sshcerts 0.14.1

A library for parsing, verifying, and creating SSH Certificates
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71

use std::env;

use clap::{Arg, Command};

use sshcerts::fido::generate::generate_new_ssh_key;

use std::fs::File;

fn main() {
    env_logger::init();
    let matches = Command::new("new-fido-sshkey")
        .version(env!("CARGO_PKG_VERSION"))
        .author("Mitchell Grenier <mitchell@confurious.io>")
        .about("Generate a new SSH Key backed by a hardware token")
        .arg(
            Arg::new("pin")
                .help("If using an SK key handle, what PIN to use with the key (not always needed)")
                .long("pin")
                .short('p')
                .required(false)
                .takes_value(true)
        )
        .arg(
            Arg::new("device")
                .help("Manually specify a device to use. If not provided, one will be chosen randomly or by user tap selection (when implemented)")
                .long("device")
                .short('d')
                .required(false)
                .takes_value(true)
        )
        .arg(
            Arg::new("out")
                .help("Path to write the resultant private key handle to")
                .long("out")
                .short('o')
                .required(false)
                .takes_value(true)
        )
        .get_matches();

    let pin = if let Some(pin) = matches.value_of("pin") {
        Some(pin.to_owned())
    } else {
        None
    };

    let device_path = if let Some(dev) = matches.value_of("device") {
        Some(dev.to_owned())
    } else {
        None
    };

    match generate_new_ssh_key("ssh:test_sk_key", "new-fido-sshkey", pin, device_path) {
        Ok(key) => {
            println!("{:#}", key.private_key.pubkey);

            if let Some(out) = matches.value_of("out") {
                let mut out = File::create(out).unwrap();
                key.private_key.write(&mut out).unwrap();
            } else {
                let mut buf = std::io::BufWriter::new(Vec::new());
                key.private_key.write(&mut buf).unwrap();
                let serialized = String::from_utf8(buf.into_inner().unwrap()).unwrap();
                println!("Your new private key handle:\n{}", serialized);
            }
        }
        Err(e) => {
            println!("Failed to generate new SSH Key: {}", e.to_string());
        }
    }
}