sshutils.h File Reference

SSH related API. More...

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Functions
char *	gvm_ssh_pkcs8_decrypt (const char *, const char *)
	Decrypts a base64 encrypted ssh private key.
char *	gvm_ssh_public_from_private (const char *, const char *)
	Exports a base64 encoded public key from a private key and its passphrase.
int	gvm_ssh_private_key_info (const char *, const char *, const char **, char **)
	Gets information from a SSH private key.

Detailed Description

SSH related API.

Definition in file sshutils.h.

Function Documentation

gvm_ssh_pkcs8_decrypt()

char * gvm_ssh_pkcs8_decrypt	(	const char *	pkcs8_key,
		const char *	passphrase )

Decrypts a base64 encrypted ssh private key.

Parameters

[in]	pkcs8_key	PKCS#8 encrypted private key.
[in]	passphrase	Passphrase for the private key.

Returns

Decrypted private key if success, NULL otherwise.

Definition at line 34 of file sshutils.c.

{
  gnutls_datum_t data;
  gnutls_x509_privkey_t key;
  char buffer[16 * 2048];
  int rc;
  size_t size = sizeof (buffer);
 
  if (pkcs8_key == NULL)
    return NULL;
 
  rc = gnutls_x509_privkey_init (&key);
  if (rc)
    return NULL;
  data.size = strlen (pkcs8_key);
  data.data = (void *) g_strdup (pkcs8_key);
  rc = gnutls_x509_privkey_import_pkcs8 (key, &data, GNUTLS_X509_FMT_PEM,
                                         passphrase ? passphrase : "", 0);
  g_free (data.data);
  if (rc)
    {
      gnutls_x509_privkey_deinit (key);
      return NULL;
    }
  rc = gnutls_x509_privkey_export (key, GNUTLS_X509_FMT_PEM, buffer, &size);
  gnutls_x509_privkey_deinit (key);
  if (rc)
    return NULL;
  return g_strdup (buffer);
}

Referenced by Ensure(), Ensure(), Ensure(), Ensure(), Ensure(), Ensure(), Ensure(), Ensure(), gvm_ssh_private_key_info(), and gvm_ssh_public_from_private().

Here is the caller graph for this function:

gvm_ssh_private_key_info()

int gvm_ssh_private_key_info	(	const char *	private_key,
		const char *	passphrase,
		const char **	type,
		char **	sha256_hash )

Gets information from a SSH private key.

Parameters

[in]	private_key	Private key to get info from.
[in]	passphrase	Passphrase for the private key.
[out]	type	Static string describing the type of the key.
[out]	sha256_hash	The SHA-256 hash of the key.

Returns

0 on success, -1 on error.

Definition at line 116 of file sshutils.c.

{
  ssh_key priv;
  char *decrypted_priv;
  int ret;
 
  if (type)
    *type = NULL;
  if (sha256_hash)
    *sha256_hash = NULL;
 
  if (private_key == NULL)
    return -1;
  decrypted_priv = gvm_ssh_pkcs8_decrypt (private_key, passphrase);
  ret = ssh_pki_import_privkey_base64 (decrypted_priv ? decrypted_priv
                                                      : private_key,
                                       passphrase, NULL, NULL, &priv);
  free (decrypted_priv);
  if (ret)
    return -1;
 
  if (type)
    {
      *type = ssh_key_type_to_char (ssh_key_type (priv));
    }
 
  if (sha256_hash)
    {
      unsigned char *hash = NULL;
      size_t hash_size = 0;
      ret = ssh_get_publickey_hash (priv, SSH_PUBLICKEY_HASH_SHA256, &hash,
                                    &hash_size);
      if (ret == 0)
        {
          gchar *hex = g_malloc0 (hash_size * 2 + 1);
          for (unsigned int i = 0; i < hash_size; i++)
            {
              g_snprintf (hex + i * 2, 3, "%02x", hash[i]);
            }
          ssh_clean_pubkey_hash (&hash);
          *sha256_hash = hex;
        }
    }
 
  ssh_key_free (priv);
 
  if (ret)
    return -1;
  return 0;
}

References gvm_ssh_pkcs8_decrypt().

Referenced by Ensure(), Ensure(), Ensure(), Ensure(), Ensure(), Ensure(), Ensure(), Ensure(), Ensure(), Ensure(), Ensure(), Ensure(), Ensure(), and Ensure().

Here is the call graph for this function:

Here is the caller graph for this function:

gvm_ssh_public_from_private()

char * gvm_ssh_public_from_private	(	const char *	private_key,
		const char *	passphrase )

Exports a base64 encoded public key from a private key and its passphrase.

Parameters

[in]	private_key	Private key to export.
[in]	passphrase	Passphrase for the private key.

Returns

Allocated base64 encoded public key if success, NULL otherwise.

Definition at line 75 of file sshutils.c.

{
  ssh_key priv;
  char *pub_key, *decrypted_priv, *pub_str = NULL;
  const char *type;
  int ret;
 
  if (private_key == NULL)
    return NULL;
  decrypted_priv = gvm_ssh_pkcs8_decrypt (private_key, passphrase);
  ret = ssh_pki_import_privkey_base64 (decrypted_priv ? decrypted_priv
                                                      : private_key,
                                       passphrase, NULL, NULL, &priv);
  g_free (decrypted_priv);
  if (ret)
    return NULL;
  ret = ssh_pki_export_pubkey_base64 (priv, &pub_key);
  type = ssh_key_type_to_char (ssh_key_type (priv));
#if LIBSSH_VERSION_INT >= SSH_VERSION_INT(0, 6, 4)
  if (!strcmp (type, "ssh-ecdsa"))
    type = ssh_pki_key_ecdsa_name (priv);
#endif
  ssh_key_free (priv);
  if (ret)
    return NULL;
  pub_str = g_strdup_printf ("%s %s", type, pub_key);
  g_free (pub_key);
  return pub_str;
}

References gvm_ssh_pkcs8_decrypt().

Referenced by Ensure(), Ensure(), Ensure(), Ensure(), Ensure(), Ensure(), Ensure(), Ensure(), Ensure(), and Ensure().

Here is the call graph for this function:

Here is the caller graph for this function: