ssh-agent-client-rs 1.1.2

Pure rust implementation of the ssh-agent protocol. It can be used to write clients that interact with the ssh agent.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38

use bytes::BytesMut;
use rand::{rng, RngCore};
use signature::Verifier;
use ssh_agent_client_rs::Client;
use ssh_key::{Certificate, PublicKey};
use std::env;
use std::fs::read_to_string;
use std::path::Path;

/// This example tests whether the ssh-agent referenced by the path
/// in the SSH_AUTH_SOCK environment variable holds a usable private
/// key that corresponds to PUBLIC_KEY much like the command
/// `ssh-add -T PUBLIC_KEY_PATH`
fn main() -> anyhow::Result<()> {
    let path = env::args()
        .nth(1)
        .expect("argument PUBLIC_KEY_PATH missing");

    let identity = read_to_string(Path::new(&path))?;
    let key_type = identity.split(" ").next().expect("Invalid key format");
    let agent_path = env::var("SSH_AUTH_SOCK").expect("SSH_AUTH_SOCK is not set");
    let mut client = Client::connect(Path::new(agent_path.as_str()))?;

    let mut data = BytesMut::zeroed(32);
    rng().fill_bytes(&mut data);
    let data = data.freeze();

    if key_type.contains("-cert-") {
        let cert = Certificate::from_openssh(&identity)?;
        let sig = client.sign(&cert, &data)?;
        cert.public_key().verify(&data, &sig)?;
    } else {
        let key = PublicKey::from_openssh(&identity)?;
        let sig = client.sign(&key, &data)?;
        key.key_data().verify(&data, &sig)?;
    }
    Ok(())
}