s2/sshenc.sh
1
0
Fork 0
mirror of https://github.com/5im-0n/sshenc.sh.git synced 2025-08-02 11:20:05 +02:00
Code Issues Releases Wiki Activity

Use LibreSSL on MacOS

Browse Source 
- Use the LibreSSL library that comes preinstalled on MacOS
- Disable the OpenSSL options that LibreSSL does not support
- Explain how to install OpenSSl if the LibreSSL version is too old
This commit is contained in:
Bernard Martis
2020-09-07 19:23:45 -04:00
parent b7c0dad242
commit c97265aa00
1 changed files with 18 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

29
sshenc.sh
View File

@@ -49,16 +49,23 @@ temp_file_key="$(mktemp "$temp_dir/$me.XXXXXX.key")"
temp_file="$(mktemp "$temp_dir/$me.XXXXXX.cypher")" temp_file="$(mktemp "$temp_dir/$me.XXXXXX.cypher")"
trap cleanup EXIT trap cleanup EXIT
uname=$(uname -s 2>/dev/null) # os specific configuration
case "$(uname -s 2>/dev/null)" in
case "${uname}x" in Darwin)
Darwinx) if [[ -n $(openssl version | grep -Eo "LibreSSL [2-9]") ]]; then
openssl_path=$(command -v openssl 2>/dev/null) openssl_params=''
if [ "${openssl_path}x" = "/usr/bin/opensslx" ]; then else
echo >&2 "You need openssl 1.1.1 installed and in the \$PATH" echo >&2 "Install openssl 1.1.1 or higher and add it to your \$PATH"
echo ''
echo ' brew install openssl'
echo ' echo 'export PATH="/usr/local/opt/openssl/bin:$PATH"' >> ~/.bash_profile'
echo ' source ~/.bash_profile'
echo ''
exit 1 exit 1
fi fi
;; ;;
*)
openssl_params='-pbkdf2 -iter 100000'
esac esac
# retrieve ssh keys from github # retrieve ssh keys from github
@@ -103,7 +110,7 @@ if [[ "${#public_key[@]}" > 0 ]]; then
done done
echo "-- /keys" echo "-- /keys"
if cat | openssl enc -aes-256-cbc -pbkdf2 -iter 100000 -salt -pass file:"$temp_file_key" > "$temp_file"; then if cat | openssl enc -aes-256-cbc -salt $openssl_params -pass file:"$temp_file_key" > "$temp_file"; then
openssl base64 -A < "$temp_file" openssl base64 -A < "$temp_file"
fi fi
@@ -129,8 +136,8 @@ elif [[ -e "$private_key" ]]; then
decrypted=false decrypted=false
for key in "${keys[@]}"; do for key in "${keys[@]}"; do
if $(echo "$key" | openssl base64 -d -A | openssl rsautl -decrypt -oaep -inkey "$temp_dir/private_key" >"$temp_file" 2>/dev/null); then if $(echo "$key" | openssl base64 -d -A | openssl rsautl -decrypt -oaep -inkey "$temp_dir/private_key" >"$temp_file_key" 2>/dev/null); then
if echo "$cypher" | openssl base64 -d -A | openssl aes-256-cbc -pbkdf2 -iter 100000 -d -pass file:"$temp_file"; then if echo "$cypher" | openssl base64 -d -A | openssl aes-256-cbc -d $openssl_params -pass file:"$temp_file_key"; then
decrypted=true decrypted=true
fi fi
fi fi