X-Git-Url: https://codewiz.org/gitweb?a=blobdiff_plain;f=src%2Fshare%2Fmh%2Fimport_key;h=f7c69c3eaeb007becc0f59fc5d4fa74ec6f5c3e6;hb=bb8f498db80efcfffdf60ef317254d7355ea54ef;hp=e5982ca62a2f9bd0f418ae82bacdc918fe777575;hpb=b55981fb8aa689aede58ed7ab4d8692c52b5c472;p=monkeysphere.git diff --git a/src/share/mh/import_key b/src/share/mh/import_key index e5982ca..f7c69c3 100644 --- a/src/share/mh/import_key +++ b/src/share/mh/import_key @@ -13,37 +13,53 @@ import_key() { -local keyFile +local sshKeyFile local hostName +local domain local userID -keyFile="$1" -[ -f "$keyFile" ] +sshKeyFile="$1" +hostName="$2" + +# check that key file specified +if [ -z "$sshKeyFile" ] ; then + failure "Must specify ssh key file to import, or specify '-' for stdin." +fi + +# fail if hostname not specified +if [ -z "$hostName" ] ; then + failure "You must specify a fully-qualified domain name for use in the host certificate user ID." +fi -hostName=${2:-$(hostname -f)} userID="ssh://${hostName}" # create host home mkdir -p "${MHDATADIR}" -mkdir -p "${MHTMPDIR}" mkdir -p "${GNUPGHOME_HOST}" chmod 700 "${GNUPGHOME_HOST}" -log verbose "importing ssh key..." -# translate ssh key to a private key -PEM2OPENPGP_USAGE_FLAGS=authenticate pem2openpgp "$userID" <"$keyFile" \ - | gpg_host --import +# import ssh key to a private key +if [ "$sshKeyFile" = '-' ] ; then + log verbose "importing ssh key from stdin..." + PEM2OPENPGP_USAGE_FLAGS=authenticate pem2openpgp "$userID" \ + | gpg_host --import +else + log verbose "importing ssh key from file '$sshKeyFile'..." + PEM2OPENPGP_USAGE_FLAGS=authenticate pem2openpgp "$userID" \ + <"$sshKeyFile" \ + | gpg_host --import +fi -# load the new host fpr into the fpr variable +# load the new host fpr into the fpr variable. this is so we can +# create the gpg pub key file. we have to do this from the secret key +# ring since we obviously don't have the gpg pub key file yet, since +# that's what we're trying to produce (see below). load_fingerprint_secret -# export the host public key to the monkeysphere ssh pub key file -log debug "creating ssh public key file..." -ssh-keygen -y -f "$keyFile" > "$HOST_KEY_PUB" -log info "SSH host public key file: $HOST_KEY_PUB" - # export to gpg public key to file -create_gpg_pub_file +update_gpg_pub_file + +log info "host key imported:" # show info about new key show_key