Class: AuthKeys

Inherits:
Object
  • Object
show all
Defined in:
lib/auth_keys.rb

Class Method Summary collapse

Class Method Details

.[](key) ⇒ Object 



97
98
99
 
# File 'lib/auth_keys.rb', line 97

def [](key)
    self.get(key)
end

.decrypt ⇒ Object 



23
24
25
26
27
28
29
 
# File 'lib/auth_keys.rb', line 23

def decrypt()
    data = self.read
    return unless is_encrypted?(data)
    data = data.force_encoding("ASCII-8BIT")
    data = self.decrypt_data(data,self.master_key_data)
    self.save(data)
end

.decrypt_data(data, pass) ⇒ Object 



30
31
32
33
34
35
36
37
38
 
# File 'lib/auth_keys.rb', line 30

def decrypt_data(data,pass)
    data = data.force_encoding("ASCII-8BIT")
    salt = data[8,8]
    data = data[16, data.size]
    cipher = OpenSSL::Cipher::Cipher.new("AES-256-CBC")
    cipher.decrypt
    cipher.pkcs5_keyivgen(pass, salt, 1 )
    cipher.update(data) + cipher.final
end

.decrypt_data_by_privkey(data) ⇒ Object 



45
46
47
 
# File 'lib/auth_keys.rb', line 45

def decrypt_data_by_privkey(data)
    self.rsautil.private_decrypt(data)
end

.encrypt ⇒ Object 



16
17
18
19
20
21
22
 
# File 'lib/auth_keys.rb', line 16

def encrypt()
    data = self.read
    return  if is_encrypted?(data)

    data = self.encrypt_data(data,self.master_key_data)
    save(data)
end

.encrypt_data(data, pass) ⇒ Object 



7
8
9
10
11
12
13
14
15
 
# File 'lib/auth_keys.rb', line 7

def encrypt_data(data,pass)
    cipher = OpenSSL::Cipher::Cipher.new("AES-256-CBC")
    salt = OpenSSL::Random.random_bytes(8)
    cipher.encrypt
    cipher.pkcs5_keyivgen(pass, salt, 1)
    data = cipher.update(data) + cipher.final
    ## salted
    data = "Salted__" + salt + data
end

.encrypt_data_by_pubkey(data) ⇒ Object 



42
43
44
 
# File 'lib/auth_keys.rb', line 42

def encrypt_data_by_pubkey(data)
    self.rsautil.public_encrypt(data)
end

.get(key) ⇒ Object 



89
90
91
92
93
94
95
96
 
# File 'lib/auth_keys.rb', line 89

def get(key)
    hash = self.load
    if key.class == Regexp then
        key = self.keys.find{|e| e=~key}
        return nil unless key
    end
    hash.key?(key) ? hash[key] : nil ;
end

.is_encrypted?(str) ⇒ Boolean

Returns:

  • (Boolean) 


52
53
54
55
56
57
58
59
60
61
 
# File 'lib/auth_keys.rb', line 52

def is_encrypted?(str)
    return true if self.is_salted?(str)
    # check encrypt by trying to treat as  UTF-8 String
    begin
        str.split("")
        return false
    rescue => e
        return true
    end
end

.is_salted?(str) ⇒ Boolean

Returns:

  • (Boolean) 


49
50
51
 
# File 'lib/auth_keys.rb', line 49

def is_salted?(str)
    /Salted__/ === str[0,8]
end

.KEY_PATH ⇒ Object 



5
 
# File 'lib/auth_keys.rb', line 5

def KEY_PATH ; ENV["KEY_PATH"] ||  "~/.auth_keys" end

.keys ⇒ Object 



100
101
102
 
# File 'lib/auth_keys.rb', line 100

def keys
    self.load.keys
end

.load ⇒ Object 



75
76
77
78
79
80
81
82
83
 
# File 'lib/auth_keys.rb', line 75

def load()
    content = self.read
    content = self.decrypt_data(content,self.master_key_data) if is_encrypted?(content)
    array = content
                .split("\n")
                .reject{|e| e.strip =~/^#/}
                .map(&:split).map{|e| [e[0],[   e[1],e[2]  ] ] }
    password_table = Hash[array]
end

.MASTER_KEY ⇒ Object 



6
 
# File 'lib/auth_keys.rb', line 6

def MASTER_KEY ;  ENV["MASTER_KEY"] ||  "~/.ssh/id_rsa" end

.master_key_data ⇒ Object 



62
63
64
65
66
 
# File 'lib/auth_keys.rb', line 62

def master_key_data
    path = File.expand_path(self.MASTER_KEY)
    raise unless File.exists?(path)
    open(path).read
end

.read ⇒ Object 



84
85
86
87
88
 
# File 'lib/auth_keys.rb', line 84

def read()
    path = File.expand_path(self.KEY_PATH)
    raise unless File.exists?(path)
    content = open(path).read
end

.rsautil ⇒ Object 



39
40
41
 
# File 'lib/auth_keys.rb', line 39

def rsautil
    OpenSSL::PKey::RSA.new(self.master_key_data)
end

.save(content) ⇒ Object 



67
68
69
70
71
72
73
 
# File 'lib/auth_keys.rb', line 67

def save(content)
    path = File.expand_path(self.KEY_PATH)
    raise "#{path} not found." unless File.exists?(path)
    open(path, "w"){|f|
        f.write content
    }
end