pax_global_header00006660000000000000000000000064130161062320014504gustar00rootroot0000000000000052 comment=4d2bfcbaabb3123090774d6ef3ad98ebba4d5069 chefcrypto-0.1.0/000077500000000000000000000000001301610623200136505ustar00rootroot00000000000000chefcrypto-0.1.0/CONDUCT.md000066400000000000000000000162351301610623200153000ustar00rootroot00000000000000This code of conduct outlines our expectations for participants within the Goiardi community, as well as steps to reporting unacceptable behavior. We are committed to providing a welcoming and inspiring community for all and expect our code of conduct to be honored. Anyone who violates this code of conduct may be banned from the community. Our open source community strives to: * **Be friendly and patient.** * **Be welcoming**: We strive to be a community that welcomes and supports people of all backgrounds and identities. This includes, but is not limited to members of any race, ethnicity, culture, national origin, colour, immigration status, social and economic class, educational level, sex, sexual orientation, gender identity and expression, age, size, family status, political belief, religion, and mental and physical ability. * **Be considerate**: Your work will be used by other people, and you in turn will depend on the work of others. Any decision you take will affect users and colleagues, and you should take those consequences into account when making decisions. Remember that we're a world-wide community, so you might not be communicating in someone else's primary language. * **Be respectful**: Not all of us will agree all the time, but disagreement is no excuse for poor behavior and poor manners. We might all experience some frustration now and then, but we cannot allow that frustration to turn into a personal attack. It’s important to remember that a community where people feel uncomfortable or threatened is not a productive one. * **Be careful in the words that we choose**: we are a community of professionals, and we conduct ourselves professionally. Be kind to others. Do not insult or put down other participants. Harassment and other exclusionary behavior aren't acceptable. * **Try to understand why we disagree**: Disagreements, both social and technical, happen all the time. It is important that we resolve disagreements and differing views constructively. Remember that we’re different. The strength of our community comes from its diversity, people from a wide range of backgrounds. Different people have different perspectives on issues. Being unable to understand why someone holds a viewpoint doesn’t mean that they’re wrong. Don’t forget that it is human to err and blaming each other doesn’t get us anywhere. Instead, focus on helping to resolve issues and learning from mistakes. ## Definitions Harassment includes, but is not limited to: - Offensive comments related to gender, gender identity and expression, sexual orientation, disability, mental illness, neuro(a)typicality, physical appearance, body size, race, age, regional discrimination, political or religious affiliation - Unwelcome comments regarding a person’s lifestyle choices and practices, including those related to food, health, parenting, drugs, and employment - Deliberate misgendering. This includes deadnaming or persistently using a pronoun that does not correctly reflect a person's gender identity. You must address people by the name they give you when not addressing them by their username or handle - Physical contact and simulated physical contact (eg, textual descriptions like “*hug*” or “*backrub*”) without consent or after a request to stop - Threats of violence, both physical and psychological - Incitement of violence towards any individual, including encouraging a person to commit suicide or to engage in self-harm - Deliberate intimidation - Stalking or following - Harassing photography or recording, including logging online activity for harassment purposes - Sustained disruption of discussion - Unwelcome sexual attention, including gratuitous or off-topic sexual images or behaviour - Pattern of inappropriate social contact, such as requesting/assuming inappropriate levels of intimacy with others - Continued one-on-one communication after requests to cease - Deliberate “outing” of any aspect of a person’s identity without their consent except as necessary to protect others from intentional abuse - Publication of non-harassing private communication Our open source community prioritizes marginalized people’s safety over privileged people’s comfort. We will not act on complaints regarding: - ‘Reverse’ -isms, including ‘reverse racism,’ ‘reverse sexism,’ and ‘cisphobia’ - Reasonable communication of boundaries, such as “leave me alone,” “go away,” or “I’m not discussing this with you” - Refusal to explain or debate social justice concepts - Communicating in a ‘tone’ you don’t find congenial - Criticizing racist, sexist, cissexist, or otherwise oppressive behavior or assumptions ### Diversity Statement We encourage everyone to participate and are committed to building a community for all. Although we will fail at times, we seek to treat everyone both as fairly and equally as possible. Whenever a participant has made a mistake, we expect them to take responsibility for it. If someone has been harmed or offended, it is our responsibility to listen carefully and respectfully, and do our best to right the wrong. Although this list cannot be exhaustive, we explicitly honor diversity in age, gender, gender identity or expression, culture, ethnicity, language, national origin, political beliefs, profession, race, religion, sexual orientation, socioeconomic status, and technical ability. We will not tolerate discrimination based on any of the protected characteristics above, including participants with disabilities. ### Reporting Issues If you experience or witness unacceptable behavior—or have any other concerns—please report it by contacting us via **[CONTACT]**. All reports will be handled with discretion. In your report please include: - Your contact information. - Names (real, nicknames, or pseudonyms) of any individuals involved. If there are additional witnesses, please include them as well. Your account of what occurred, and if you believe the incident is ongoing. If there is a publicly available record (e.g. a mailing list archive or a public IRC logger), please include a link. - Any additional information that may be helpful. After filing a report, a representative will contact you personally, review the incident, follow up with any additional questions, and make a decision as to how to respond. If the person who is harassing you is part of the response team, they will recuse themselves from handling your incident. If the complaint originates from a member of the response team, it will be handled by a different member of the response team. We will respect confidentiality requests for the purpose of protecting victims of abuse. ### Attribution & Acknowledgements We all stand on the shoulders of giants across many open source communities. We'd like to thank the communities and projects that established code of conducts and diversity statements as our inspiration: * [Django](https://www.djangoproject.com/conduct/reporting/) * [Python](https://www.python.org/community/diversity/) * [Ubuntu](http://www.ubuntu.com/about/about-ubuntu/conduct) * [Contributor Covenant](http://contributor-covenant.org/) * [Geek Feminism](http://geekfeminism.org/about/code-of-conduct/) * [Citizen Code of Conduct](http://citizencodeofconduct.org/) chefcrypto-0.1.0/LICENSE000066400000000000000000000251421301610623200146610ustar00rootroot00000000000000 Apache License Version 2.0, January 2004 http://www.apache.org/licenses/ TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION 1. Definitions. "License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections 1 through 9 of this document. "Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the License. "Legal Entity" shall mean the union of the acting entity and all other entities that control, are controlled by, or are under common control with that entity. For the purposes of this definition, "control" means (i) the power, direct or indirect, to cause the direction or management of such entity, whether by contract or otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial ownership of such entity. "You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License. "Source" form shall mean the preferred form for making modifications, including but not limited to software source code, documentation source, and configuration files. "Object" form shall mean any form resulting from mechanical transformation or translation of a Source form, including but not limited to compiled object code, generated documentation, and conversions to other media types. "Work" shall mean the work of authorship, whether in Source or Object form, made available under the License, as indicated by a copyright notice that is included in or attached to the work (an example is provided in the Appendix below). "Derivative Works" shall mean any work, whether in Source or Object form, that is based on (or derived from) the Work and for which the editorial revisions, annotations, elaborations, or other modifications represent, as a whole, an original work of authorship. For the purposes of this License, Derivative Works shall not include works that remain separable from, or merely link (or bind by name) to the interfaces of, the Work and Derivative Works thereof. "Contribution" shall mean any work of authorship, including the original version of the Work and any modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to Licensor for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on behalf of the copyright owner. For the purposes of this definition, "submitted" means any form of electronic, verbal, or written communication sent to the Licensor or its representatives, including but not limited to communication on electronic mailing lists, source code control systems, and issue tracking systems that are managed by, or on behalf of, the Licensor for the purpose of discussing and improving the Work, but excluding communication that is conspicuously marked or otherwise designated in writing by the copyright owner as "Not a Contribution." "Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution has been received by Licensor and subsequently incorporated within the Work. 2. Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare Derivative Works of, publicly display, publicly perform, sublicense, and distribute the Work and such Derivative Works in Source or Object form. 3. Grant of Patent License. Subject to the terms and conditions of this License, each Contributor hereby grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work, where such license applies only to those patent claims licensable by such Contributor that are necessarily infringed by their Contribution(s) alone or by combination of their Contribution(s) with the Work to which such Contribution(s) was submitted. If You institute patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work constitutes direct or contributory patent infringement, then any patent licenses granted to You under this License for that Work shall terminate as of the date such litigation is filed. 4. Redistribution. You may reproduce and distribute copies of the Work or Derivative Works thereof in any medium, with or without modifications, and in Source or Object form, provided that You meet the following conditions: (a) You must give any other recipients of the Work or Derivative Works a copy of this License; and (b) You must cause any modified files to carry prominent notices stating that You changed the files; and (c) You must retain, in the Source form of any Derivative Works that You distribute, all copyright, patent, trademark, and attribution notices from the Source form of the Work, excluding those notices that do not pertain to any part of the Derivative Works; and (d) If the Work includes a "NOTICE" text file as part of its distribution, then any Derivative Works that You distribute must include a readable copy of the attribution notices contained within such NOTICE file, excluding those notices that do not pertain to any part of the Derivative Works, in at least one of the following places: within a NOTICE text file distributed as part of the Derivative Works; within the Source form or documentation, if provided along with the Derivative Works; or, within a display generated by the Derivative Works, if and wherever such third-party notices normally appear. The contents of the NOTICE file are for informational purposes only and do not modify the License. You may add Your own attribution notices within Derivative Works that You distribute, alongside or as an addendum to the NOTICE text from the Work, provided that such additional attribution notices cannot be construed as modifying the License. You may add Your own copyright statement to Your modifications and may provide additional or different license terms and conditions for use, reproduction, or distribution of Your modifications, or for any such Derivative Works as a whole, provided Your use, reproduction, and distribution of the Work otherwise complies with the conditions stated in this License. 5. Submission of Contributions. Unless You explicitly state otherwise, any Contribution intentionally submitted for inclusion in the Work by You to the Licensor shall be under the terms and conditions of this License, without any additional terms or conditions. Notwithstanding the above, nothing herein shall supersede or modify the terms of any separate license agreement you may have executed with Licensor regarding such Contributions. 6. Trademarks. This License does not grant permission to use the trade names, trademarks, service marks, or product names of the Licensor, except as required for reasonable and customary use in describing the origin of the Work and reproducing the content of the NOTICE file. 7. Disclaimer of Warranty. Unless required by applicable law or agreed to in writing, Licensor provides the Work (and each Contributor provides its Contributions) on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. You are solely responsible for determining the appropriateness of using or redistributing the Work and assume any risks associated with Your exercise of permissions under this License. 8. Limitation of Liability. In no event and under no legal theory, whether in tort (including negligence), contract, or otherwise, unless required by applicable law (such as deliberate and grossly negligent acts) or agreed to in writing, shall any Contributor be liable to You for damages, including any direct, indirect, special, incidental, or consequential damages of any character arising as a result of this License or out of the use or inability to use the Work (including but not limited to damages for loss of goodwill, work stoppage, computer failure or malfunction, or any and all other commercial damages or losses), even if such Contributor has been advised of the possibility of such damages. 9. Accepting Warranty or Additional Liability. While redistributing the Work or Derivative Works thereof, You may choose to offer, and charge a fee for, acceptance of support, warranty, indemnity, or other liability obligations and/or rights consistent with this License. However, in accepting such obligations, You may act only on Your own behalf and on Your sole responsibility, not on behalf of any other Contributor, and only if You agree to indemnify, defend, and hold each Contributor harmless for any liability incurred by, or claims asserted against, such Contributor by reason of your accepting any such warranty or additional liability. END OF TERMS AND CONDITIONS APPENDIX: How to apply the Apache License to your work. To apply the Apache License to your work, attach the following boilerplate notice, with the fields enclosed by brackets "[]" replaced with your own identifying information. (Don't include the brackets!) The text should be enclosed in the appropriate comment syntax for the file format. We also recommend that a file or class name and description of purpose be included on the same "printed page" as the copyright notice for easier identification within third-party archives. Copyright [yyyy] [name of copyright owner] Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. chefcrypto-0.1.0/README.md000066400000000000000000000024621301610623200151330ustar00rootroot00000000000000chefcrypto ========== Various cryptographic routines for communicating with chef servers for golang programs and libraries. Originally part of goiardi, it's been split out for packaging purposes. Documentation ------------- See the godocs at https://godoc.org/github.com/ctdk/chefcrypto. AUTHOR ------ Jeremy Bingham () COPYRIGHT --------- Copyright 2013-2016, Jeremy Bingham CODE OF CONDUCT --------------- This project adheres to the [Open Code of Conduct][code-of-conduct]. By participating, you are expected to honor this code. [code-of-conduct]: http://todogroup.org/opencodeofconduct/#Goiardi/abuse-coc@goiardi.gl This code of conduct can also be found in CONDUCT.md in this repository. LICENSE ------- Like many Chef ecosystem programs, goairdi is licensed under the Apache 2.0 License. See the LICENSE file for details. The goiardi documentation in the `docs` directory is licensed under a Creative Commons Attribution 4.0 International (CC-BY 4.0) License. Chef is copyright (c) 2008-2014 Chef Software (formerly Opscode, Inc.) and its various contributors. The `depgraph` and `digraph` packages are vendored from Hashicorp's terraform package, and is under the Mozilla Public License version 2.0. The MPL is included in those directories and applies only to those files. Thanks go out chefcrypto-0.1.0/chefcrypto.go000066400000000000000000000132741301610623200163540ustar00rootroot00000000000000/* Various cryptographic functions, as needed. */ /* * Copyright (c) 2013-2016, Jeremy Bingham () * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ // Package chefcrypto bundles up crytographic routines for goairdi (and anything // else that might need it). package chefcrypto import ( "crypto" "crypto/rand" "crypto/rsa" "crypto/sha1" "crypto/sha512" "crypto/x509" "encoding/base64" "encoding/hex" "encoding/pem" "fmt" "math/big" "strings" ) // GenerateRSAKeys creates a pair of private and public keys for a client. func GenerateRSAKeys() (string, string, error) { /* Shamelessly borrowed and adapted from some golang-samples */ priv, err := rsa.GenerateKey(rand.Reader, 2048) if err != nil { return "", "", err } if err := priv.Validate(); err != nil { errStr := fmt.Errorf("RSA key validation failed: %s", err) return "", "", errStr } privDer := x509.MarshalPKCS1PrivateKey(priv) /* For some reason chef doesn't label the keys RSA PRIVATE/PUBLIC KEY */ privBlk := pem.Block{ Type: "RSA PRIVATE KEY", Headers: nil, Bytes: privDer, } privPem := string(pem.EncodeToMemory(&privBlk)) pub := priv.PublicKey pubDer, err := x509.MarshalPKIXPublicKey(&pub) if err != nil { errStr := fmt.Errorf("Failed to get der format for public key: %s", err) return "", "", errStr } pubBlk := pem.Block{ Type: "PUBLIC KEY", Headers: nil, Bytes: pubDer, } pubPem := string(pem.EncodeToMemory(&pubBlk)) return privPem, pubPem, nil } // ValidatePublicKey checks that the provided public key is valid. func ValidatePublicKey(publicKey interface{}) (bool, error) { switch publicKey := publicKey.(type) { case string: // at the moment we don't care about the pub interface decPubKey, z := pem.Decode([]byte(publicKey)) if decPubKey == nil { err := fmt.Errorf("Public key does not validate: %s", z) return false, err } // Add the header to PKCS#1 public keys if strings.HasPrefix(publicKey, "-----BEGIN RSA PUBLIC KEY-----") && len(decPubKey.Bytes) == 270 { pkcs8head := []byte{0x30, 0x82, 0x01, 0x22, 0x30, 0x0d, 0x06, 0x09, 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x01, 0x01, 0x01, 0x05, 0x00, 0x03, 0x82, 0x01, 0x0f, 0x00} pkcs8head = append(pkcs8head, decPubKey.Bytes...) decPubKey.Bytes = pkcs8head } if _, err := x509.ParsePKIXPublicKey(decPubKey.Bytes); err != nil { nerr := fmt.Errorf("Public key did not validate: %s", err.Error()) return false, nerr } return true, nil default: err := fmt.Errorf("Public key does not validate") return false, err } } // HeaderDecrypt decrypts the encrypted header with the client or user's public // key for validating requests. This function is informed by chef-golang's // privateDecrypt function. func HeaderDecrypt(pkPem string, data string) ([]byte, error) { block, _ := pem.Decode([]byte(pkPem)) if block == nil { return nil, fmt.Errorf("Invalid block size for '%s'", pkPem) } pubKey, err := x509.ParsePKIXPublicKey(block.Bytes) if err != nil { return nil, err } decData, perr := base64.StdEncoding.DecodeString(data) if perr != nil { return nil, perr } dec, derr := decrypt(pubKey.(*rsa.PublicKey), decData) if derr != nil { return nil, derr } /* skip past the 0xff padding added to the header before encrypting. */ skip := 0 for i := 2; i < len(dec); i++ { if i+1 >= len(dec) { break } if dec[i] == 0xff && dec[i+1] == 0 { skip = i + 2 break } } return dec[skip:], nil } // Auth12HeaderVerify verifies the newer version 1.2 Chef authentication protocol // headers. func Auth12HeaderVerify(pkPem string, hashed, sig []byte) error { block, _ := pem.Decode([]byte(pkPem)) if block == nil { return fmt.Errorf("Invalid block size for '%s'", pkPem) } pubKey, err := x509.ParsePKIXPublicKey(block.Bytes) if err != nil { return err } return rsa.VerifyPKCS1v15(pubKey.(*rsa.PublicKey), crypto.SHA1, hashed, sig) } // SignTextBlock signs a block of text using the provided private RSA key. Used // by shovey to sign requests that the client can verify. func SignTextBlock(textBlock string, privKey *rsa.PrivateKey) (string, error) { if textBlock == "" { err := fmt.Errorf("no text to sign provided") return "", err } tbSha := sha1.Sum([]byte(textBlock)) signed, err := rsa.SignPKCS1v15(rand.Reader, privKey, crypto.SHA1, tbSha[:]) return base64.StdEncoding.EncodeToString(signed), err } // There has been discussion of renaming this and submitting it along with its // counterpart in chef-golang to crypto/rsa. func decrypt(pubKey *rsa.PublicKey, data []byte) ([]byte, error) { c := new(big.Int) m := new(big.Int) m.SetBytes(data) e := big.NewInt(int64(pubKey.E)) c.Exp(m, e, pubKey.N) out := c.Bytes() return out, nil } // HashPasswd SHA512 hashes a password string with the provided salt. func HashPasswd(passwd string, salt []byte) (string, error) { if passwd == "" { err := fmt.Errorf("Password is empty") return "", err } hashPwByte := sha512.Sum512(append(salt, []byte(passwd)...)) hashPw := hex.EncodeToString(hashPwByte[:]) return hashPw, nil } // GenerateSalt makes a new salt for hashing a password. func GenerateSalt() ([]byte, error) { numbytes := 64 b := make([]byte, numbytes) _, err := rand.Read(b) if err != nil { return nil, err } return b, nil } chefcrypto-0.1.0/chefcrypto_test.go000066400000000000000000000133001301610623200174010ustar00rootroot00000000000000/* * Copyright (c) 2013-2016, Jeremy Bingham () * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ // Package chefcrypto bundles up crytographic routines for goairdi. package chefcrypto import ( "strings" "testing" ) /* Incidentally, I have a feeling this test file's going to get a lot more * action very soon. */ func TestGenerateRSAKeys(t *testing.T) { priv, pub, err := GenerateRSAKeys() if err != nil { t.Errorf("Generating RSA keys generated an error: %s", err) } if !strings.HasPrefix(priv, "-----BEGIN RSA PRIVATE KEY-----") { t.Errorf("Improper private key: %s", priv) } if !strings.HasPrefix(pub, "-----BEGIN PUBLIC KEY-----") { t.Errorf("Improper public key: %s", pub) } } var goodPubKey = "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXXeTEd6gq6sziqYt76U\n3W0zT9oBQTdiImrLypUuMTZ6+DBwT4iVLvL/JRydI3tyNRV/S/JZxjPDhaKgnOjZ\ndSVpE9U41DewgB2zzH5mox1LRWTeu8KU3qkuyOTk3qaF3NUejCkkHxKlolLyabRt\npLwaSfQUE+Mr4GoY+gTyo9GSzOKdVoc/PlR+99BDD8AKMm4L705DE1SBHxCRqxfy\n3VLgXfX4GjQKZjH1bDoWSbfaAVOllfB5EDib2IQE58PJwW2milG+XUBbxO0Ee95A\niLx+abdhmVyx6Mysc1Fk9u6VT18pysIi0VwV7SEYu691HfuRT0yEpMZMPb1hFH97\nyQIDAQAB\n-----END