splice 0.1 → 0.2

data/Gemfile

@@ -1,4 +1,4 @@
 source 'https://rubygems.org'
 
 # Specify your gem's dependencies in splice.gemspec
-gemspec
+gemspec

data/Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    splice (0.0.1)
+    splice (0.1)
 
 GEM
   remote: https://rubygems.org/

data/bin/splice

@@ -1,12 +1,13 @@
 #!/usr/bin/env ruby
-require 'pp'
-require 'execution_context'
+require 'splice'
 include Splice
+require 'optparse'
 
-context = ExecutionContext.new
+options = {}
+OptionParser.new do |opts|
+  opts.banner = "Usage: splice [options]"
+  opts.on("--master","-m") { generate_master }
+  opts.on("-s","--sign FILE") {|f| sign_file(f) }
+end.parse!
 
-if context.settings["splice"]["files"] and context.settings["splice"]["files"].count > 0
-  context.settings["splice"]["files"].each {|p| context.parse(p); puts "Parsed and wrote file #{p}" }
-else
-  puts "ERROR: No files specified for processing."
-end
+parse_files

data/lib/execution_context.rb

@@ -1,6 +1,9 @@
-SEARCH_PATHS = ["dna.yml","/tmp/dna.yml", "/etc/dna.yml"] #Search paths, in order of priority
+require 'openssl'
+SEARCH_PATHS = ["local.dna","/tmp/ephemeral.dna", "/etc/system.dna"] #Search paths, in order of priority
 require 'erb'
+
 module Splice
+  include OpenSSL
   class ExecutionContext
     attr_accessor :settings
   
@@ -8,11 +11,42 @@ module Splice
       @settings = Hash.new
     
       SEARCH_PATHS.each do |path|
-        is_not_tmp = true unless path == "/tmp/dna.yml" and search_tmp == false
+        is_not_tmp = true unless path == "/tmp/ephemeral.dna" and search_tmp == false
       
         if File.exists?(path) and is_not_tmp
-          path_settings = YAML.load_file(path)
-          path_settings.each_pair {|key,value| @settings[key] ||= value}
+          begin
+            dna_package = Marshal.load File.read(path)
+          rescue => e
+            puts "One or more dna files are invalid. Please check for corruption and try again."
+            exit 1
+          end
+          signature = dna_package[0]
+          payload = dna_package[1]
+          
+          # First, we need to verify that the file
+          # has not been tampered with
+          
+          begin
+            public_key = OpenSSL::PKey::RSA.new File.read("/etc/splice/bloodline.pem")
+          rescue => e
+            puts "ERROR: Invalid or no bloodline file installed. Please install the bloodline.pem file generated when you ran splice --master at /etc/splice/bloodline.pem"
+          end
+          
+          file_signed_correctly = public_key.verify(OpenSSL::Digest::SHA1.new,signature,payload)
+          
+          if !file_signed_correctly
+            puts "ERROR: One or more DNA files have been tampered with. Halting immediately."
+            exit(13)
+          end
+          
+          path_settings = YAML.load(payload)
+          path_settings.each_pair do |key,value|
+            if key == "splice" and value["files"] and @settings["splice"] and @settings["splice"]["files"]
+              @settings["splice"]["files"] += value["files"]
+            else
+              @settings[key] ||= value
+            end
+          end
         end
       end
     

data/lib/splice.rb

@@ -1,4 +1,78 @@
 require "splice/version"
+require 'execution_context'
+require 'pp'
+require 'openssl'
 
 module Splice
+  def parse_files
+    context = ExecutionContext.new
+
+    if context.settings["splice"] and context.settings["splice"]["files"] and context.settings["splice"]["files"].count > 0
+      context.settings["splice"]["files"].each {|p| context.parse(p); puts "Parsed and wrote file #{p}" }
+    else
+      puts "ERROR: No files specified for processing."
+    end
+    exit 0
+  end
+  
+  def generate_master
+    puts "Generating new master file"
+    private_key = OpenSSL::PKey::RSA.new(2048)
+    public_key = private_key.public_key
+    
+    private_cert = private_key.to_pem
+    public_cert = public_key.to_pem
+    
+    if !Dir.exists?("/etc/splice_master/")
+      begin
+        Dir.mkdir("/etc/splice_master",0733)
+      rescue => e
+        puts "ERROR: could not write master key to disk. Check that you have permission to write to /etc/ and try again."
+        exit 4
+      end
+    end
+    
+    begin
+      File.open("/etc/splice_master/splice.master",'w') {|f| f.write(private_key) }
+      File.open("bloodline.pem",'w') {|f| f.write(public_key) }
+    rescue => e
+      puts "ERROR: Could not write master key to disk."
+      exit 2
+    end
+    
+    puts "New master created"
+    puts "Bloodline file saved to './bloodline.pem'"
+    exit 0
+  end
+  
+  def sign_file(a_file)
+    puts "Signing file #{a_file}"
+    
+    if !File.exists?("/etc/splice_master/splice.master")
+      puts "ERROR: No splice master key found. Run splice --master or import the correct key before you attempt to sign files."
+      exit 1
+    end
+    
+    private_key = OpenSSL::PKey::RSA.new File.read('/etc/splice_master/splice.master')
+    file_contents = File.read(a_file)
+    sig = private_key.sign(OpenSSL::Digest::SHA1.new,file_contents)
+    new_file_name = File.basename(a_file)
+    new_file_name = new_file_name.split(".")
+    new_file_name.delete_at(new_file_name.count - 1) #Remove the file extension
+    new_file_name = new_file_name.join(".")
+    new_file_name += ".dna"
+    
+    dna_payload = Marshal.dump [sig,file_contents]
+    
+    begin
+      File.open(new_file_name,'w') { |f| f.write(dna_payload) }
+    rescue => e
+      puts "ERROR: Could not write signed DNA file to disk."
+      exit 6
+    end
+    
+    puts "Signed configuration file #{a_file} to #{new_file_name}"
+    
+    exit 0
+  end
 end

data/lib/splice/version.rb

@@ -1,3 +1,3 @@
 module Splice
-  VERSION = "0.1"
+  VERSION = "0.2"
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: splice
 version: !ruby/object:Gem::Version
-  version: '0.1'
+  version: '0.2'
   prerelease: 
 platform: ruby
 authors:
@@ -26,7 +26,6 @@ files:
 - README.md
 - Rakefile
 - bin/splice
-- dna.yml
 - lib/execution_context.rb
 - lib/splice.rb
 - lib/splice/version.rb

data/dna.yml

@@ -1,5 +0,0 @@
-splice:
-    files: ["/Users/Omar/Desktop/predserv.rb.erb","/Users/Omar/Desktop/pass.txt.erb"]
-database:
-    district_name: "Morgan Hill"
-    database_server: "192.168.1.1"