Module: KnifeSSHAgent::SigningObject

Defined in:
lib/knife/ssh-agent/signedheaderauth.rb

Instance Method Summary collapse

Instance Method Details

#do_sign(private_key, digest, sign_algorithm, sign_version) ⇒ Object 



9
10
11
12
13
14
15
16
17
 
# File 'lib/knife/ssh-agent/signedheaderauth.rb', line 9

def do_sign(private_key, digest, sign_algorithm, sign_version)
  use_agent = Chef::Config[:knife][:use_ssh_agent]

  if use_agent
    sign_with_agent(private_key, sign_algorithm, sign_version)
  else
    super(private_key, digest, sign_algorithm, sign_version)
  end
end

#sign_with_agent(key, sign_algorithm, sign_version) ⇒ Object

Raises:



19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
 
# File 'lib/knife/ssh-agent/signedheaderauth.rb', line 19

def sign_with_agent(key, sign_algorithm, sign_version)
  raise AgentException, 'ssh-agent requires authentication_protocol_version 1.3' unless sign_version == '1.3'

  string_to_sign = canonicalize_request(sign_algorithm, sign_version)
  begin
    agent = Net::SSH::Authentication::Agent.connect
    blob  = Net::SSH::Buffer.from(:raw, agent.sign(key, string_to_sign, SSH_AGENT_RSA_SHA2_256))
    type  = blob.read_string

    raise AgentException, "agent returned a '#{type}' signature (should be 'rsa-sha2-256')" unless type == 'rsa-sha2-256'

    blob.read_string
  ensure
    agent&.close
  end
end