123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202 |
- #!/usr/bin/env node
- // -*- mode: js -*-
- // vim: set filetype=javascript :
- // Copyright 2015 Joyent, Inc. All rights reserved.
- var dashdash = require('dashdash');
- var sshpk = require('../lib/index');
- var fs = require('fs');
- var path = require('path');
- var tty = require('tty');
- var readline = require('readline');
- var getPassword = require('getpass').getPass;
- var options = [
- {
- names: ['outformat', 't'],
- type: 'string',
- help: 'Output format'
- },
- {
- names: ['informat', 'T'],
- type: 'string',
- help: 'Input format'
- },
- {
- names: ['file', 'f'],
- type: 'string',
- help: 'Input file name (default stdin)'
- },
- {
- names: ['out', 'o'],
- type: 'string',
- help: 'Output file name (default stdout)'
- },
- {
- names: ['private', 'p'],
- type: 'bool',
- help: 'Produce a private key as output'
- },
- {
- names: ['derive', 'd'],
- type: 'string',
- help: 'Output a new key derived from this one, with given algo'
- },
- {
- names: ['identify', 'i'],
- type: 'bool',
- help: 'Print key metadata instead of converting'
- },
- {
- names: ['comment', 'c'],
- type: 'string',
- help: 'Set key comment, if output format supports'
- },
- {
- names: ['help', 'h'],
- type: 'bool',
- help: 'Shows this help text'
- }
- ];
- if (require.main === module) {
- var parser = dashdash.createParser({
- options: options
- });
- try {
- var opts = parser.parse(process.argv);
- } catch (e) {
- console.error('sshpk-conv: error: %s', e.message);
- process.exit(1);
- }
- if (opts.help || opts._args.length > 1) {
- var help = parser.help({}).trimRight();
- console.error('sshpk-conv: converts between SSH key formats\n');
- console.error(help);
- console.error('\navailable formats:');
- console.error(' - pem, pkcs1 eg id_rsa');
- console.error(' - ssh eg id_rsa.pub');
- console.error(' - pkcs8 format you want for openssl');
- console.error(' - openssh like output of ssh-keygen -o');
- console.error(' - rfc4253 raw OpenSSH wire format');
- process.exit(1);
- }
- /*
- * Key derivation can only be done on private keys, so use of the -d
- * option necessarily implies -p.
- */
- if (opts.derive)
- opts.private = true;
- var inFile = process.stdin;
- var inFileName = 'stdin';
- var inFilePath;
- if (opts.file) {
- inFilePath = opts.file;
- } else if (opts._args.length === 1) {
- inFilePath = opts._args[0];
- }
- if (inFilePath)
- inFileName = path.basename(inFilePath);
- try {
- if (inFilePath) {
- fs.accessSync(inFilePath, fs.R_OK);
- inFile = fs.createReadStream(inFilePath);
- }
- } catch (e) {
- console.error('sshpk-conv: error opening input file' +
- ': ' + e.name + ': ' + e.message);
- process.exit(1);
- }
- var outFile = process.stdout;
- try {
- if (opts.out && !opts.identify) {
- fs.accessSync(path.dirname(opts.out), fs.W_OK);
- outFile = fs.createWriteStream(opts.out);
- }
- } catch (e) {
- console.error('sshpk-conv: error opening output file' +
- ': ' + e.name + ': ' + e.message);
- process.exit(1);
- }
- var bufs = [];
- inFile.on('readable', function () {
- var data;
- while ((data = inFile.read()))
- bufs.push(data);
- });
- var parseOpts = {};
- parseOpts.filename = inFileName;
- inFile.on('end', function processKey() {
- var buf = Buffer.concat(bufs);
- var fmt = 'auto';
- if (opts.informat)
- fmt = opts.informat;
- var f = sshpk.parseKey;
- if (opts.private)
- f = sshpk.parsePrivateKey;
- try {
- var key = f(buf, fmt, parseOpts);
- } catch (e) {
- if (e.name === 'KeyEncryptedError') {
- getPassword(function (err, pw) {
- if (err) {
- console.log('sshpk-conv: ' +
- err.name + ': ' +
- err.message);
- process.exit(1);
- }
- parseOpts.passphrase = pw;
- processKey();
- });
- return;
- }
- console.error('sshpk-conv: ' +
- e.name + ': ' + e.message);
- process.exit(1);
- }
- if (opts.derive)
- key = key.derive(opts.derive);
- if (opts.comment)
- key.comment = opts.comment;
- if (!opts.identify) {
- fmt = undefined;
- if (opts.outformat)
- fmt = opts.outformat;
- outFile.write(key.toBuffer(fmt));
- if (fmt === 'ssh' ||
- (!opts.private && fmt === undefined))
- outFile.write('\n');
- outFile.once('drain', function () {
- process.exit(0);
- });
- } else {
- var kind = 'public';
- if (sshpk.PrivateKey.isPrivateKey(key))
- kind = 'private';
- console.log('%s: a %d bit %s %s key', inFileName,
- key.size, key.type.toUpperCase(), kind);
- if (key.type === 'ecdsa')
- console.log('ECDSA curve: %s', key.curve);
- if (key.comment)
- console.log('Comment: %s', key.comment);
- console.log('Fingerprint:');
- console.log(' ' + key.fingerprint().toString());
- console.log(' ' + key.fingerprint('md5').toString());
- process.exit(0);
- }
- });
- }
|