Greenbone Vulnerability Management Libraries 22.8.0
sshutils.h File Reference

SSH related API. More...

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Functions

char * gvm_ssh_pkcs8_decrypt (const char *, const char *)
 Decrypts a base64 encrypted ssh private key.
 
char * gvm_ssh_public_from_private (const char *, const char *)
 Exports a base64 encoded public key from a private key and its passphrase.
 

Detailed Description

SSH related API.

Definition in file sshutils.h.

Function Documentation

◆ gvm_ssh_pkcs8_decrypt()

char * gvm_ssh_pkcs8_decrypt ( const char *  pkcs8_key,
const char *  passphrase 
)

Decrypts a base64 encrypted ssh private key.

Parameters
[in]pkcs8_keyPKCS#8 encrypted private key.
[in]passphrasePassphrase for the private key.
Returns
Decrypted private key if success, NULL otherwise.

Definition at line 34 of file sshutils.c.

35{
36 gnutls_datum_t data;
37 gnutls_x509_privkey_t key;
38 char buffer[16 * 2048];
39 int rc;
40 size_t size = sizeof (buffer);
41
42 rc = gnutls_x509_privkey_init (&key);
43 if (rc)
44 return NULL;
45 data.size = strlen (pkcs8_key);
46 data.data = (void *) g_strdup (pkcs8_key);
47 rc = gnutls_x509_privkey_import_pkcs8 (key, &data, GNUTLS_X509_FMT_PEM,
48 passphrase ? passphrase : "", 0);
49 if (rc)
50 {
51 gnutls_x509_privkey_deinit (key);
52 return NULL;
53 }
54 g_free (data.data);
55 rc = gnutls_x509_privkey_export (key, GNUTLS_X509_FMT_PEM, buffer, &size);
56 gnutls_x509_privkey_deinit (key);
57 if (rc)
58 return NULL;
59 return g_strdup (buffer);
60}

Referenced by gvm_ssh_public_from_private().

Here is the caller graph for this function:

◆ gvm_ssh_public_from_private()

char * gvm_ssh_public_from_private ( const char *  private_key,
const char *  passphrase 
)

Exports a base64 encoded public key from a private key and its passphrase.

Parameters
[in]private_keyPrivate key to export.
[in]passphrasePassphrase for the private key.
Returns
Allocated base64 encoded public key if success, NULL otherwise.

Definition at line 72 of file sshutils.c.

73{
74 ssh_key priv;
75 char *pub_key, *decrypted_priv, *pub_str = NULL;
76 const char *type;
77 int ret;
78
79 decrypted_priv = gvm_ssh_pkcs8_decrypt (private_key, passphrase);
80 ret = ssh_pki_import_privkey_base64 (decrypted_priv ? decrypted_priv
81 : private_key,
82 passphrase, NULL, NULL, &priv);
83 g_free (decrypted_priv);
84 if (ret)
85 return NULL;
86 ret = ssh_pki_export_pubkey_base64 (priv, &pub_key);
87 type = ssh_key_type_to_char (ssh_key_type (priv));
88#if LIBSSH_VERSION_INT >= SSH_VERSION_INT(0, 6, 4)
89 if (!strcmp (type, "ssh-ecdsa"))
90 type = ssh_pki_key_ecdsa_name (priv);
91#endif
92 ssh_key_free (priv);
93 if (ret)
94 return NULL;
95 pub_str = g_strdup_printf ("%s %s", type, pub_key);
96 g_free (pub_key);
97 return pub_str;
98}
char * gvm_ssh_pkcs8_decrypt(const char *pkcs8_key, const char *passphrase)
Decrypts a base64 encrypted ssh private key.
Definition: sshutils.c:34

References gvm_ssh_pkcs8_decrypt().

Here is the call graph for this function: