Greenbone Vulnerability Management Libraries 22.32.0
sshutils.h File Reference

SSH related API. More...

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Functions

char * gvm_ssh_pkcs8_decrypt (const char *, const char *)
 Decrypts a base64 encrypted ssh private key.
char * gvm_ssh_public_from_private (const char *, const char *)
 Exports a base64 encoded public key from a private key and its passphrase.

Detailed Description

SSH related API.

Definition in file sshutils.h.

Function Documentation

◆ gvm_ssh_pkcs8_decrypt()

char * gvm_ssh_pkcs8_decrypt ( const char * pkcs8_key,
const char * passphrase )

Decrypts a base64 encrypted ssh private key.

Parameters
[in]pkcs8_keyPKCS#8 encrypted private key.
[in]passphrasePassphrase for the private key.
Returns
Decrypted private key if success, NULL otherwise.

Definition at line 34 of file sshutils.c.

35{
36 gnutls_datum_t data;
37 gnutls_x509_privkey_t key;
38 char buffer[16 * 2048];
39 int rc;
40 size_t size = sizeof (buffer);
41
42 rc = gnutls_x509_privkey_init (&key);
43 if (rc)
44 return NULL;
45 data.size = strlen (pkcs8_key);
46 data.data = (void *) g_strdup (pkcs8_key);
47 rc = gnutls_x509_privkey_import_pkcs8 (key, &data, GNUTLS_X509_FMT_PEM,
48 passphrase ? passphrase : "", 0);
49 if (rc)
50 {
51 gnutls_x509_privkey_deinit (key);
52 return NULL;
53 }
54 g_free (data.data);
55 rc = gnutls_x509_privkey_export (key, GNUTLS_X509_FMT_PEM, buffer, &size);
56 gnutls_x509_privkey_deinit (key);
57 if (rc)
58 return NULL;
59 return g_strdup (buffer);
60}

Referenced by gvm_ssh_public_from_private().

Here is the caller graph for this function:

◆ gvm_ssh_public_from_private()

char * gvm_ssh_public_from_private ( const char * private_key,
const char * passphrase )

Exports a base64 encoded public key from a private key and its passphrase.

Parameters
[in]private_keyPrivate key to export.
[in]passphrasePassphrase for the private key.
Returns
Allocated base64 encoded public key if success, NULL otherwise.

Definition at line 72 of file sshutils.c.

73{
74 ssh_key priv;
75 char *pub_key, *decrypted_priv, *pub_str = NULL;
76 const char *type;
77 int ret;
78
79 if (private_key == NULL)
80 return NULL;
81 decrypted_priv = gvm_ssh_pkcs8_decrypt (private_key, passphrase);
82 ret = ssh_pki_import_privkey_base64 (decrypted_priv ? decrypted_priv
83 : private_key,
84 passphrase, NULL, NULL, &priv);
85 g_free (decrypted_priv);
86 if (ret)
87 return NULL;
88 ret = ssh_pki_export_pubkey_base64 (priv, &pub_key);
89 type = ssh_key_type_to_char (ssh_key_type (priv));
90#if LIBSSH_VERSION_INT >= SSH_VERSION_INT(0, 6, 4)
91 if (!strcmp (type, "ssh-ecdsa"))
92 type = ssh_pki_key_ecdsa_name (priv);
93#endif
94 ssh_key_free (priv);
95 if (ret)
96 return NULL;
97 pub_str = g_strdup_printf ("%s %s", type, pub_key);
98 g_free (pub_key);
99 return pub_str;
100}
char * gvm_ssh_pkcs8_decrypt(const char *pkcs8_key, const char *passphrase)
Decrypts a base64 encrypted ssh private key.
Definition sshutils.c:34

References gvm_ssh_pkcs8_decrypt().

Here is the call graph for this function: