#!/usr/bin/env node
							 | 
						|
								// -*- mode: js -*-
							 | 
						|
								// vim: set filetype=javascript :
							 | 
						|
								// Copyright 2015 Joyent, Inc.  All rights reserved.
							 | 
						|
								
							 | 
						|
								var dashdash = require('dashdash');
							 | 
						|
								var sshpk = require('../lib/index');
							 | 
						|
								var fs = require('fs');
							 | 
						|
								var path = require('path');
							 | 
						|
								var getPassword = require('getpass').getPass;
							 | 
						|
								
							 | 
						|
								var options = [
							 | 
						|
									{
							 | 
						|
										names: ['hash', 'H'],
							 | 
						|
										type: 'string',
							 | 
						|
										help: 'Hash algorithm (sha1, sha256, sha384, sha512)'
							 | 
						|
									},
							 | 
						|
									{
							 | 
						|
										names: ['verbose', 'v'],
							 | 
						|
										type: 'bool',
							 | 
						|
										help: 'Display verbose info about key and hash used'
							 | 
						|
									},
							 | 
						|
									{
							 | 
						|
										names: ['identity', 'i'],
							 | 
						|
										type: 'string',
							 | 
						|
										help: 'Path to key to use'
							 | 
						|
									},
							 | 
						|
									{
							 | 
						|
										names: ['file', 'f'],
							 | 
						|
										type: 'string',
							 | 
						|
										help: 'Input filename'
							 | 
						|
									},
							 | 
						|
									{
							 | 
						|
										names: ['out', 'o'],
							 | 
						|
										type: 'string',
							 | 
						|
										help: 'Output filename'
							 | 
						|
									},
							 | 
						|
									{
							 | 
						|
										names: ['format', 't'],
							 | 
						|
										type: 'string',
							 | 
						|
										help: 'Signature format (asn1, ssh, raw)'
							 | 
						|
									},
							 | 
						|
									{
							 | 
						|
										names: ['binary', 'b'],
							 | 
						|
										type: 'bool',
							 | 
						|
										help: 'Output raw binary instead of base64'
							 | 
						|
									},
							 | 
						|
									{
							 | 
						|
										names: ['help', 'h'],
							 | 
						|
										type: 'bool',
							 | 
						|
										help: 'Shows this help text'
							 | 
						|
									}
							 | 
						|
								];
							 | 
						|
								
							 | 
						|
								var parseOpts = {};
							 | 
						|
								
							 | 
						|
								if (require.main === module) {
							 | 
						|
									var parser = dashdash.createParser({
							 | 
						|
										options: options
							 | 
						|
									});
							 | 
						|
								
							 | 
						|
									try {
							 | 
						|
										var opts = parser.parse(process.argv);
							 | 
						|
									} catch (e) {
							 | 
						|
										console.error('sshpk-sign: error: %s', e.message);
							 | 
						|
										process.exit(1);
							 | 
						|
									}
							 | 
						|
								
							 | 
						|
									if (opts.help || opts._args.length > 1) {
							 | 
						|
										var help = parser.help({}).trimRight();
							 | 
						|
										console.error('sshpk-sign: sign data using an SSH key\n');
							 | 
						|
										console.error(help);
							 | 
						|
										process.exit(1);
							 | 
						|
									}
							 | 
						|
								
							 | 
						|
									if (!opts.identity) {
							 | 
						|
										var help = parser.help({}).trimRight();
							 | 
						|
										console.error('sshpk-sign: the -i or --identity option ' +
							 | 
						|
										    'is required\n');
							 | 
						|
										console.error(help);
							 | 
						|
										process.exit(1);
							 | 
						|
									}
							 | 
						|
								
							 | 
						|
									var keyData = fs.readFileSync(opts.identity);
							 | 
						|
									parseOpts.filename = opts.identity;
							 | 
						|
								
							 | 
						|
									run();
							 | 
						|
								}
							 | 
						|
								
							 | 
						|
								function run() {
							 | 
						|
									var key;
							 | 
						|
									try {
							 | 
						|
										key = sshpk.parsePrivateKey(keyData, 'auto', parseOpts);
							 | 
						|
									} catch (e) {
							 | 
						|
										if (e.name === 'KeyEncryptedError') {
							 | 
						|
											getPassword(function (err, pw) {
							 | 
						|
												parseOpts.passphrase = pw;
							 | 
						|
												run();
							 | 
						|
											});
							 | 
						|
											return;
							 | 
						|
										}
							 | 
						|
										console.error('sshpk-sign: error loading private key "' +
							 | 
						|
										    opts.identity + '": ' + e.name + ': ' + e.message);
							 | 
						|
										process.exit(1);
							 | 
						|
									}
							 | 
						|
								
