auser-poolparty 1.3.4 → 1.3.5
Sign up to get free protection for your applications and to get access to all the features.
- data/VERSION.yml +1 -1
- data/bin/cloud-bootstrap +1 -0
- data/bin/cloud-configure +1 -0
- data/bin/cloud-contract +1 -0
- data/bin/poolparty-setup +36 -0
- data/examples/vmware.rb +18 -0
- data/lib/cloud_providers/cloud_provider_instance.rb +1 -1
- data/lib/core/object.rb +2 -2
- data/lib/dependency_resolvers/chef.rb +2 -2
- data/lib/mixins/askable.rb +16 -7
- data/lib/poolparty/base.rb +9 -7
- data/lib/poolparty/cloud.rb +57 -2
- data/lib/poolparty/installer.rb +8 -4
- data/lib/poolparty/installers/ec2.rb +75 -5
- data/lib/poolparty/installers/vmware.rb +17 -5
- data/lib/poolparty/plugins/apache.rb +3 -2
- data/lib/poolparty/plugins/apache2/base.conf.erb +2 -2
- data/lib/poolparty/plugins/apache2/browser_fixes.conf.erb +1 -1
- data/lib/poolparty/plugins/apache2/passenger_site.rb +2 -2
- data/lib/poolparty/pool.rb +9 -2
- data/lib/poolparty/resource.rb +20 -7
- data/lib/poolparty/resources/directory.rb +5 -1
- data/lib/poolparty/resources/exec.rb +2 -2
- data/lib/poolparty/resources/file.rb +8 -2
- data/lib/poolparty/resources/gem_package.rb +2 -2
- data/lib/poolparty/resources/line.rb +23 -6
- data/lib/poolparty/resources/mount.rb +2 -2
- data/lib/poolparty/resources/package.rb +2 -2
- data/lib/poolparty/resources/service.rb +2 -2
- data/lib/poolparty/resources/user.rb +2 -2
- data/lib/poolparty.rb +2 -2
- data/test/lib/poolparty/base_test.rb +13 -0
- data/test/lib/poolparty/resources/line_test.rb +3 -3
- data/test/lib/poolparty/resources/service_test.rb +1 -1
- data/vendor/gems/net-ssh/CHANGELOG.rdoc +127 -0
- data/vendor/gems/net-ssh/Manifest +104 -0
- data/vendor/gems/net-ssh/README.rdoc +110 -0
- data/vendor/gems/net-ssh/Rakefile +26 -0
- data/vendor/gems/net-ssh/THANKS.rdoc +16 -0
- data/vendor/gems/net-ssh/lib/net/ssh/authentication/agent.rb +176 -0
- data/vendor/gems/net-ssh/lib/net/ssh/authentication/constants.rb +18 -0
- data/vendor/gems/net-ssh/lib/net/ssh/authentication/key_manager.rb +193 -0
- data/vendor/gems/net-ssh/lib/net/ssh/authentication/methods/abstract.rb +60 -0
- data/vendor/gems/net-ssh/lib/net/ssh/authentication/methods/hostbased.rb +71 -0
- data/vendor/gems/net-ssh/lib/net/ssh/authentication/methods/keyboard_interactive.rb +66 -0
- data/vendor/gems/net-ssh/lib/net/ssh/authentication/methods/password.rb +39 -0
- data/vendor/gems/net-ssh/lib/net/ssh/authentication/methods/publickey.rb +92 -0
- data/vendor/gems/net-ssh/lib/net/ssh/authentication/pageant.rb +183 -0
- data/vendor/gems/net-ssh/lib/net/ssh/authentication/session.rb +134 -0
- data/vendor/gems/net-ssh/lib/net/ssh/buffer.rb +340 -0
- data/vendor/gems/net-ssh/lib/net/ssh/buffered_io.rb +149 -0
- data/vendor/gems/net-ssh/lib/net/ssh/config.rb +181 -0
- data/vendor/gems/net-ssh/lib/net/ssh/connection/channel.rb +625 -0
- data/vendor/gems/net-ssh/lib/net/ssh/connection/constants.rb +33 -0
- data/vendor/gems/net-ssh/lib/net/ssh/connection/session.rb +596 -0
- data/vendor/gems/net-ssh/lib/net/ssh/connection/term.rb +178 -0
- data/vendor/gems/net-ssh/lib/net/ssh/errors.rb +85 -0
- data/vendor/gems/net-ssh/lib/net/ssh/key_factory.rb +102 -0
- data/vendor/gems/net-ssh/lib/net/ssh/known_hosts.rb +129 -0
- data/vendor/gems/net-ssh/lib/net/ssh/loggable.rb +61 -0
- data/vendor/gems/net-ssh/lib/net/ssh/packet.rb +102 -0
- data/vendor/gems/net-ssh/lib/net/ssh/prompt.rb +93 -0
- data/vendor/gems/net-ssh/lib/net/ssh/proxy/errors.rb +14 -0
- data/vendor/gems/net-ssh/lib/net/ssh/proxy/http.rb +94 -0
- data/vendor/gems/net-ssh/lib/net/ssh/proxy/socks4.rb +70 -0
- data/vendor/gems/net-ssh/lib/net/ssh/proxy/socks5.rb +129 -0
- data/vendor/gems/net-ssh/lib/net/ssh/ruby_compat.rb +7 -0
- data/vendor/gems/net-ssh/lib/net/ssh/service/forward.rb +267 -0
- data/vendor/gems/net-ssh/lib/net/ssh/test/channel.rb +129 -0
- data/vendor/gems/net-ssh/lib/net/ssh/test/extensions.rb +152 -0
- data/vendor/gems/net-ssh/lib/net/ssh/test/kex.rb +44 -0
- data/vendor/gems/net-ssh/lib/net/ssh/test/local_packet.rb +51 -0
- data/vendor/gems/net-ssh/lib/net/ssh/test/packet.rb +81 -0
- data/vendor/gems/net-ssh/lib/net/ssh/test/remote_packet.rb +38 -0
- data/vendor/gems/net-ssh/lib/net/ssh/test/script.rb +157 -0
- data/vendor/gems/net-ssh/lib/net/ssh/test/socket.rb +59 -0
- data/vendor/gems/net-ssh/lib/net/ssh/test.rb +89 -0
- data/vendor/gems/net-ssh/lib/net/ssh/transport/algorithms.rb +384 -0
- data/vendor/gems/net-ssh/lib/net/ssh/transport/cipher_factory.rb +80 -0
- data/vendor/gems/net-ssh/lib/net/ssh/transport/constants.rb +30 -0
- data/vendor/gems/net-ssh/lib/net/ssh/transport/hmac/abstract.rb +78 -0
- data/vendor/gems/net-ssh/lib/net/ssh/transport/hmac/md5.rb +12 -0
- data/vendor/gems/net-ssh/lib/net/ssh/transport/hmac/md5_96.rb +11 -0
- data/vendor/gems/net-ssh/lib/net/ssh/transport/hmac/none.rb +15 -0
- data/vendor/gems/net-ssh/lib/net/ssh/transport/hmac/sha1.rb +13 -0
- data/vendor/gems/net-ssh/lib/net/ssh/transport/hmac/sha1_96.rb +11 -0
- data/vendor/gems/net-ssh/lib/net/ssh/transport/hmac.rb +31 -0
- data/vendor/gems/net-ssh/lib/net/ssh/transport/identity_cipher.rb +55 -0
- data/vendor/gems/net-ssh/lib/net/ssh/transport/kex/diffie_hellman_group1_sha1.rb +208 -0
- data/vendor/gems/net-ssh/lib/net/ssh/transport/kex/diffie_hellman_group_exchange_sha1.rb +77 -0
- data/vendor/gems/net-ssh/lib/net/ssh/transport/kex.rb +13 -0
- data/vendor/gems/net-ssh/lib/net/ssh/transport/openssl.rb +128 -0
- data/vendor/gems/net-ssh/lib/net/ssh/transport/packet_stream.rb +230 -0
- data/vendor/gems/net-ssh/lib/net/ssh/transport/server_version.rb +60 -0
- data/vendor/gems/net-ssh/lib/net/ssh/transport/session.rb +276 -0
- data/vendor/gems/net-ssh/lib/net/ssh/transport/state.rb +201 -0
- data/vendor/gems/net-ssh/lib/net/ssh/verifiers/lenient.rb +30 -0
- data/vendor/gems/net-ssh/lib/net/ssh/verifiers/null.rb +12 -0
- data/vendor/gems/net-ssh/lib/net/ssh/verifiers/strict.rb +53 -0
- data/vendor/gems/net-ssh/lib/net/ssh/version.rb +62 -0
- data/vendor/gems/net-ssh/lib/net/ssh.rb +215 -0
- data/vendor/gems/net-ssh/net-ssh.gemspec +33 -0
- data/vendor/gems/net-ssh/setup.rb +1585 -0
- data/vendor/gems/net-ssh/test/authentication/methods/common.rb +28 -0
- data/vendor/gems/net-ssh/test/authentication/methods/test_abstract.rb +51 -0
- data/vendor/gems/net-ssh/test/authentication/methods/test_hostbased.rb +114 -0
- data/vendor/gems/net-ssh/test/authentication/methods/test_keyboard_interactive.rb +98 -0
- data/vendor/gems/net-ssh/test/authentication/methods/test_password.rb +50 -0
- data/vendor/gems/net-ssh/test/authentication/methods/test_publickey.rb +127 -0
- data/vendor/gems/net-ssh/test/authentication/test_agent.rb +205 -0
- data/vendor/gems/net-ssh/test/authentication/test_key_manager.rb +105 -0
- data/vendor/gems/net-ssh/test/authentication/test_session.rb +93 -0
- data/vendor/gems/net-ssh/test/common.rb +106 -0
- data/vendor/gems/net-ssh/test/configs/eqsign +3 -0
- data/vendor/gems/net-ssh/test/configs/exact_match +8 -0
- data/vendor/gems/net-ssh/test/configs/wild_cards +14 -0
- data/vendor/gems/net-ssh/test/connection/test_channel.rb +452 -0
- data/vendor/gems/net-ssh/test/connection/test_session.rb +488 -0
- data/vendor/gems/net-ssh/test/test_all.rb +6 -0
- data/vendor/gems/net-ssh/test/test_buffer.rb +336 -0
- data/vendor/gems/net-ssh/test/test_buffered_io.rb +63 -0
- data/vendor/gems/net-ssh/test/test_config.rb +84 -0
- data/vendor/gems/net-ssh/test/test_key_factory.rb +67 -0
- data/vendor/gems/net-ssh/test/transport/hmac/test_md5.rb +39 -0
- data/vendor/gems/net-ssh/test/transport/hmac/test_md5_96.rb +25 -0
- data/vendor/gems/net-ssh/test/transport/hmac/test_none.rb +34 -0
- data/vendor/gems/net-ssh/test/transport/hmac/test_sha1.rb +34 -0
- data/vendor/gems/net-ssh/test/transport/hmac/test_sha1_96.rb +25 -0
- data/vendor/gems/net-ssh/test/transport/kex/test_diffie_hellman_group1_sha1.rb +146 -0
- data/vendor/gems/net-ssh/test/transport/kex/test_diffie_hellman_group_exchange_sha1.rb +92 -0
- data/vendor/gems/net-ssh/test/transport/test_algorithms.rb +302 -0
- data/vendor/gems/net-ssh/test/transport/test_cipher_factory.rb +171 -0
- data/vendor/gems/net-ssh/test/transport/test_hmac.rb +34 -0
- data/vendor/gems/net-ssh/test/transport/test_identity_cipher.rb +40 -0
- data/vendor/gems/net-ssh/test/transport/test_packet_stream.rb +435 -0
- data/vendor/gems/net-ssh/test/transport/test_server_version.rb +57 -0
- data/vendor/gems/net-ssh/test/transport/test_session.rb +315 -0
- data/vendor/gems/net-ssh/test/transport/test_state.rb +173 -0
- metadata +109 -4
- data/bin/install-poolparty +0 -20
@@ -0,0 +1,178 @@
|
|
1
|
+
module Net; module SSH; module Connection
|
2
|
+
|
3
|
+
# These constants are used when requesting a pseudo-terminal (via
|
4
|
+
# Net::SSH::Connection::Channel#request_pty). The descriptions for each are
|
5
|
+
# taken directly from RFC 4254 ("The Secure Shell (SSH) Connection Protocol"),
|
6
|
+
# http://tools.ietf.org/html/rfc4254.
|
7
|
+
module Term
|
8
|
+
# Interrupt character; 255 if none. Similarly for the other characters.
|
9
|
+
# Not all of these characters are supported on all systems.
|
10
|
+
VINTR = 1
|
11
|
+
|
12
|
+
# The quit character (sends SIGQUIT signal on POSIX systems).
|
13
|
+
VQUIT = 2
|
14
|
+
|
15
|
+
# Erase the character to left of the cursor.
|
16
|
+
VERASE = 3
|
17
|
+
|
18
|
+
# Kill the current input line.
|
19
|
+
VKILL = 4
|
20
|
+
|
21
|
+
# End-of-file character (sends EOF from the terminal).
|
22
|
+
VEOF = 5
|
23
|
+
|
24
|
+
# End-of-line character in addition to carriage return and/or linefeed.
|
25
|
+
VEOL = 6
|
26
|
+
|
27
|
+
# Additional end-of-line character.
|
28
|
+
VEOL2 = 7
|
29
|
+
|
30
|
+
# Continues paused output (normally control-Q).
|
31
|
+
VSTART = 8
|
32
|
+
|
33
|
+
# Pauses output (normally control-S).
|
34
|
+
VSTOP = 9
|
35
|
+
|
36
|
+
# Suspends the current program.
|
37
|
+
VSUSP = 10
|
38
|
+
|
39
|
+
# Another suspend character.
|
40
|
+
VDSUSP = 11
|
41
|
+
|
42
|
+
# Reprints the current input line.
|
43
|
+
VREPRINT = 12
|
44
|
+
|
45
|
+
# Erases a word left of cursor.
|
46
|
+
VWERASE = 13
|
47
|
+
|
48
|
+
# Enter the next character typed literally, even if it is a special
|
49
|
+
# character.
|
50
|
+
VLNEXT = 14
|
51
|
+
|
52
|
+
# Character to flush output.
|
53
|
+
VFLUSH = 15
|
54
|
+
|
55
|
+
# Switch to a different shell layer.
|
56
|
+
VSWITCH = 16
|
57
|
+
|
58
|
+
# Prints system status line (load, command, pid, etc).
|
59
|
+
VSTATUS = 17
|
60
|
+
|
61
|
+
# Toggles the flushing of terminal output.
|
62
|
+
VDISCARD = 18
|
63
|
+
|
64
|
+
# The ignore parity flag. The parameter SHOULD be 0 if this flag is FALSE,
|
65
|
+
# and 1 if it is TRUE.
|
66
|
+
IGNPAR = 30
|
67
|
+
|
68
|
+
# Mark parity and framing errors.
|
69
|
+
PARMRK = 31
|
70
|
+
|
71
|
+
# Enable checking of parity errors.
|
72
|
+
INPCK = 32
|
73
|
+
|
74
|
+
# Strip 8th bit off characters.
|
75
|
+
ISTRIP = 33
|
76
|
+
|
77
|
+
# Map NL into CR on input.
|
78
|
+
INCLR = 34
|
79
|
+
|
80
|
+
# Ignore CR on input.
|
81
|
+
IGNCR = 35
|
82
|
+
|
83
|
+
# Map CR to NL on input.
|
84
|
+
ICRNL = 36
|
85
|
+
|
86
|
+
# Translate uppercase characters to lowercase.
|
87
|
+
IUCLC = 37
|
88
|
+
|
89
|
+
# Enable output flow control.
|
90
|
+
IXON = 38
|
91
|
+
|
92
|
+
# Any char will restart after stop.
|
93
|
+
IXANY = 39
|
94
|
+
|
95
|
+
# Enable input flow control.
|
96
|
+
IXOFF = 40
|
97
|
+
|
98
|
+
# Ring bell on input queue full.
|
99
|
+
IMAXBEL = 41
|
100
|
+
|
101
|
+
# Enable signals INTR, QUIT, [D]SUSP.
|
102
|
+
ISIG = 50
|
103
|
+
|
104
|
+
# Canonicalize input lines.
|
105
|
+
ICANON = 51
|
106
|
+
|
107
|
+
# Enable input and output of uppercase characters by preceding their
|
108
|
+
# lowercase equivalents with "\".
|
109
|
+
XCASE = 52
|
110
|
+
|
111
|
+
# Enable echoing.
|
112
|
+
ECHO = 53
|
113
|
+
|
114
|
+
# Visually erase chars.
|
115
|
+
ECHOE = 54
|
116
|
+
|
117
|
+
# Kill character discards current line.
|
118
|
+
ECHOK = 55
|
119
|
+
|
120
|
+
# Echo NL even if ECHO is off.
|
121
|
+
ECHONL = 56
|
122
|
+
|
123
|
+
# Don't flush after interrupt.
|
124
|
+
NOFLSH = 57
|
125
|
+
|
126
|
+
# Stop background jobs from output.
|
127
|
+
TOSTOP= 58
|
128
|
+
|
129
|
+
# Enable extensions.
|
130
|
+
IEXTEN = 59
|
131
|
+
|
132
|
+
# Echo control characters as ^(Char).
|
133
|
+
ECHOCTL = 60
|
134
|
+
|
135
|
+
# Visual erase for line kill.
|
136
|
+
ECHOKE = 61
|
137
|
+
|
138
|
+
# Retype pending input.
|
139
|
+
PENDIN = 62
|
140
|
+
|
141
|
+
# Enable output processing.
|
142
|
+
OPOST = 70
|
143
|
+
|
144
|
+
# Convert lowercase to uppercase.
|
145
|
+
OLCUC = 71
|
146
|
+
|
147
|
+
# Map NL to CR-NL.
|
148
|
+
ONLCR = 72
|
149
|
+
|
150
|
+
# Translate carriage return to newline (output).
|
151
|
+
OCRNL = 73
|
152
|
+
|
153
|
+
# Translate newline to carriage return-newline (output).
|
154
|
+
ONOCR = 74
|
155
|
+
|
156
|
+
# Newline performs a carriage return (output).
|
157
|
+
ONLRET = 75
|
158
|
+
|
159
|
+
# 7 bit mode.
|
160
|
+
CS7 = 90
|
161
|
+
|
162
|
+
# 8 bit mode.
|
163
|
+
CS8 = 91
|
164
|
+
|
165
|
+
# Parity enable.
|
166
|
+
PARENB = 92
|
167
|
+
|
168
|
+
# Odd parity, else even.
|
169
|
+
PARODD = 93
|
170
|
+
|
171
|
+
# Specifies the input baud rate in bits per second.
|
172
|
+
TTY_OP_ISPEED = 128
|
173
|
+
|
174
|
+
# Specifies the output baud rate in bits per second.
|
175
|
+
TTY_OP_OSPEED = 129
|
176
|
+
end
|
177
|
+
|
178
|
+
end; end; end
|
@@ -0,0 +1,85 @@
|
|
1
|
+
module Net; module SSH
|
2
|
+
# A general exception class, to act as the ancestor of all other Net::SSH
|
3
|
+
# exception classes.
|
4
|
+
class Exception < ::RuntimeError; end
|
5
|
+
|
6
|
+
# This exception is raised when authentication fails (whether it be
|
7
|
+
# public key authentication, password authentication, or whatever).
|
8
|
+
class AuthenticationFailed < Exception; end
|
9
|
+
|
10
|
+
# This exception is raised when the remote host has disconnected
|
11
|
+
# unexpectedly.
|
12
|
+
class Disconnect < Exception; end
|
13
|
+
|
14
|
+
# This exception is primarily used internally, but if you have a channel
|
15
|
+
# request handler (see Net::SSH::Connection::Channel#on_request) that you
|
16
|
+
# want to fail in such a way that the server knows it failed, you can
|
17
|
+
# raise this exception in the handler and Net::SSH will translate that into
|
18
|
+
# a "channel failure" message.
|
19
|
+
class ChannelRequestFailed < Exception; end
|
20
|
+
|
21
|
+
# This is exception is primarily used internally, but if you have a channel
|
22
|
+
# open handler (see Net::SSH::Connection::Session#on_open_channel) and you
|
23
|
+
# want to fail in such a way that the server knows it failed, you can
|
24
|
+
# raise this exception in the handler and Net::SSH will translate that into
|
25
|
+
# a "channel open failed" message.
|
26
|
+
class ChannelOpenFailed < Exception
|
27
|
+
attr_reader :code, :reason
|
28
|
+
|
29
|
+
def initialize(code, reason)
|
30
|
+
@code, @reason = code, reason
|
31
|
+
super "#{reason} (#{code})"
|
32
|
+
end
|
33
|
+
end
|
34
|
+
|
35
|
+
# Raised when the cached key for a particular host does not match the
|
36
|
+
# key given by the host, which can be indicative of a man-in-the-middle
|
37
|
+
# attack. When rescuing this exception, you can inspect the key fingerprint
|
38
|
+
# and, if you want to proceed anyway, simply call the remember_host!
|
39
|
+
# method on the exception, and then retry.
|
40
|
+
class HostKeyMismatch < Exception
|
41
|
+
# the callback to use when #remember_host! is called
|
42
|
+
attr_writer :callback #:nodoc:
|
43
|
+
|
44
|
+
# situation-specific data describing the host (see #host, #port, etc.)
|
45
|
+
attr_writer :data #:nodoc:
|
46
|
+
|
47
|
+
# An accessor for getting at the data that was used to look up the host
|
48
|
+
# (see also #fingerprint, #host, #port, #ip, and #key).
|
49
|
+
def [](key)
|
50
|
+
@data && @data[key]
|
51
|
+
end
|
52
|
+
|
53
|
+
# Returns the fingerprint of the key for the host, which either was not
|
54
|
+
# found or did not match.
|
55
|
+
def fingerprint
|
56
|
+
@data && @data[:fingerprint]
|
57
|
+
end
|
58
|
+
|
59
|
+
# Returns the host name for the remote host, as reported by the socket.
|
60
|
+
def host
|
61
|
+
@data && @data[:peer] && @data[:peer][:host]
|
62
|
+
end
|
63
|
+
|
64
|
+
# Returns the port number for the remote host, as reported by the socket.
|
65
|
+
def port
|
66
|
+
@data && @data[:peer] && @data[:peer][:port]
|
67
|
+
end
|
68
|
+
|
69
|
+
# Returns the IP address of the remote host, as reported by the socket.
|
70
|
+
def ip
|
71
|
+
@data && @data[:peer] && @data[:peer][:ip]
|
72
|
+
end
|
73
|
+
|
74
|
+
# Returns the key itself, as reported by the remote host.
|
75
|
+
def key
|
76
|
+
@data && @data[:key]
|
77
|
+
end
|
78
|
+
|
79
|
+
# Tell Net::SSH to record this host and key in the known hosts file, so
|
80
|
+
# that subsequent connections will remember them.
|
81
|
+
def remember_host!
|
82
|
+
@callback.call
|
83
|
+
end
|
84
|
+
end
|
85
|
+
end; end
|
@@ -0,0 +1,102 @@
|
|
1
|
+
require 'net/ssh/transport/openssl'
|
2
|
+
require 'net/ssh/prompt'
|
3
|
+
|
4
|
+
module Net; module SSH
|
5
|
+
|
6
|
+
# A factory class for returning new Key classes. It is used for obtaining
|
7
|
+
# OpenSSL key instances via their SSH names, and for loading both public and
|
8
|
+
# private keys. It used used primarily by Net::SSH itself, internally, and
|
9
|
+
# will rarely (if ever) be directly used by consumers of the library.
|
10
|
+
#
|
11
|
+
# klass = Net::SSH::KeyFactory.get("rsa")
|
12
|
+
# assert klass.is_a?(OpenSSL::PKey::RSA)
|
13
|
+
#
|
14
|
+
# key = Net::SSH::KeyFacory.load_public_key("~/.ssh/id_dsa.pub")
|
15
|
+
class KeyFactory
|
16
|
+
# Specifies the mapping of SSH names to OpenSSL key classes.
|
17
|
+
MAP = {
|
18
|
+
"dh" => OpenSSL::PKey::DH,
|
19
|
+
"rsa" => OpenSSL::PKey::RSA,
|
20
|
+
"dsa" => OpenSSL::PKey::DSA
|
21
|
+
}
|
22
|
+
|
23
|
+
class <<self
|
24
|
+
include Prompt
|
25
|
+
|
26
|
+
# Fetch an OpenSSL key instance by its SSH name. It will be a new,
|
27
|
+
# empty key of the given type.
|
28
|
+
def get(name)
|
29
|
+
MAP.fetch(name).new
|
30
|
+
end
|
31
|
+
|
32
|
+
# Loads a private key from a file. It will correctly determine
|
33
|
+
# whether the file describes an RSA or DSA key, and will load it
|
34
|
+
# appropriately. The new key is returned. If the key itself is
|
35
|
+
# encrypted (requiring a passphrase to use), the user will be
|
36
|
+
# prompted to enter their password unless passphrase works.
|
37
|
+
def load_private_key(filename, passphrase=nil)
|
38
|
+
data = File.read(File.expand_path(filename))
|
39
|
+
load_data_private_key(data, passphrase, filename)
|
40
|
+
end
|
41
|
+
|
42
|
+
# Loads a private key. It will correctly determine
|
43
|
+
# whether the file describes an RSA or DSA key, and will load it
|
44
|
+
# appropriately. The new key is returned. If the key itself is
|
45
|
+
# encrypted (requiring a passphrase to use), the user will be
|
46
|
+
# prompted to enter their password unless passphrase works.
|
47
|
+
def load_data_private_key(data, passphrase=nil, filename="")
|
48
|
+
if data.match(/-----BEGIN DSA PRIVATE KEY-----/)
|
49
|
+
key_type = OpenSSL::PKey::DSA
|
50
|
+
elsif data.match(/-----BEGIN RSA PRIVATE KEY-----/)
|
51
|
+
key_type = OpenSSL::PKey::RSA
|
52
|
+
elsif data.match(/-----BEGIN (.*) PRIVATE KEY-----/)
|
53
|
+
raise OpenSSL::PKey::PKeyError, "not a supported key type '#{$1}'"
|
54
|
+
else
|
55
|
+
raise OpenSSL::PKey::PKeyError, "not a private key (#{filename})"
|
56
|
+
end
|
57
|
+
|
58
|
+
encrypted_key = data.match(/ENCRYPTED/)
|
59
|
+
tries = 0
|
60
|
+
|
61
|
+
begin
|
62
|
+
return key_type.new(data, passphrase || 'invalid')
|
63
|
+
rescue OpenSSL::PKey::RSAError, OpenSSL::PKey::DSAError => e
|
64
|
+
if encrypted_key
|
65
|
+
tries += 1
|
66
|
+
if tries <= 3
|
67
|
+
passphrase = prompt("Enter passphrase for #{filename}:", false)
|
68
|
+
retry
|
69
|
+
else
|
70
|
+
raise
|
71
|
+
end
|
72
|
+
else
|
73
|
+
raise
|
74
|
+
end
|
75
|
+
end
|
76
|
+
end
|
77
|
+
|
78
|
+
# Loads a public key from a file. It will correctly determine whether
|
79
|
+
# the file describes an RSA or DSA key, and will load it
|
80
|
+
# appropriately. The new public key is returned.
|
81
|
+
def load_public_key(filename)
|
82
|
+
data = File.read(File.expand_path(filename))
|
83
|
+
load_data_public_key(data, filename)
|
84
|
+
end
|
85
|
+
|
86
|
+
# Loads a public key. It will correctly determine whether
|
87
|
+
# the file describes an RSA or DSA key, and will load it
|
88
|
+
# appropriately. The new public key is returned.
|
89
|
+
def load_data_public_key(data, filename="")
|
90
|
+
type, blob = data.split(/ /)
|
91
|
+
|
92
|
+
raise Net::SSH::Exception, "public key at #{filename} is not valid" if blob.nil?
