X-Git-Url: https://codewiz.org/gitweb?a=blobdiff_plain;f=src%2Fmonkeysphere-ssh-proxycommand;h=a7b87ca76f9abff956e1f8a1ea885f963332c2c0;hb=86f97d40d6fb60f7dde3c7e3a8aab0124f151d35;hp=438db87e993f30a2afa07a849731235cc9aae599;hpb=a354378a45cfd1afb9efa63647df244651fad2af;p=monkeysphere.git diff --git a/src/monkeysphere-ssh-proxycommand b/src/monkeysphere-ssh-proxycommand index 438db87..a7b87ca 100755 --- a/src/monkeysphere-ssh-proxycommand +++ b/src/monkeysphere-ssh-proxycommand @@ -1,4 +1,4 @@ -#!/bin/sh +#!/bin/bash # monkeysphere-ssh-proxycommand: MonkeySphere ssh ProxyCommand hook # @@ -13,15 +13,18 @@ # established. Can be added to ~/.ssh/config as follows: # ProxyCommand monkeysphere-ssh-proxycommand %h %p +######################################################################## + usage() { cat <&2 usage: ssh -o ProxyCommand="$(basename $0) %h %p" ... EOF } -log() { - echo "$@" >&2 -} +######################################################################## + +# export the monkeysphere log level +export MONKEYSPHERE_LOG_LEVEL if [ "$1" = '--no-connect' ] ; then NO_CONNECT='true' @@ -31,12 +34,10 @@ fi HOST="$1" PORT="$2" -MS_HOME=${MS_HOME:-"${HOME}/.config/monkeysphere"} - if [ -z "$HOST" ] ; then - log "host must be specified." + echo "Host not specified." >&2 usage - exit 1 + exit 255 fi if [ -z "$PORT" ] ; then PORT=22 @@ -50,6 +51,12 @@ else fi URI="ssh://${HOSTP}" +# specify keyserver checking. the behavior of this proxy command is +# intentionally different than that of running monkeyesphere normally, +# and keyserver checking is intentionally done under certain +# circumstances. This can be overridden by setting the +# MONKEYSPHERE_CHECK_KEYSERVER environment variable. + # if the host is in the gpg keyring... if gpg --list-key ="${URI}" 2>&1 >/dev/null ; then # do not check the keyserver @@ -59,7 +66,7 @@ if gpg --list-key ="${URI}" 2>&1 >/dev/null ; then else # if the host key is found in the known_hosts file... # FIXME: this only works for default known_hosts location - hostKey=$(ssh-keygen -F "$HOST") + hostKey=$(ssh-keygen -F "$HOST" 2>/dev/null) if [ "$hostKey" ] ; then # do not check the keyserver @@ -74,7 +81,7 @@ else CHECK_KEYSERVER="true" fi fi - +# set and export the variable for use by monkeysphere MONKEYSPHERE_CHECK_KEYSERVER=${MONKEYSPHERE_CHECK_KEYSERVER:="$CHECK_KEYSERVER"} export MONKEYSPHERE_CHECK_KEYSERVER @@ -88,7 +95,7 @@ if [ -z "$NO_CONNECT" ] ; then elif (which socat 2>/dev/null >/dev/null); then exec socat STDIO "TCP:$HOST:$PORT" else - log "Neither netcat nor socat found -- could not complete monkeysphere-ssh-proxycommand connection to $HOST:$PORT" - exit 1 + echo "Neither netcat nor socat found -- could not complete monkeysphere-ssh-proxycommand connection to $HOST:$PORT" >&2 + exit 255 fi fi