X-Git-Url: https://codewiz.org/gitweb?a=blobdiff_plain;f=src%2Fshare%2Fmh%2Fimport_key;h=557bb7faaee6712942bfe5bdd0eb5b195013c505;hb=41b38ace2b23bebf61fbf63cda8d3be005d28385;hp=74dc0b3816d7584b2483498238efb6599299896b;hpb=0c874fdd6abfa4b74d7805f2d2d121f08211b4aa;p=monkeysphere.git diff --git a/src/share/mh/import_key b/src/share/mh/import_key index 74dc0b3..557bb7f 100644 --- a/src/share/mh/import_key +++ b/src/share/mh/import_key @@ -14,9 +14,27 @@ import_key() { local hostName +local domain local userID -hostName=${1:-$(hostname -f)} +hostName="$1" + +# use the default hostname if not specified +if [ -z "$hostName" ] ; then + hostName=$(hostname -f) + # test that the domain is not obviously illegitimate + domain=${foo##*.} + case $domain in + 'local'|'localdomain') + failure "Host domain '$domain' is not legitimate. Aborting key import." + ;; + esac + # test that there are at least two parts + if (( $(echo "$hostName" | tr . ' ' | wc -w) < 2 )) ; then + failure "Host name '$hostName' is not legitimate. Aborting key import." + fi +fi + userID="ssh://${hostName}" # create host home @@ -28,7 +46,7 @@ chmod 700 "${GNUPGHOME_HOST}" log verbose "importing ssh key..." # translate ssh key to a private key PEM2OPENPGP_USAGE_FLAGS=authenticate pem2openpgp "$userID" \ - | gpg_host --import + | gpg_host --import 2>&1 | log debug # load the new host fpr into the fpr variable. this is so we can # create the gpg pub key file. we have to do this from the secret key @@ -37,7 +55,9 @@ PEM2OPENPGP_USAGE_FLAGS=authenticate pem2openpgp "$userID" \ load_fingerprint_secret # export to gpg public key to file -create_gpg_pub_file +update_gpg_pub_file + +log info "host key imported:" # show info about new key show_key