mirror of
https://gitea.com/gitea/tea.git
synced 2026-10-26 11:01:25 +01:00
bircni
c5f674111a
Reverts #1126, #1125, #1124, #1123 and #1122. `go.mod` keeps the Go 1.26 line with toolchain `go1.26.9` (instead of the original `go1.26.6`) so the security fix from #1131 isn't lost. reopens #69 reopens #141 reopens #162 reopens #172 reopens #197 reopens #232 reopens #240 reopens #246 reopens #323 reopens #325 reopens #326 reopens #328 reopens #344 reopens #351 reopens #373 reopens #403 reopens #406 reopens #417 reopens #430 reopens #457 reopens #480 reopens #482 reopens #489 reopens #490 reopens #498 reopens #500 reopens #504 reopens #510 reopens #516 reopens #523 reopens #556 reopens #560 reopens #569 reopens #571 reopens #602 reopens #632 reopens #633 reopens #643 reopens #666 reopens #670 reopens #672 reopens #677 reopens #683 reopens #697 reopens #726 reopens #737 reopens #770 reopens #779 reopens #804 reopens #817 reopens #831 reopens #833 reopens #834 reopens #908 reopens #966 reopens #1023 reopens #1029 reopens #1032 reopens #1050 reopens #1052 reopens #1069 reopens #1073 reopens #1087 reopens #1091 reopens #1094 reopens #1110 reopens #1115 reopens #1116 reopens #1118 Reviewed-on: https://gitea.com/gitea/tea/pulls/1146 Reviewed-by: TheFox0x7 <95654+thefox0x7@noreply.gitea.com>
94 lines
2.0 KiB
Go
94 lines
2.0 KiB
Go
// Copyright 2022 The Gitea Authors. All rights reserved.
|
|
// SPDX-License-Identifier: MIT
|
|
|
|
package task
|
|
|
|
import (
|
|
"os"
|
|
"path/filepath"
|
|
"strings"
|
|
|
|
"gitea.dev/sdk"
|
|
"golang.org/x/crypto/ssh"
|
|
|
|
"gitea.dev/tea/modules/utils"
|
|
)
|
|
|
|
// ListSSHPubkey lists all the ssh keys in the ssh agent and the ~/.ssh/*.pub files
|
|
// It returns a list of SSH keys in the format of:
|
|
// "fingerprint keytype comment - principals: principals (ssh-agent or path to pubkey file)"
|
|
func ListSSHPubkey() []string {
|
|
var keys []string
|
|
|
|
keys = append(keys, getAgentKeys()...)
|
|
keys = append(keys, getLocalKeys()...)
|
|
|
|
return keys
|
|
}
|
|
|
|
func getAgentKeys() []string {
|
|
ag, err := gitea.GetAgent()
|
|
if err != nil {
|
|
return []string{}
|
|
}
|
|
|
|
akeys, err := ag.List()
|
|
if err != nil {
|
|
return nil
|
|
}
|
|
|
|
var keys []string
|
|
|
|
for _, akey := range akeys {
|
|
if key := parseKeys([]byte(akey.String()), "ssh-agent"); key != "" {
|
|
keys = append(keys, key)
|
|
}
|
|
}
|
|
|
|
return keys
|
|
}
|
|
|
|
func getLocalKeys() []string {
|
|
var keys []string
|
|
|
|
// enumerate ~/.ssh/*.pub files
|
|
glob, err := utils.AbsPathWithExpansion("~/.ssh/*.pub")
|
|
if err != nil {
|
|
return []string{}
|
|
}
|
|
localPubkeyPaths, err := filepath.Glob(glob)
|
|
if err != nil {
|
|
return []string{}
|
|
}
|
|
|
|
// parse each local key with present privkey & compare fingerprints to online keys
|
|
for _, pubkeyPath := range localPubkeyPaths {
|
|
var pubkeyFile []byte
|
|
pubkeyFile, err = os.ReadFile(pubkeyPath)
|
|
if err != nil {
|
|
continue
|
|
}
|
|
|
|
if key := parseKeys(pubkeyFile, pubkeyPath); key != "" {
|
|
keys = append(keys, key)
|
|
}
|
|
}
|
|
|
|
return keys
|
|
}
|
|
|
|
func parseKeys(pkinput []byte, sshPath string) string {
|
|
pkey, comment, _, _, err := ssh.ParseAuthorizedKey(pkinput)
|
|
if err != nil {
|
|
return ""
|
|
}
|
|
|
|
if strings.Contains(pkey.Type(), "cert-v01@openssh.com") {
|
|
principals := pkey.(*ssh.Certificate).ValidPrincipals
|
|
return ssh.FingerprintSHA256(pkey) + " " + pkey.Type() + " " + comment +
|
|
" - principals: " + strings.Join(principals, ",") + " (" + sshPath + ")"
|
|
}
|
|
|
|
return ssh.FingerprintSHA256(pkey) + " " + pkey.Type() + " " + comment + " (" + sshPath + ")"
|
|
}
|