PUBLIC KEY-----" var badPubKey = "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXXeTEd6gq6sziqYt76U\n3W0zT9oBQTdiImrLypUuMTZ6+DBwT4iVLvL/JRydI3tyNRV/S/JZxjPDhaKgnOjZ\ndSVpE9U4ewrWsgB2zzH5mox1LRWTeu8KU3qkuyOTk3qaF3NUejCkkHxKlolLyabRt\npwoahbroE+Mr4GoY+gTyo9GSzOKdVoc/PlR+99BDD8AKMm4L705DE1SBHxCRqxfy\n3VLgXfX4GjQKZjH1bDoWSbfaAVOllfB5EDib2IQE58PJwW2milG+XUBbxO0Ee95A\niLx+abdhmVyx6Mysc1Fk9u6VT18pysIi0VwV7SEYu666HfuRT0yEpMZMPb1hFH97\nyQIDAQAB\n-----END PUBLIC KEY-----" var oldPubKey = `-----BEGIN RSA PUBLIC KEY----- MIIBCgKCAQEA61BjmfXGEvWmegnBGSuS+rU9soUg2FnODva32D1AqhwdziwHINFa D1MVlcrYG6XRKfkcxnaXGfFDWHLEvNBSEVCgJjtHAGZIm5GL/KA86KDp/CwDFMSw luowcXwDwoyinmeOY9eKyh6aY72xJh7noLBBq1N0bWi1e2i+83txOCg4yV2oVXhB o8pYEJ8LT3el6Smxol3C1oFMVdwPgc0vTl25XucMcG/ALE/KNY6pqC2AQ6R2ERlV gPiUWOPatVkt7+Bs3h5Ramxh7XjBOXeulmCpGSynXNcpZ/06+vofGi/2MlpQZNhH Ao8eayMp6FcvNucIpUndo1X8dKMv3Y26ZQIDAQAB -----END RSA PUBLIC KEY-----` var oldLabelPubKey = "-----BEGIN RSA PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXXeTEd6gq6sziqYt76U\n3W0zT9oBQTdiImrLypUuMTZ6+DBwT4iVLvL/JRydI3tyNRV/S/JZxjPDhaKgnOjZ\ndSVpE9U41DewgB2zzH5mox1LRWTeu8KU3qkuyOTk3qaF3NUejCkkHxKlolLyabRt\npLwaSfQUE+Mr4GoY+gTyo9GSzOKdVoc/PlR+99BDD8AKMm4L705DE1SBHxCRqxfy\n3VLgXfX4GjQKZjH1bDoWSbfaAVOllfB5EDib2IQE58PJwW2milG+XUBbxO0Ee95A\niLx+abdhmVyx6Mysc1Fk9u6VT18pysIi0VwV7SEYu691HfuRT0yEpMZMPb1hFH97\nyQIDAQAB\n-----END PUBLIC KEY-----" var onePubKey = "1" var realBadPubKey = "-----BEGIN PUBLIC KEY-----\nI'm bad to the bone\n-----END PUBLIC KEY-----" var arrPubKey = []string{} var mapPubKey = make(map[string]interface{}) func TestGoodPubKey(t *testing.T) { ok, err := ValidatePublicKey(goodPubKey) if !ok { t.Errorf("Valid public key was invalid: %s", err.Error()) } } func TestWellFormedBogusPubKey(t *testing.T) { ok, _ := ValidatePublicKey(badPubKey) if ok { t.Errorf("Well-formed but bogus public key validated when it should not have.") } } func TestNumberPubKey(t *testing.T) { ok, _ := ValidatePublicKey(onePubKey) if ok { t.Errorf("Well-formed but bogus public key validated when it should not have.") } } func TestRealBadPubKey(t *testing.T) { ok, _ := ValidatePublicKey(realBadPubKey) if ok { t.Errorf("Well-formed but bogus public key validated when it should not have.") } } func TestOldPubKey(t *testing.T) { ok, err := ValidatePublicKey(oldPubKey) if !ok { t.Errorf("Old-timey public key did not validate when it should have: %s", err.Error()) } } func TestOldLabeledPubKey(t *testing.T) { ok, err := ValidatePublicKey(oldLabelPubKey) if !ok { t.Errorf("Public key (PKCS#8 but labeled with BEGIN RSA PUBLIC KEY) did not validate when it should have: %s", err.Error()) } } func TestArrayPubKey(t *testing.T) { ok, _ := ValidatePublicKey(arrPubKey) if ok { t.Errorf("Well-formed but bogus public key validated when it should not have.") } } func TestMapPubKey(t *testing.T) { ok, _ := ValidatePublicKey(mapPubKey) if ok { t.Errorf("Well-formed but bogus public key validated when it should not have.") } } func TestHashPasswd(t *testing.T) { passwd := "abc123" salt := []byte{1, 2, 4, 5, 3, 5, 2, 1, 10} nosalt := []byte{} expected := "c70b5dd9ebfb6f51d09d4132b7170c9d20750a7852f00680f65658f0310e810056e6763c34c9a00b0e940076f54495c169fc2302cceb312039271c43469507dc" saltedExpected := "f4d643377e0809b0a0620bdcb01d7c76b246ee6c19f5d7539ecdbc7d4360b588f0e0254954ece97e9a38a6df6ea72dea4d82166c31ac02415f4e716dfd1b49d0" hashedPw, err := HashPasswd(passwd, nosalt) if err != nil { t.Errorf("Error with unsalted hashed password! %s", err.Error()) } if hashedPw == passwd { t.Errorf("password and unsalted hashed password should not be equal") } if hashedPw != expected { t.Errorf("unsalted hashed password was not equal to the expected hash") } hashedPw, err = HashPasswd(passwd, salt) if err != nil { t.Errorf("Error with hashed password! %s", err.Error()) } if hashedPw == passwd { t.Errorf("password and hashed password should not be equal") } if hashedPw != saltedExpected { t.Errorf("hashed password was not equal to the expected hash") } }