X-Git-Url: https://codewiz.org/gitweb?a=blobdiff_plain;f=src%2Fshare%2Fmh%2Fimport_key;h=bca7319c0e400a30977d5e70152e7d6b3cb41360;hb=321ff6d4c721f2f699c57874335ce792c456a19a;hp=e5982ca62a2f9bd0f418ae82bacdc918fe777575;hpb=b55981fb8aa689aede58ed7ab4d8692c52b5c472;p=monkeysphere.git diff --git a/src/share/mh/import_key b/src/share/mh/import_key index e5982ca..bca7319 100644 --- a/src/share/mh/import_key +++ b/src/share/mh/import_key @@ -13,37 +13,50 @@ import_key() { -local keyFile local hostName +local domain local userID -keyFile="$1" -[ -f "$keyFile" ] +hostName="$1" + +# use the default hostname if not specified +if [ -z "$hostName" ] ; then + hostName=$(hostname -f) || failure "Could not determine hostname." + # test that the domain is not obviously illegitimate + domain=${foo##*.} + case $domain in + 'local'|'localdomain') + failure "Host domain '$domain' is not legitimate. Aborting key import." + ;; + esac + # test that there are at least two parts + if (( $(echo "$hostName" | tr . ' ' | wc -w) < 2 )) ; then + failure "Host name '$hostName' is not legitimate. Aborting key import." + fi +fi -hostName=${2:-$(hostname -f)} userID="ssh://${hostName}" # create host home mkdir -p "${MHDATADIR}" -mkdir -p "${MHTMPDIR}" mkdir -p "${GNUPGHOME_HOST}" chmod 700 "${GNUPGHOME_HOST}" log verbose "importing ssh key..." # translate ssh key to a private key -PEM2OPENPGP_USAGE_FLAGS=authenticate pem2openpgp "$userID" <"$keyFile" \ +PEM2OPENPGP_USAGE_FLAGS=authenticate pem2openpgp "$userID" \ | gpg_host --import -# load the new host fpr into the fpr variable +# load the new host fpr into the fpr variable. this is so we can +# create the gpg pub key file. we have to do this from the secret key +# ring since we obviously don't have the gpg pub key file yet, since +# that's what we're trying to produce (see below). load_fingerprint_secret -# export the host public key to the monkeysphere ssh pub key file -log debug "creating ssh public key file..." -ssh-keygen -y -f "$keyFile" > "$HOST_KEY_PUB" -log info "SSH host public key file: $HOST_KEY_PUB" - # export to gpg public key to file -create_gpg_pub_file +update_gpg_pub_file + +log info "host key imported:" # show info about new key show_key