|
93
|
+
|
94
|
+
blob = blob.unpack("m*").first
|
95
|
+
reader = Net::SSH::Buffer.new(blob)
|
96
|
+
reader.read_key or raise OpenSSL::PKey::PKeyError, "not a public key #{filename.inspect}"
|
97
|
+
end
|
98
|
+
end
|
99
|
+
|
100
|
+
end
|
101
|
+
|
102
|
+
end; end
|
@@ -0,0 +1,129 @@
|
|
1
|
+
require 'strscan'
|
2
|
+
require 'net/ssh/buffer'
|
3
|
+
|
4
|
+
module Net; module SSH
|
5
|
+
|
6
|
+
# Searches an OpenSSH-style known-host file for a given host, and returns all
|
7
|
+
# matching keys. This is used to implement host-key verification, as well as
|
8
|
+
# to determine what key a user prefers to use for a given host.
|
9
|
+
#
|
10
|
+
# This is used internally by Net::SSH, and will never need to be used directly
|
11
|
+
# by consumers of the library.
|
12
|
+
class KnownHosts
|
13
|
+
class <<self
|
14
|
+
# Searches all known host files (see KnownHosts.hostfiles) for all keys
|
15
|
+
# of the given host. Returns an array of keys found.
|
16
|
+
def search_for(host, options={})
|
17
|
+
search_in(hostfiles(options), host)
|
18
|
+
end
|
19
|
+
|
20
|
+
# Search for all known keys for the given host, in every file given in
|
21
|
+
# the +files+ array. Returns the list of keys.
|
22
|
+
def search_in(files, host)
|
23
|
+
files.map { |file| KnownHosts.new(file).keys_for(host) }.flatten
|
24
|
+
end
|
25
|
+
|
26
|
+
# Looks in the given +options+ hash for the :user_known_hosts_file and
|
27
|
+
# :global_known_hosts_file keys, and returns an array of all known
|
28
|
+
# hosts files. If the :user_known_hosts_file key is not set, the
|
29
|
+
# default is returned (~/.ssh/known_hosts and ~/.ssh/known_hosts2). If
|
30
|
+
# :global_known_hosts_file is not set, the default is used
|
31
|
+
# (/etc/ssh/known_hosts and /etc/ssh/known_hosts2).
|
32
|
+
#
|
33
|
+
# If you only want the user known host files, you can pass :user as
|
34
|
+
# the second option.
|
35
|
+
def hostfiles(options, which=:all)
|
36
|
+
files = []
|
37
|
+
|
38
|
+
if which == :all || which == :user
|
39
|
+
files += Array(options[:user_known_hosts_file] || %w(~/.ssh/known_hosts ~/.ssh/known_hosts2))
|
40
|
+
end
|
41
|
+
|
42
|
+
if which == :all || which == :global
|
43
|
+
files += Array(options[:global_known_hosts_file] || %w(/etc/ssh/known_hosts /etc/ssh/known_hosts2))
|
44
|
+
end
|
45
|
+
|
46
|
+
return files
|
47
|
+
end
|
48
|
+
|
49
|
+
# Looks in all user known host files (see KnownHosts.hostfiles) and tries to
|
50
|
+
# add an entry for the given host and key to the first file it is able
|
51
|
+
# to.
|
52
|
+
def add(host, key, options={})
|
53
|
+
hostfiles(options, :user).each do |file|
|
54
|
+
begin
|
55
|
+
KnownHosts.new(file).add(host, key)
