X-Git-Url: https://codewiz.org/gitweb?a=blobdiff_plain;f=src%2Fshare%2Fmh%2Fimport_key;h=e5982ca62a2f9bd0f418ae82bacdc918fe777575;hb=b55981fb8aa689aede58ed7ab4d8692c52b5c472;hp=2e73a8c6cc32878a11e413ca706f5290d91e55c7;hpb=be606510fb37cac8ca7eddadf719efb0598a2ed2;p=monkeysphere.git diff --git a/src/share/mh/import_key b/src/share/mh/import_key index 2e73a8c..e5982ca 100644 --- a/src/share/mh/import_key +++ b/src/share/mh/import_key @@ -13,35 +13,37 @@ import_key() { +local keyFile local hostName local userID -local fingerprint -# check for presense of secret key -# FIXME: is this the proper test to be doing here? -fingerprint_host_key >/dev/null \ - && failure "An OpenPGP host key already exists." - -hostName=${1:-$(hostname -f)} +keyFile="$1" +[ -f "$keyFile" ] +hostName=${2:-$(hostname -f)} userID="ssh://${hostName}" # create host home -mkdir -p "$GNUPGHOME_HOST" -chmod 700 "$GNUPGHOME_HOST" +mkdir -p "${MHDATADIR}" +mkdir -p "${MHTMPDIR}" +mkdir -p "${GNUPGHOME_HOST}" +chmod 700 "${GNUPGHOME_HOST}" log verbose "importing ssh key..." # translate ssh key to a private key -(umask 077 && \ - pem2openpgp "$userID" | gpg_host --import) +PEM2OPENPGP_USAGE_FLAGS=authenticate pem2openpgp "$userID" <"$keyFile" \ + | gpg_host --import + +# load the new host fpr into the fpr variable +load_fingerprint_secret -# find the key fingerprint of the newly converted key -fingerprint=$(fingerprint_host_key) +# export the host public key to the monkeysphere ssh pub key file +log debug "creating ssh public key file..." +ssh-keygen -y -f "$keyFile" > "$HOST_KEY_PUB" +log info "SSH host public key file: $HOST_KEY_PUB" -# export public key to file -log debug "exporting openpgp public key..." -gpg_host --export-options export-minimal --armor --export "0x${fingerprint}!" > "${MHDATADIR}/ssh_host_rsa_key.pub.gpg" -log info "SSH host public key in OpenPGP form: ${MHDATADIR}/ssh_host_rsa_key.pub.gpg" +# export to gpg public key to file +create_gpg_pub_file # show info about new key show_key