141 lines
3.0 KiB
Go
141 lines
3.0 KiB
Go
package keychain
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"fmt"
|
|
"os"
|
|
"path/filepath"
|
|
"time"
|
|
|
|
"filippo.io/age"
|
|
"github.com/mitchellh/go-homedir"
|
|
"github.com/rs/zerolog/log"
|
|
)
|
|
|
|
func Path() (string, error) {
|
|
return homedir.Expand("~/.config/dagger/keys.txt")
|
|
}
|
|
|
|
func EnsureDefaultKey(ctx context.Context) error {
|
|
keysFile, err := Path()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// If the keys file already exists, there's nothing to do.
|
|
_, err = os.Stat(keysFile)
|
|
if err == nil {
|
|
return nil
|
|
}
|
|
|
|
// If we got a different error than not existent, abort
|
|
if !errors.Is(err, os.ErrNotExist) {
|
|
return err
|
|
}
|
|
|
|
// Attempt a migration from the old keys file
|
|
migrated, err := migrateKeys(ctx, keysFile)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
// If we migrated a previous identity, stop here.
|
|
if migrated {
|
|
return nil
|
|
}
|
|
|
|
// Otherwise, generate a new key
|
|
log.Ctx(ctx).Debug().Msg("generating default key pair")
|
|
_, err = Generate(ctx)
|
|
return err
|
|
}
|
|
|
|
// migrateKeys attempts a migration from `~/.dagger/keys.txt` to `~/.config/dagger/keys.txt`
|
|
func migrateKeys(ctx context.Context, keysFile string) (bool, error) {
|
|
oldKeysFile, err := homedir.Expand("~/.dagger/keys.txt")
|
|
if err != nil {
|
|
return false, err
|
|
}
|
|
|
|
if _, err := os.Stat(oldKeysFile); err != nil {
|
|
return false, nil
|
|
}
|
|
|
|
if err := os.MkdirAll(filepath.Dir(keysFile), 0700); err != nil {
|
|
return false, err
|
|
}
|
|
|
|
log.Ctx(ctx).Info().Msg("migrating keychain")
|
|
return true, os.Rename(oldKeysFile, keysFile)
|
|
}
|
|
|
|
func Default(ctx context.Context) (string, error) {
|
|
keys, err := List(ctx)
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
if len(keys) == 0 {
|
|
return "", errors.New("no identities found in the keys file")
|
|
}
|
|
|
|
return keys[0].Recipient().String(), nil
|
|
}
|
|
|
|
func Generate(ctx context.Context) (string, error) {
|
|
keysFile, err := Path()
|
|
if err != nil {
|
|
return "", err
|
|
}
|
|
|
|
k, err := age.GenerateX25519Identity()
|
|
if err != nil {
|
|
return "", fmt.Errorf("internal error: %v", err)
|
|
}
|
|
|
|
if err := os.MkdirAll(filepath.Dir(keysFile), 0700); err != nil {
|
|
return "", err
|
|
}
|
|
f, err := os.OpenFile(keysFile, os.O_WRONLY|os.O_CREATE|os.O_EXCL, 0600)
|
|
if err != nil {
|
|
return "", fmt.Errorf("failed to open keys file %q: %v", keysFile, err)
|
|
}
|
|
defer f.Close()
|
|
fmt.Fprintf(f, "# created: %s\n", time.Now().Format(time.RFC3339))
|
|
fmt.Fprintf(f, "# public key: %s\n", k.Recipient())
|
|
fmt.Fprintf(f, "%s\n", k)
|
|
|
|
pubkey := k.Recipient().String()
|
|
|
|
log.Ctx(ctx).Debug().Str("publicKey", pubkey).Msg("keypair generated")
|
|
|
|
return pubkey, nil
|
|
}
|
|
|
|
func List(ctx context.Context) ([]*age.X25519Identity, error) {
|
|
keysFile, err := Path()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
f, err := os.Open(keysFile)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("failed to open keys file %q: %w", keysFile, err)
|
|
}
|
|
ids, err := age.ParseIdentities(f)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("failed to parse input: %w", err)
|
|
}
|
|
|
|
keys := make([]*age.X25519Identity, 0, len(ids))
|
|
for _, id := range ids {
|
|
key, ok := id.(*age.X25519Identity)
|
|
if !ok {
|
|
return nil, fmt.Errorf("internal error: unexpected identity type: %T", id)
|
|
}
|
|
keys = append(keys, key)
|
|
}
|
|
|
|
return keys, nil
|
|
}
|