sshcerts 0.3.13

A library for parsing, verifying, and creating SSH Certificates
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53

use std::env;

use sshcerts::yubikey::ssh::ssh_cert_fetch_pubkey;
use sshcerts::yubikey::{fetch_attestation, fetch_subject};
use sshcerts::yubikey::{RetiredSlotId, SlotId};

use std::convert::TryFrom;

fn help() {
    println!("Print the SSH key fingerprint for all Yubikey slots");
    println!("Usage: yk-fingerprint");
}

fn main() {
    if env::args().len() > 1 {
        return help();
    }

    println!("Normal Slots:");
    for slot in [0x9a, 0x9c, 0x9e, 0x9d, 0x9e, 0xf9].iter().map(|x| *x as u8) {
        let s = SlotId::try_from(slot).unwrap();
        match (fetch_subject(s), ssh_cert_fetch_pubkey(s))  {
            (Ok(subj), Some(cert)) => {
                let attest = fetch_attestation(s);
                println!("\t{:?}:\t[Fingerprint: {}] [Attest: {}] Subject: [{}]",
                    s,
                    cert.fingerprint().hash,
                    if attest.is_some() {"Yes" } else { "No "},
                    subj
                )
            }
            _ => println!("\t{:?}:\tNo cert found", s),
        }
    }

    println!("Retired Slots:");
    for slot in 0x82..0x96_u8 {
        let slot = SlotId::Retired(RetiredSlotId::try_from(slot).unwrap());
        match (fetch_subject(slot), ssh_cert_fetch_pubkey(slot)) {
            (Ok(subj), Some(cert)) => {
                let attest = fetch_attestation(slot);
                println!("\t{:?}:\t[Fingerprint: {}] [Attest: {}] Subject: [{}] PubKey: [{}]",
                    slot,
                    cert.fingerprint().hash,
                    if attest.is_some() {"Yes" } else { "No "},
                    subj,
                    cert,
                )
            },
            _ => println!("\t{:?}:\tNo cert found", slot),
        }
    }
}