							 | 
						|
									var hash = opts.hash || key.defaultHashAlgorithm();
							 | 
						|
								
							 | 
						|
									var signer;
							 | 
						|
									try {
							 | 
						|
										signer = key.createSign(hash);
							 | 
						|
									} catch (e) {
							 | 
						|
										console.error('sshpk-sign: error creating signer: ' +
							 | 
						|
										    e.name + ': ' + e.message);
							 | 
						|
										process.exit(1);
							 | 
						|
									}
							 | 
						|
								
							 | 
						|
									if (opts.verbose) {
							 | 
						|
										console.error('sshpk-sign: using %s-%s with a %d bit key',
							 | 
						|
										    key.type, hash, key.size);
							 | 
						|
									}
							 | 
						|
								
							 | 
						|
									var inFile = process.stdin;
							 | 
						|
									var inFileName = 'stdin';
							 | 
						|
								
							 | 
						|
									var inFilePath;
							 | 
						|
									if (opts.file) {
							 | 
						|
										inFilePath = opts.file;
							 | 
						|
									} else if (opts._args.length === 1) {
							 | 
						|
										inFilePath = opts._args[0];
							 | 
						|
									}
							 | 
						|
								
							 | 
						|
									if (inFilePath)
							 | 
						|
										inFileName = path.basename(inFilePath);
							 | 
						|
								
							 | 
						|
									try {
							 | 
						|
										if (inFilePath) {
							 | 
						|
											fs.accessSync(inFilePath, fs.R_OK);
							 | 
						|
											inFile = fs.createReadStream(inFilePath);
							 | 
						|
										}
							 | 
						|
									} catch (e) {
							 | 
						|
										console.error('sshpk-sign: error opening input file' +
							 | 
						|
										     ': ' + e.name + ': ' + e.message);
							 | 
						|
										process.exit(1);
							 | 
						|
									}
							 | 
						|
								
							 | 
						|
									var outFile = process.stdout;
							 | 
						|
								
							 | 
						|
									try {
							 | 
						|
										if (opts.out && !opts.identify) {
							 | 
						|
											fs.accessSync(path.dirname(opts.out), fs.W_OK);
							 | 
						|
											outFile = fs.createWriteStream(opts.out);
							 | 
						|
										}
							 | 
						|
									} catch (e) {
							 | 
						|
										console.error('sshpk-sign: error opening output file' +
							 | 
						|
										    ': ' + e.name + ': ' + e.message);
							 | 
						|
										process.exit(1);
							 | 
						|
									}
							 | 
						|
								
							 | 
						|
									inFile.pipe(signer);
							 | 
						|
									inFile.on('end', function () {
							 | 
						|
										var sig;
							 | 
						|
										try {
							 | 
						|
											sig = signer.sign();
							 | 
						|
										} catch (e) {
							 | 
						|
											console.error('sshpk-sign: error signing data: ' +
							 | 
						|
											    e.name + ': ' + e.message);
							 | 
						|
											process.exit(1);
							 | 
						|
										}
							 | 
						|
								
							 | 
						|
										var fmt = opts.format || 'asn1';
							 | 
						|
										var output;
							 | 
						|
										try {
							 | 
						|
											output = sig.toBuffer(fmt);
							 | 
						|
											if (!opts.binary)
							 | 
						|
												output = output.toString('base64');
							 | 
						|
										} catch (e) {
							 | 
						|
											console.error('sshpk-sign: error converting signature' +
							 | 
						|
											    ' to ' + fmt + ' format: ' + e.name + ': ' +
							 | 
						|
											    e.message);
							 | 
						|
											process.exit(1);
							 | 
						|
										}
							 | 
						|
								
							 | 
						|
										outFile.write(output);
							 | 
						|
										if (!opts.binary)
							 | 
						|
											outFile.write('\n');
							 | 
						|
										outFile.once('drain', function () {
							 | 
						|
											process.exit(0);
							 | 
						|
										});
							 | 
						|
									});
							 | 
						|
								}
							 |