clevis 0.4.4

A preliminary Rust implementation of the clevis protocol
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75

#![allow(unused)]

use std::io::stdin;
// use clevis::{DecryptConfig, EncryptConfig, EncryptSource};
use std::io::{BufRead, Read};

use clap::{Args, Parser, Subcommand};

#[derive(Debug, Parser)]
struct Cli {
    #[command(subcommand)]
    command: Commands,
}

#[derive(Debug, Subcommand)]
enum Commands {
    /// Encrypt stdin data and print it to stdout
    Encrypt(EncryptArgs),
    /// Decrypt stdin data and print it to stdout
    Decrypt { name: Option<String> },
}

#[derive(Debug, Args)]
struct EncryptArgs {
    /// The base URL of the Tang server
    #[arg(short, long)]
    url: String,
    /// The thumbprint of a trusted signing key
    #[arg(short, long)]
    thumbprint: Option<String>,
    /// A filename containing a trusted advertisement
    #[arg(short, long)]
    adv: Option<String>,
    /// A trusted advertisement (raw JSON)
    #[arg(long)]
    adv_file: Option<String>,
    /// Skip the advertisement check
    #[arg(short = 'y', long, default_value_t = false)]
    skip_trust: bool,
}

fn main() {
    env_logger::init();
    let cli = Cli::parse();

    match cli.command {
        Commands::Encrypt(v) => run_encryption(v),
        Commands::Decrypt { name: _ } => run_decryption(),
    }
}

fn run_encryption(args: EncryptArgs) {
    let thp = args.thumbprint.unwrap_or_default();
    // let process = EncryptConfig {
    //     thp,
    //     source: EncryptSource::Server(args.url),
    // };

    // let mut buf: Vec<u8> = Vec::new();
    // stdin().lock().read_to_end(&mut buf).unwrap();

    // let res = process.encrypt(&buf);

    // if let Err(err) = res {
    //     eprintln!("error: {err:?}");
    // }
}

fn run_decryption() {
    let mut buf: Vec<u8> = Vec::new();
    stdin().lock().read_to_end(&mut buf).unwrap();
    // stdin().lock().read_until(b'.', &mut buf).unwrap();
    // buf.pop(); // remove trailing '.'
    // DecryptConfig::from_b64_jwe(&buf).unwrap();
}