X-Git-Url: https://codewiz.org/gitweb?a=blobdiff_plain;f=src%2Fshare%2Fmh%2Fimport_key;h=0f362b8ce8aff7f1c95d8b56da9b9b3e963ce6ee;hb=c39d11682121a43e690465d194a5bd9fa2275f42;hp=1efb1ac5ce354836e0d63c0539135e1a476f05b6;hpb=c0ab14d9df7959057a04f2ebd837c50e169c1c01;p=monkeysphere.git diff --git a/src/share/mh/import_key b/src/share/mh/import_key index 1efb1ac..0f362b8 100644 --- a/src/share/mh/import_key +++ b/src/share/mh/import_key @@ -8,39 +8,53 @@ # Jamie McClelland # Daniel Kahn Gillmor # -# They are Copyright 2008-2009 and are all released under the GPL, +# They are Copyright 2008-2010 and are all released under the GPL, # version 3 or later. import_key() { -local hostName -local userID +local keyFile="$1" +local serviceName="$2" -# check for presense of a key -[ "$FINGERPRINT" ] && \ - failure "An OpenPGP host key already exists." +# check that key file specified +if [ -z "$keyFile" ] ; then + failure "Must specify PEM-encoded key file to import, or specify '-' for stdin." +fi -hostName=${1:-$(hostname -f)} +# fail if hostname not specified +if [ -z "$serviceName" ] ; then + failure "You must specify a service name for use in the OpenPGP certificate user ID." +fi -userID="ssh://${hostName}" +# test that a key with that user ID does not already exist +prompt_userid_exists "$serviceName" -# create host home -mkdir -p "$GNUPGHOME_HOST" -chmod 700 "$GNUPGHOME_HOST" - -log verbose "importing ssh key..." -# translate ssh key to a private key -PEM2OPENPGP_USAGE_FLAGS=authenticate pem2openpgp "$userID" | \ - gpg_host --import +# check that the service name is well formatted +check_service_name "$serviceName" -# find the key fingerprint of the newly converted key -HOST_FINGERPRINT=$(fingerprint_host_key) -export HOST_FINGERPRINT - -# export public key to file -gpg_host_export_to_ssh_file +# create host home +mkdir -p "${MHDATADIR}" +mkdir -p "${GNUPGHOME_HOST}" +chmod 700 "${GNUPGHOME_HOST}" + +# import pem-encoded key to an OpenPGP private key +if [ "$keyFile" = '-' ] ; then + log verbose "importing key from stdin..." + PEM2OPENPGP_USAGE_FLAGS=authenticate pem2openpgp "$serviceName" \ + | gpg_host --import +else + log verbose "importing key from file '$keyFile'..." + PEM2OPENPGP_USAGE_FLAGS=authenticate pem2openpgp "$serviceName" \ + <"$keyFile" \ + | gpg_host --import +fi + +# export to OpenPGP public key to file +update_pgp_pub_file + +log info "host key imported:" # show info about new key -show_key +show_key "$serviceName" }