|
56
|
+
return
|
57
|
+
rescue SystemCallError
|
58
|
+
# try the next hostfile
|
59
|
+
end
|
60
|
+
end
|
61
|
+
end
|
62
|
+
end
|
63
|
+
|
64
|
+
# The host-key file name that this KnownHosts instance will use to search
|
65
|
+
# for keys.
|
66
|
+
attr_reader :source
|
67
|
+
|
68
|
+
# Instantiate a new KnownHosts instance that will search the given known-hosts
|
69
|
+
# file. The path is expanded file File.expand_path.
|
70
|
+
def initialize(source)
|
71
|
+
@source = File.expand_path(source)
|
72
|
+
end
|
73
|
+
|
74
|
+
# Returns an array of all keys that are known to be associatd with the
|
75
|
+
# given host. The +host+ parameter is either the domain name or ip address
|
76
|
+
# of the host, or both (comma-separated). Additionally, if a non-standard
|
77
|
+
# port is being used, it may be specified by putting the host (or ip, or
|
78
|
+
# both) in square brackets, and appending the port outside the brackets
|
79
|
+
# after a colon. Possible formats for +host+, then, are;
|
80
|
+
#
|
81
|
+
# "net.ssh.test"
|
82
|
+
# "1.2.3.4"
|
83
|
+
# "net.ssh.test,1.2.3.4"
|
84
|
+
# "[net.ssh.test]:5555"
|
85
|
+
# "[1,2,3,4]:5555"
|
86
|
+
# "[net.ssh.test]:5555,[1.2.3.4]:5555
|
87
|
+
def keys_for(host)
|
88
|
+
keys = []
|
89
|
+
return keys unless File.readable?(source)
|
90
|
+
|
91
|
+
entries = host.split(/,/)
|
92
|
+
|
93
|
+
File.open(source) do |file|
|
94
|
+
scanner = StringScanner.new("")
|
95
|
+
file.each_line do |line|
|
96
|
+
scanner.string = line
|
97
|
+
|
98
|
+
scanner.skip(/\s*/)
|
99
|
+
next if scanner.match?(/$|#/)
|
100
|
+
|
101
|
+
hostlist = scanner.scan(/\S+/).split(/,/)
|
102
|
+
next unless entries.all? { |entry| hostlist.include?(entry) }
|
103
|
+
|
104
|
+
scanner.skip(/\s*/)
|
105
|
+
type = scanner.scan(/\S+/)
|
106
|
+
|
107
|
+
next unless %w(ssh-rsa ssh-dss).include?(type)
|
108
|
+
|
109
|
+
scanner.skip(/\s*/)
|
110
|
+
blob = scanner.rest.unpack("m*").first
|
111
|
+
keys << Net::SSH::Buffer.new(blob).read_key
|
112
|
+
end
|
113
|
+
end
|
114
|
+
|
115
|
+
keys
|
116
|
+
end
|
117
|
+
|
118
|
+
# Tries to append an entry to the current source file for the given host
|
119
|
+
# and key. If it is unable to (because the file is not writable, for
|
120
|
+
# instance), an exception will be raised.
|
121
|
+
def add(host, key)
|
122
|
+
File.open(source, "a") do |file|
|
123
|
+
blob = [Net::SSH::Buffer.from(:key, key).to_s].pack("m*").gsub(/\s/, "")
|
124
|
+
file.puts "#{host} #{key.ssh_type} #{blob}"
|
125
|
+
end
|
126
|
+
end
|
127
|
+
|
128
|
+
end
|
129
|
+
end; end
|
@@ -0,0 +1,61 @@
|
|
1
|
+
module Net; module SSH
|
2
|
+
|
3
|
+
# A simple module to make logging easier to deal with. It assumes that the
|
4
|
+
# logger instance (if not nil) quacks like a Logger object (in Ruby's
|
5
|
+
# standard library). Although used primarily internally by Net::SSH, it
|
6
|
+
# can easily be used to add Net::SSH-like logging to your own programs.
|
7
|
+
#
|
8
|
+
# class MyClass
|
9
|
+
# include Net::SSH::Loggable
|
10
|
+
# end
|
11
|
+
#
|
12
|
+
# Net::SSH.start(...) do |ssh|
|
13
|
+
# obj = MyClass.new
|
14
|
+
# obj.logger = ssh.logger
|
15
|
+
# ...
|
16
|
+
# end
|
17
|
+
module Loggable
|
18
|
+
# The logger instance that will be used to log messages. If nil, nothing
|
19
|
+
# will be logged.
|
20
|
+
attr_accessor :logger
|
21
|
+
|
22
|
+
# Displays the result of yielding if the log level is Logger::DEBUG or
|
23
|
+
# greater.
|
24
|
+
def debug
|
25
|
+
logger.add(Logger::DEBUG, nil, facility) { yield } if logger
|
26
|
+
end
|
27
|
+
|
28
|
+
# Displays the result of yielding if the log level is Logger::INFO or
|
29
|
+
# greater.
|
30
|
+
def info
|
31
|
+
logger.add(Logger::INFO, nil, facility) { yield } if logger
|
32
|
+
end
|
33
|
+
|
34
|
+
# Displays the result of yielding if the log level is Logger::WARN or
|
35
|
+
# greater. (Called lwarn to avoid shadowing with Kernel#warn.)
|
36
|
+
def lwarn
|
37
|
+
logger.add(Logger::WARN, nil, facility) { yield } if logger
|
38
|
+
end
|
39
|
+
|
40
|
+
# Displays the result of yielding if the log level is Logger:ERROR or
|
41
|
+
# greater.
|
42
|
+
def error
|
43
|
+
logger.add(Logger::ERROR, nil, facility) { yield } if logger
|
44
|
+
end
|
45
|
+
|
46
|
+
# Displays the result of yielding if the log level is Logger::FATAL or
|
47
|
+
# greater.
|
48
|
+
def fatal
|
49
|
+
logger.add(Logger::FATAL, nil, facility) { yield } if logger
|
50
|
+
end
|
51
|
+
|
52
|
+
private
|
53
|
+
|
54
|
+
# Sets the "facility" value, used for reporting where a log message
|
55
|
+
# originates. It defaults to the name of class with the object_id
|
56
|
+
# appended.
|
57
|
+
def facility
|
58
|
+
@facility ||= self.class.name.gsub(/::/, ".").gsub(/([a-z])([A-Z])/, "\\1_\\2").downcase + "[%x]" % object_id
|
59
|
+
end
|
60
|
+
end
|
61
|
+
end; end
|
@@ -0,0 +1,102 @@
|
|
1
|
+
require 'net/ssh/buffer'
|
2
|
+
require 'net/ssh/transport/constants'
|
3
|
+
require 'net/ssh/authentication/constants'
|
4
|
+
require 'net/ssh/connection/constants'
