|
1 | 1 | package services |
2 | 2 |
|
3 | 3 | import ( |
4 | | -"crypto/rsa" |
5 | | -"strings" |
6 | | -"testing" |
| 4 | + "crypto/rsa" |
| 5 | + "strings" |
| 6 | + "testing" |
7 | 7 |
|
8 | | -. "github.com/onsi/ginkgo/v2" |
9 | | -. "github.com/onsi/gomega" |
| 8 | + . "github.com/onsi/ginkgo/v2" |
| 9 | + . "github.com/onsi/gomega" |
10 | 10 |
|
11 | | -"golang.org/x/crypto/ssh" |
| 11 | + "golang.org/x/crypto/ssh" |
12 | 12 | ) |
13 | 13 |
|
14 | 14 | var _ = Describe("DefaultSSHService", func() { |
15 | | -Describe("GenerateRSAKeyPair", func() { |
16 | | -It("generates non-empty private and public keys", func() { |
17 | | -svc := &DefaultSSHService{RSAKeyLength: 2048} |
18 | | -privateKey, publicKey, err := svc.GenerateRSAKeyPair() |
19 | | - |
20 | | -Expect(err).NotTo(HaveOccurred()) |
21 | | -Expect(privateKey).NotTo(BeEmpty()) |
22 | | -Expect(publicKey).NotTo(BeEmpty()) |
23 | | -}) |
| 15 | + Describe("GenerateRSAKeyPair", func() { |
| 16 | + It("generates non-empty private and public keys", func() { |
| 17 | + svc := &DefaultSSHService{RSAKeyLength: 2048} |
| 18 | + privateKey, publicKey, err := svc.GenerateRSAKeyPair() |
24 | 19 |
|
25 | | -It("returns a valid PEM-encoded RSA private key", func() { |
26 | | -svc := &DefaultSSHService{RSAKeyLength: 2048} |
27 | | -privateKey, _, err := svc.GenerateRSAKeyPair() |
| 20 | + Expect(err).NotTo(HaveOccurred()) |
| 21 | + Expect(privateKey).NotTo(BeEmpty()) |
| 22 | + Expect(publicKey).NotTo(BeEmpty()) |
| 23 | + }) |
28 | 24 |
|
29 | | -Expect(err).NotTo(HaveOccurred()) |
30 | | -Expect(strings.Contains(privateKey, "-----BEGIN RSA PRIVATE KEY-----")).To(BeTrue()) |
31 | | -Expect(strings.Contains(privateKey, "-----END RSA PRIVATE KEY-----")).To(BeTrue()) |
32 | | -}) |
| 25 | + It("returns a valid PEM-encoded RSA private key", func() { |
| 26 | + svc := &DefaultSSHService{RSAKeyLength: 2048} |
| 27 | + privateKey, _, err := svc.GenerateRSAKeyPair() |
33 | 28 |
|
34 | | -It("returns a public key with ssh-rsa prefix", func() { |
35 | | -svc := &DefaultSSHService{RSAKeyLength: 2048} |
36 | | -_, publicKey, err := svc.GenerateRSAKeyPair() |
| 29 | + Expect(err).NotTo(HaveOccurred()) |
| 30 | + Expect(strings.Contains(privateKey, "-----BEGIN RSA PRIVATE KEY-----")).To(BeTrue()) |
| 31 | + Expect(strings.Contains(privateKey, "-----END RSA PRIVATE KEY-----")).To(BeTrue()) |
| 32 | + }) |
37 | 33 |
|
38 | | -Expect(err).NotTo(HaveOccurred()) |
39 | | -Expect(publicKey).To(HavePrefix("ssh-rsa ")) |
40 | | -}) |
| 34 | + It("returns a public key with ssh-rsa prefix", func() { |
| 35 | + svc := &DefaultSSHService{RSAKeyLength: 2048} |
| 36 | + _, publicKey, err := svc.GenerateRSAKeyPair() |
41 | 37 |
|
42 | | -It("returns keys that can be parsed back and are usable", func() { |
43 | | -svc := &DefaultSSHService{RSAKeyLength: 2048} |
44 | | -privateKey, publicKey, err := svc.GenerateRSAKeyPair() |
| 38 | + Expect(err).NotTo(HaveOccurred()) |
| 39 | + Expect(publicKey).To(HavePrefix("ssh-rsa ")) |
| 40 | + }) |
45 | 41 |
|
46 | | -Expect(err).NotTo(HaveOccurred()) |
| 42 | + It("returns keys that can be parsed back and are usable", func() { |
| 43 | + svc := &DefaultSSHService{RSAKeyLength: 2048} |
| 44 | + privateKey, publicKey, err := svc.GenerateRSAKeyPair() |
47 | 45 |
|
48 | | -parsedPrivateKey, err := ssh.ParseRawPrivateKey([]byte(privateKey)) |
49 | | -Expect(err).NotTo(HaveOccurred()) |
| 46 | + Expect(err).NotTo(HaveOccurred()) |
50 | 47 |
|
51 | | -rsaKey, ok := parsedPrivateKey.(*rsa.PrivateKey) |
52 | | -Expect(ok).To(BeTrue()) |
53 | | -Expect(rsaKey.N).NotTo(BeNil()) |
| 48 | + parsedPrivateKey, err := ssh.ParseRawPrivateKey([]byte(privateKey)) |
| 49 | + Expect(err).NotTo(HaveOccurred()) |
54 | 50 |
|
55 | | -_, _, _, _, err = ssh.ParseAuthorizedKey([]byte(publicKey)) |
56 | | -Expect(err).NotTo(HaveOccurred()) |
57 | | -}) |
| 51 | + rsaKey, ok := parsedPrivateKey.(*rsa.PrivateKey) |
| 52 | + Expect(ok).To(BeTrue()) |
| 53 | + Expect(rsaKey.N).NotTo(BeNil()) |
58 | 54 |
|
59 | | -It("returns an error when key length is zero", func() { |
60 | | -svc := &DefaultSSHService{RSAKeyLength: 0} |
61 | | -_, _, err := svc.GenerateRSAKeyPair() |
| 55 | + _, _, _, _, err = ssh.ParseAuthorizedKey([]byte(publicKey)) |
| 56 | + Expect(err).NotTo(HaveOccurred()) |
| 57 | + }) |
62 | 58 |
|
63 | | -Expect(err).To(HaveOccurred()) |
64 | | -}) |
| 59 | + It("returns an error when key length is zero", func() { |
| 60 | + svc := &DefaultSSHService{RSAKeyLength: 0} |
| 61 | + _, _, err := svc.GenerateRSAKeyPair() |
65 | 62 |
|
66 | | -It("returns an error when key length is below the minimum", func() { |
67 | | -svc := &DefaultSSHService{RSAKeyLength: 256} |
68 | | -_, _, err := svc.GenerateRSAKeyPair() |
| 63 | + Expect(err).To(HaveOccurred()) |
| 64 | + }) |
69 | 65 |
|
70 | | -Expect(err).To(HaveOccurred()) |
71 | | -}) |
72 | | -}) |
| 66 | + It("returns an error when key length is below the minimum", func() { |
| 67 | + svc := &DefaultSSHService{RSAKeyLength: 256} |
| 68 | + _, _, err := svc.GenerateRSAKeyPair() |
73 | 69 |
|
74 | | -Describe("GenerateED25519KeyPair", func() { |
75 | | -It("generates non-empty private and public keys", func() { |
76 | | -svc := &DefaultSSHService{} |
77 | | -privateKey, publicKey, err := svc.GenerateED25519KeyPair() |
| 70 | + Expect(err).To(HaveOccurred()) |
| 71 | + }) |
| 72 | + }) |
78 | 73 |
|
79 | | -Expect(err).NotTo(HaveOccurred()) |
80 | | -Expect(privateKey).NotTo(BeEmpty()) |
81 | | -Expect(publicKey).NotTo(BeEmpty()) |
82 | | -}) |
| 74 | + Describe("GenerateED25519KeyPair", func() { |
| 75 | + It("generates non-empty private and public keys", func() { |
| 76 | + svc := &DefaultSSHService{} |
| 77 | + privateKey, publicKey, err := svc.GenerateED25519KeyPair() |
83 | 78 |
|
84 | | -It("returns a valid PEM-encoded OpenSSH private key", func() { |
85 | | -svc := &DefaultSSHService{} |
86 | | -privateKey, _, err := svc.GenerateED25519KeyPair() |
| 79 | + Expect(err).NotTo(HaveOccurred()) |
| 80 | + Expect(privateKey).NotTo(BeEmpty()) |
| 81 | + Expect(publicKey).NotTo(BeEmpty()) |
| 82 | + }) |
87 | 83 |
|
88 | | -Expect(err).NotTo(HaveOccurred()) |
89 | | -Expect(strings.Contains(privateKey, "-----BEGIN OPENSSH PRIVATE KEY-----")).To(BeTrue()) |
90 | | -Expect(strings.Contains(privateKey, "-----END OPENSSH PRIVATE KEY-----")).To(BeTrue()) |
91 | | -}) |
| 84 | + It("returns a valid PEM-encoded OpenSSH private key", func() { |
| 85 | + svc := &DefaultSSHService{} |
| 86 | + privateKey, _, err := svc.GenerateED25519KeyPair() |
92 | 87 |
|
93 | | -It("returns a public key with ssh-ed25519 prefix", func() { |
94 | | -svc := &DefaultSSHService{} |
