |
|
36
|
|
|
if execution.error? |
|
37
|
|
|
message = 'Failed to create public key from private key' |
|
38
|
|
|
raise_execution_exception(execution, message) |
|
39
|
|
|
end |
|
40
|
|
|
raw = execution.stdout.chomp |
|
41
|
|
|
match_data = /([\w\-]+)\s+([^\s]+)(?:\s+(.*)\s*)?/.match(raw) |
|
42
|
|
|
unless match_data |
|
43
|
|
|
msg = "Failed to read public key created from private key: #{raw}" |
|
44
|
|
|
raise_invalid_key_exception(msg) |
|
45
|
|
|
end |
|
46
|
|
|
::AMA::Chef::SSHPrivateKeys::Model::PublicKey.new.tap do |key| |
|
47
|
|
|
key.type = match_data[1] |
|
48
|
|
|
key.content = match_data[2] |
|
49
|
|
|
key.comment = compute_comment(match_data[3], comment) |
|
50
|
|
|
end |
|
51
|
|
|
end |
|
52
|
|
|
|
|
53
|
|
|
def self.locate_binary |
|
54
|
|
|
execution = ::Mixlib::ShellOut.new('which', 'ssh-keygen') |
|
55
|
|
|
execution.run_command |
|
56
|
|
|
execution.error? ? nil : execution.stdout.lines.first.chomp |
|
57
|
|
|
end |
|
58
|
|
|
|
|
59
|
|
|
def self.locate_binary! |
|
60
|
|
|
binary = locate_binary |
|
61
|
|
|
return binary if binary |
|
62
|
|
|
raise( |
|
63
|
|
|
::AMA::Chef::SSHPrivateKeys::Exception::SSHKeygenMissingException, |
|
64
|
|
|
'Failed to locate ssh-keygen binary for key validation' |
|
65
|
|
|
) |
|
66
|
|
|
end |
|
67
|
|
|
|
|
68
|
|
|
private |
|
69
|
|
|
|
|
70
|
|
|
def compute_comment(parsed_comment, provided_comment) |
|
71
|
|
|
comment = extract_comment(parsed_comment) |
|
72
|
|
|
comment.nil? ? extract_comment(provided_comment) : comment |
|
73
|
|
|
end |
|
74
|
|
|
|
|
75
|
|
|
def extract_comment(comment) |
|
76
|
|
|
return nil if comment.nil? |
|
77
|
|
|
comment = comment.strip |
|
78
|
|
|
comment.empty? ? nil : comment |
|
79
|
|
|
end |
|
80
|
|
|
|
|
81
|
|
|
def execute(*command) |
|
82
|
|
|
::Chef::Log.debug("Executing command: #{command}") |
|
83
|
|
|
::Mixlib::ShellOut.new(*command).tap(&:run_command) |
|
84
|
|
|
end |
|
85
|
|
|
|
|
86
|
|
|
def run_with_temporary_file(content) |
|
87
|
|
|
with_temporary_file(content) do |path| |
|
88
|
|
|
execute(*yield(path)) |
|
89
|
|
|
end |
|
90
|
|
|
end |
|
91
|
|
|
|
|
92
|
|
|
def with_temporary_file(content) |
|
93
|
|
|
target = Tempfile.new(['ama-ssh-private-keys-']) |
|
94
|
|
|
::IO.write(target.path, content) |
|
95
|
|
|
begin |
|
96
|
|
|
return yield(target.path) |
|
97
|
|
|
ensure |
|
98
|
|
|
target.close(true) |
|
99
|
|
|
end |
|
100
|
|
|
end |
|
101
|
|
|
|
|
102
|
|
|
def raise_invalid_key_exception(*message) |
|
103
|
|
|
raise( |
|
104
|
|
|
::AMA::Chef::SSHPrivateKeys::Exception::InvalidKeyException, |
|
105
|
|
|
message.join(" #{$ORS}") |
|
106
|
|
|
) |
|
107
|
|
|
end |
|
108
|
|
|
|
|
109
|
|
|
def raise_execution_exception(execution, *message) |
|
110
|
|
|
message.push("STDOUT: #{execution.stdout}") |
|
111
|
|
|
message.push("STDERR: #{execution.stderr}") |
|
112
|
|
|
raise_invalid_key_exception(*message) |
|
113
|
|
|
end |
|
114
|
|
|
end |
|
115
|
|
|
end |
|
116
|
|
|
end |
|
117
|
|
|
end |
|
118
|
|
|
|
ama-team /
cookbook-ssh-private-keys