|
5
|
+
|
6
|
+
module Net; module SSH
|
7
|
+
|
8
|
+
# A specialization of Buffer that knows the format of certain common
|
9
|
+
# packet types. It auto-parses those packet types, and allows them to
|
10
|
+
# be accessed via the #[] accessor.
|
11
|
+
#
|
12
|
+
# data = some_channel_request_packet
|
13
|
+
# packet = Net::SSH::Packet.new(data)
|
14
|
+
#
|
15
|
+
# p packet.type #-> 98 (CHANNEL_REQUEST)
|
16
|
+
# p packet[:request]
|
17
|
+
# p packet[:want_reply]
|
18
|
+
#
|
19
|
+
# This is used exclusively internally by Net::SSH, and unless you're doing
|
20
|
+
# protocol-level manipulation or are extending Net::SSH in some way, you'll
|
21
|
+
# never need to use this class directly.
|
22
|
+
class Packet < Buffer
|
23
|
+
@@types = {}
|
24
|
+
|
25
|
+
# Register a new packet type that should be recognized and auto-parsed by
|
26
|
+
# Net::SSH::Packet. Note that any packet type that is not preregistered
|
27
|
+
# will not be autoparsed.
|
28
|
+
#
|
29
|
+
# The +pairs+ parameter must be either empty, or an array of two-element
|
30
|
+
# tuples, where the first element of each tuple is the name of the field,
|
31
|
+
# and the second is the type.
|
32
|
+
#
|
33
|
+
# register DISCONNECT, [:reason_code, :long], [:description, :string], [:language, :string]
|
34
|
+
def self.register(type, *pairs)
|
35
|
+
@@types[type] = pairs
|
36
|
+
end
|
37
|
+
|
38
|
+
include Transport::Constants, Authentication::Constants, Connection::Constants
|
39
|
+
|
40
|
+
#--
|
41
|
+
# These are the recognized packet types. All other packet types will be
|
42
|
+
# accepted, but not auto-parsed, requiring the client to parse the
|
43
|
+
# fields using the methods provided by Net::SSH::Buffer.
|
44
|
+
#++
|
45
|
+
|
46
|
+
register DISCONNECT, [:reason_code, :long], [:description, :string], [:language, :string]
|
47
|
+
register IGNORE, [:data, :string]
|
48
|
+
register UNIMPLEMENTED, [:number, :long]
|
49
|
+
register DEBUG, [:always_display, :bool], [:message, :string], [:language, :string]
|
50
|
+
register SERVICE_ACCEPT, [:service_name, :string]
|
51
|
+
register USERAUTH_BANNER, [:message, :string], [:language, :string]
|
52
|
+
register USERAUTH_FAILURE, [:authentications, :string], [:partial_success, :bool]
|
53
|
+
register GLOBAL_REQUEST, [:request_type, :string], [:want_reply, :bool], [:request_data, :buffer]
|
54
|
+
register CHANNEL_OPEN, [:channel_type, :string], [:remote_id, :long], [:window_size, :long], [:packet_size, :long]
|
55
|
+
register CHANNEL_OPEN_CONFIRMATION, [:local_id, :long], [:remote_id, :long], [:window_size, :long], [:packet_size, :long]
|
56
|
+
register CHANNEL_OPEN_FAILURE, [:local_id, :long], [:reason_code, :long], [:description, :string], [:language, :string]
|
57
|
+
register CHANNEL_WINDOW_ADJUST, [:local_id, :long], [:extra_bytes, :long]
|
58
|
+
register CHANNEL_DATA, [:local_id, :long], [:data, :string]
|
59
|
+
register CHANNEL_EXTENDED_DATA, [:local_id, :long], [:data_type, :long], [:data, :string]
|
60
|
+
register CHANNEL_EOF, [:local_id, :long]
|
61
|
+
register CHANNEL_CLOSE, [:local_id, :long]
|
62
|
+
register CHANNEL_REQUEST, [:local_id, :long], [:request, :string], [:want_reply, :bool], [:request_data, :buffer]
|
63
|
+
register CHANNEL_SUCCESS, [:local_id, :long]
|
64
|
+
register CHANNEL_FAILURE, [:local_id, :long]
|
65
|
+
|
66
|
+
# The (integer) type of this packet.
|
67
|
+
attr_reader :type
|
68
|
+
|
69
|
+
# Create a new packet from the given payload. This will automatically
|
70
|
+
# parse the packet if it is one that has been previously registered with
|
71
|
+
# Packet.register; otherwise, the packet will need to be manually parsed
|
72
|
+
# using the methods provided in the Net::SSH::Buffer superclass.
|
73
|
+
def initialize(payload)
|
74
|
+
@named_elements = {}
|
75
|
+
super
|
76
|
+
@type = read_byte
|
77
|
+
instantiate!
|
78
|
+
end
|
79
|
+
|
80
|
+
# Access one of the auto-parsed fields by name. Raises an error if no
|
81
|
+
# element by the given name exists.
|
82
|
+
def [](name)
|
83
|
+
name = name.to_sym
|
84
|
+
raise ArgumentError, "no such element #{name}" unless @named_elements.key?(name)
|
85
|
+
@named_elements[name]
|
86
|
+
end
|
87
|
+
|
88
|
+
private
|
89
|
+
|
90
|
+
# Parse the packet's contents and assign the named elements, as described
|
91
|
+
# by the registered format for the packet.
|
92
|
+
def instantiate!
|
93
|
+
(@@types[type] || []).each do |name, datatype|
|
94
|
+
@named_elements[name.to_sym] = if datatype == :buffer
|
95
|
+
remainder_as_buffer
|
96
|
+
else
|
97
|
+
send("read_#{datatype}")
|
98
|
+
end
|
99
|
+
end
|
100
|
+
end
|
101
|
+
end
|
102
|
+
end; end
|