mirror of
https://github.com/jech/galene.git
synced 2024-11-09 02:05:59 +01:00
Initial version of galenectl.go.
This commit is contained in:
parent
b5f937b8ab
commit
ece4929111
1 changed files with 165 additions and 0 deletions
165
galenectl/galenectl.go
Normal file
165
galenectl/galenectl.go
Normal file
|
@ -0,0 +1,165 @@
|
|||
package main
|
||||
|
||||
import (
|
||||
"crypto/rand"
|
||||
"crypto/sha256"
|
||||
"encoding/hex"
|
||||
"encoding/json"
|
||||
"errors"
|
||||
"flag"
|
||||
"fmt"
|
||||
"log"
|
||||
"os"
|
||||
"slices"
|
||||
|
||||
"golang.org/x/crypto/bcrypt"
|
||||
"golang.org/x/crypto/pbkdf2"
|
||||
|
||||
"github.com/jech/galene/group"
|
||||
)
|
||||
|
||||
type command struct {
|
||||
command func(string, []string)
|
||||
description string
|
||||
}
|
||||
|
||||
var commands = map[string]command{
|
||||
"hash-password": {
|
||||
command: hashPasswordCmd,
|
||||
description: "generate a hashed password",
|
||||
},
|
||||
}
|
||||
|
||||
func main() {
|
||||
flag.Usage = func() {
|
||||
fmt.Fprintf(
|
||||
flag.CommandLine.Output(),
|
||||
"%s [option...] command [option...] [args...]\n",
|
||||
os.Args[0])
|
||||
flag.PrintDefaults()
|
||||
fmt.Fprintln(flag.CommandLine.Output())
|
||||
names := make([]string, 0, len(commands))
|
||||
for name := range commands {
|
||||
names = append(names, name)
|
||||
}
|
||||
slices.Sort(names)
|
||||
for _, name := range names {
|
||||
fmt.Fprintf(
|
||||
flag.CommandLine.Output(),
|
||||
" %-15s %s\n",
|
||||
name, commands[name].description)
|
||||
}
|
||||
fmt.Fprintln(flag.CommandLine.Output())
|
||||
fmt.Fprintf(flag.CommandLine.Output(),
|
||||
"See \"%s command -help\" for information on individual commands.\n",
|
||||
os.Args[0],
|
||||
)
|
||||
}
|
||||
flag.Parse()
|
||||
|
||||
if flag.NArg() < 1 {
|
||||
flag.Usage()
|
||||
os.Exit(1)
|
||||
}
|
||||
|
||||
cmdname := flag.Args()[0]
|
||||
command, ok := commands[cmdname]
|
||||
if !ok {
|
||||
flag.Usage()
|
||||
os.Exit(1)
|
||||
}
|
||||
command.command(cmdname, flag.Args()[1:])
|
||||
}
|
||||
|
||||
func makePassword(pw string, algorithm string, iterations, length, saltlen, cost int) (group.Password, error) {
|
||||
salt := make([]byte, saltlen)
|
||||
_, err := rand.Read(salt)
|
||||
if err != nil {
|
||||
return group.Password{}, err
|
||||
}
|
||||
|
||||
switch algorithm {
|
||||
case "pbkdf2":
|
||||
key := pbkdf2.Key(
|
||||
[]byte(pw), salt, iterations, length, sha256.New,
|
||||
)
|
||||
encoded := hex.EncodeToString(key)
|
||||
return group.Password{
|
||||
Type: "pbkdf2",
|
||||
Hash: "sha-256",
|
||||
Key: &encoded,
|
||||
Salt: hex.EncodeToString(salt),
|
||||
Iterations: iterations,
|
||||
}, nil
|
||||
case "bcrypt":
|
||||
key, err := bcrypt.GenerateFromPassword(
|
||||
[]byte(pw), cost,
|
||||
)
|
||||
if err != nil {
|
||||
return group.Password{}, err
|
||||
}
|
||||
|
||||
k := string(key)
|
||||
return group.Password{
|
||||
Type: "bcrypt",
|
||||
Key: &k,
|
||||
}, nil
|
||||
case "wildcard":
|
||||
if pw != "" {
|
||||
log.Fatalf(
|
||||
"Wildcard password " +
|
||||
"must be the empty string",
|
||||
)
|
||||
}
|
||||
return group.Password{
|
||||
Type: "wildcard",
|
||||
}, nil
|
||||
default:
|
||||
return group.Password{}, errors.New("unknown password type")
|
||||
}
|
||||
}
|
||||
|
||||
func hashPasswordCmd(cmdname string, args []string) {
|
||||
var algorithm string
|
||||
var iterations int
|
||||
var cost int
|
||||
var length int
|
||||
var saltlen int
|
||||
|
||||
cmd := flag.NewFlagSet(cmdname, flag.ExitOnError)
|
||||
cmd.Usage = func() {
|
||||
fmt.Fprintf(cmd.Output(),
|
||||
"%v [option...] %v password [option...] password...\n",
|
||||
os.Args[0], cmdname,
|
||||
)
|
||||
cmd.PrintDefaults()
|
||||
}
|
||||
cmd.StringVar(&algorithm, "hash", "pbkdf2",
|
||||
"hashing `algorithm`")
|
||||
cmd.IntVar(&iterations, "iterations", 4096,
|
||||
"`number` of iterations (pbkdf2)")
|
||||
cmd.IntVar(&cost, "cost", bcrypt.DefaultCost,
|
||||
"`cost` (bcrypt)")
|
||||
cmd.IntVar(&length, "key", 32, "key `length` (pbkdf2)")
|
||||
cmd.IntVar(&saltlen, "salt", 8, "salt `length` (pbkdf2)")
|
||||
cmd.Parse(args)
|
||||
|
||||
if cmd.NArg() == 0 {
|
||||
cmd.Usage()
|
||||
os.Exit(1)
|
||||
}
|
||||
|
||||
for _, pw := range cmd.Args() {
|
||||
p, err := makePassword(
|
||||
pw, algorithm, iterations, length, saltlen, cost,
|
||||
)
|
||||
if err != nil {
|
||||
log.Fatalf("Make password: %v", err)
|
||||
}
|
||||
e := json.NewEncoder(os.Stdout)
|
||||
err = e.Encode(p)
|
||||
if err != nil {
|
||||
log.Fatalf("Encode: %v", err)
|
||||
}
|
||||
}
|
||||
}
|
Loading…
Reference in a new issue