95 | | -_, publicKey, err := svc.GenerateED25519KeyPair() |
| 88 | + Expect(err).NotTo(HaveOccurred()) |
| 89 | + Expect(strings.Contains(privateKey, "-----BEGIN OPENSSH PRIVATE KEY-----")).To(BeTrue()) |
| 90 | + Expect(strings.Contains(privateKey, "-----END OPENSSH PRIVATE KEY-----")).To(BeTrue()) |
| 91 | + }) |
96 | 92 |
|
97 | | -Expect(err).NotTo(HaveOccurred()) |
98 | | -Expect(publicKey).To(HavePrefix("ssh-ed25519 ")) |
99 | | -}) |
| 93 | + It("returns a public key with ssh-ed25519 prefix", func() { |
| 94 | + svc := &DefaultSSHService{} |
| 95 | + _, publicKey, err := svc.GenerateED25519KeyPair() |
100 | 96 |
|
101 | | -It("returns keys that can be parsed and used as a valid pair", func() { |
102 | | -svc := &DefaultSSHService{} |
103 | | -privateKey, publicKey, err := svc.GenerateED25519KeyPair() |
| 97 | + Expect(err).NotTo(HaveOccurred()) |
| 98 | + Expect(publicKey).To(HavePrefix("ssh-ed25519 ")) |
| 99 | + }) |
104 | 100 |
|
105 | | -Expect(err).NotTo(HaveOccurred()) |
| 101 | + It("returns keys that can be parsed and used as a valid pair", func() { |
| 102 | + svc := &DefaultSSHService{} |
| 103 | + privateKey, publicKey, err := svc.GenerateED25519KeyPair() |
106 | 104 |
|
107 | | -signer, err := ssh.ParsePrivateKey([]byte(privateKey)) |
108 | | -Expect(err).NotTo(HaveOccurred()) |
| 105 | + Expect(err).NotTo(HaveOccurred()) |
109 | 106 |
|
110 | | -pubKey, _, _, _, err := ssh.ParseAuthorizedKey([]byte(publicKey)) |
111 | | -Expect(err).NotTo(HaveOccurred()) |
| 107 | + signer, err := ssh.ParsePrivateKey([]byte(privateKey)) |
| 108 | + Expect(err).NotTo(HaveOccurred()) |
112 | 109 |
|
113 | | -Expect(string(signer.PublicKey().Marshal())).To(Equal(string(pubKey.Marshal()))) |
114 | | -}) |
| 110 | + pubKey, _, _, _, err := ssh.ParseAuthorizedKey([]byte(publicKey)) |
| 111 | + Expect(err).NotTo(HaveOccurred()) |
115 | 112 |
|
116 | | -It("produces signatures in ssh-ed25519 format", func() { |
117 | | -svc := &DefaultSSHService{} |
118 | | -privateKey, _, err := svc.GenerateED25519KeyPair() |
119 | | -Expect(err).NotTo(HaveOccurred()) |
| 113 | + Expect(string(signer.PublicKey().Marshal())).To(Equal(string(pubKey.Marshal()))) |
| 114 | + }) |
120 | 115 |
|
121 | | -signer, err := ssh.ParsePrivateKey([]byte(privateKey)) |
122 | | -Expect(err).NotTo(HaveOccurred()) |
| 116 | + It("produces signatures in ssh-ed25519 format", func() { |
| 117 | + svc := &DefaultSSHService{} |
| 118 | + privateKey, _, err := svc.GenerateED25519KeyPair() |
| 119 | + Expect(err).NotTo(HaveOccurred()) |
123 | 120 |
|
124 | | -sig, err := signer.Sign(nil, []byte("test data")) |
125 | | -Expect(err).NotTo(HaveOccurred()) |
126 | | -Expect(sig.Format).To(Equal("ssh-ed25519")) |
127 | | -}) |
128 | | -}) |
| 121 | + signer, err := ssh.ParsePrivateKey([]byte(privateKey)) |
| 122 | + Expect(err).NotTo(HaveOccurred()) |
| 123 | + |
| 124 | + sig, err := signer.Sign(nil, []byte("test data")) |
| 125 | + Expect(err).NotTo(HaveOccurred()) |
| 126 | + Expect(sig.Format).To(Equal("ssh-ed25519")) |
| 127 | + }) |
| 128 | + }) |
129 | 129 | }) |
130 | 130 |
|
131 | 131 | func TestSSHService(t *testing.T) { |
132 | | -RegisterFailHandler(Fail) |
133 | | -RunSpecs(t, "SSH Service Suite") |
| 132 | + RegisterFailHandler(Fail) |
| 133 | + RunSpecs(t, "SSH Service Suite") |
134 | 134 | } |
0 commit comments