| #!/usr/bin/env node |
| // -*- mode: js -*- |
| // vim: set filetype=javascript : |
| // Copyright 2015 Joyent, Inc. All rights reserved. |
| |
| var dashdash = require('dashdash'); |
| var sshpk = require('../lib/index'); |
| var fs = require('fs'); |
| var path = require('path'); |
| var getPassword = require('getpass').getPass; |
| |
| var options = [ |
| { |
| names: ['hash', 'H'], |
| type: 'string', |
| help: 'Hash algorithm (sha1, sha256, sha384, sha512)' |
| }, |
| { |
| names: ['verbose', 'v'], |
| type: 'bool', |
| help: 'Display verbose info about key and hash used' |
| }, |
| { |
| names: ['identity', 'i'], |
| type: 'string', |
| help: 'Path to key to use' |
| }, |
| { |
| names: ['file', 'f'], |
| type: 'string', |
| help: 'Input filename' |
| }, |
| { |
| names: ['out', 'o'], |
| type: 'string', |
| help: 'Output filename' |
| }, |
| { |
| names: ['format', 't'], |
| type: 'string', |
| help: 'Signature format (asn1, ssh, raw)' |
| }, |
| { |
| names: ['binary', 'b'], |
| type: 'bool', |
| help: 'Output raw binary instead of base64' |
| }, |
| { |
| names: ['help', 'h'], |
| type: 'bool', |
| help: 'Shows this help text' |
| } |
| ]; |
| |
| var parseOpts = {}; |
| |
| if (require.main === module) { |
| var parser = dashdash.createParser({ |
| options: options |
| }); |
| |
| try { |
| var opts = parser.parse(process.argv); |
| } catch (e) { |
| console.error('sshpk-sign: error: %s', e.message); |
| process.exit(1); |
| } |
| |
| if (opts.help || opts._args.length > 1) { |
| var help = parser.help({}).trimRight(); |
| console.error('sshpk-sign: sign data using an SSH key\n'); |
| console.error(help); |
| process.exit(1); |
| } |
| |
| if (!opts.identity) { |
| var help = parser.help({}).trimRight(); |
| console.error('sshpk-sign: the -i or --identity option ' + |
| 'is required\n'); |
| console.error(help); |
| process.exit(1); |
| } |
| |
| var keyData = fs.readFileSync(opts.identity); |
| parseOpts.filename = opts.identity; |
| |
| run(); |
| } |
| |
| function run() { |
| var key; |
| try { |
| key = sshpk.parsePrivateKey(keyData, 'auto', parseOpts); |
| } catch (e) { |
| if (e.name === 'KeyEncryptedError') { |
| getPassword(function (err, pw) { |
| parseOpts.passphrase = pw; |
| run(); |
| }); |
| return; |
| } |
| console.error('sshpk-sign: error loading private key "' + |
| opts.identity + '": ' + e.name + ': ' + e.message); |
| process.exit(1); |
| } |
| |
| var hash = opts.hash || key.defaultHashAlgorithm(); |
| |
| var signer; |
| try { |
| signer = key.createSign(hash); |
| } catch (e) { |
| console.error('sshpk-sign: error creating signer: ' + |
| e.name + ': ' + e.message); |
| process.exit(1); |
| } |
| |
| if (opts.verbose) { |
| console.error('sshpk-sign: using %s-%s with a %d bit key', |
| key.type, hash, key.size); |
| } |
| |
| var inFile = process.stdin; |
| var inFileName = 'stdin'; |
| |
| var inFilePath; |
| if (opts.file) { |
| inFilePath = opts.file; |
| } else if (opts._args.length === 1) { |
| inFilePath = opts._args[0]; |
| } |
| |
| if (inFilePath) |
| inFileName = path.basename(inFilePath); |
| |
| try { |
| if (inFilePath) { |
| fs.accessSync(inFilePath, fs.R_OK); |
| inFile = fs.createReadStream(inFilePath); |
| } |
| } catch (e) { |
| console.error('sshpk-sign: error opening input file' + |
| ': ' + e.name + ': ' + e.message); |
| process.exit(1); |
| } |
| |
| var outFile = process.stdout; |
| |
| try { |
| if (opts.out && !opts.identify) { |
| fs.accessSync(path.dirname(opts.out), fs.W_OK); |
| outFile = fs.createWriteStream(opts.out); |
| } |
| } catch (e) { |
| console.error('sshpk-sign: error opening output file' + |
| ': ' + e.name + ': ' + e.message); |
| process.exit(1); |
| } |
| |
| inFile.pipe(signer); |
| inFile.on('end', function () { |
| var sig; |
| try { |
| sig = signer.sign(); |
| } catch (e) { |
| console.error('sshpk-sign: error signing data: ' + |
| e.name + ': ' + e.message); |
| process.exit(1); |
| } |
| |
| var fmt = opts.format || 'asn1'; |
| var output; |
| try { |
| output = sig.toBuffer(fmt); |
| if (!opts.binary) |
| output = output.toString('base64'); |
| } catch (e) { |
| console.error('sshpk-sign: error converting signature' + |
| ' to ' + fmt + ' format: ' + e.name + ': ' + |
| e.message); |
| process.exit(1); |
| } |
| |
| outFile.write(output); |
| if (!opts.binary) |
| outFile.write('\n'); |
| outFile.once('drain', function () { |
| process.exit(0); |
| }); |
| }); |
| } |