1*1cc99327Saidaleuc /*
2*1cc99327Saidaleuc * This work is licensed under the terms of the GNU GPL, version 2 or later.
3*1cc99327Saidaleuc * See the COPYING file in the top-level directory.
4*1cc99327Saidaleuc */
5*1cc99327Saidaleuc
6*1cc99327Saidaleuc #include "qemu/osdep.h"
7*1cc99327Saidaleuc #include "qapi/error.h"
8*1cc99327Saidaleuc #include "commands-common-ssh.h"
9*1cc99327Saidaleuc
read_authkeys(const char * path,Error ** errp)10*1cc99327Saidaleuc GStrv read_authkeys(const char *path, Error **errp)
11*1cc99327Saidaleuc {
12*1cc99327Saidaleuc g_autoptr(GError) err = NULL;
13*1cc99327Saidaleuc g_autofree char *contents = NULL;
14*1cc99327Saidaleuc
15*1cc99327Saidaleuc if (!g_file_get_contents(path, &contents, NULL, &err)) {
16*1cc99327Saidaleuc error_setg(errp, "failed to read '%s': %s", path, err->message);
17*1cc99327Saidaleuc return NULL;
18*1cc99327Saidaleuc }
19*1cc99327Saidaleuc
20*1cc99327Saidaleuc return g_strsplit(contents, "\n", -1);
21*1cc99327Saidaleuc }
22*1cc99327Saidaleuc
check_openssh_pub_keys(strList * keys,size_t * nkeys,Error ** errp)23*1cc99327Saidaleuc bool check_openssh_pub_keys(strList *keys, size_t *nkeys, Error **errp)
24*1cc99327Saidaleuc {
25*1cc99327Saidaleuc size_t n = 0;
26*1cc99327Saidaleuc strList *k;
27*1cc99327Saidaleuc
28*1cc99327Saidaleuc for (k = keys; k != NULL; k = k->next) {
29*1cc99327Saidaleuc if (!check_openssh_pub_key(k->value, errp)) {
30*1cc99327Saidaleuc return false;
31*1cc99327Saidaleuc }
32*1cc99327Saidaleuc n++;
33*1cc99327Saidaleuc }
34*1cc99327Saidaleuc
35*1cc99327Saidaleuc if (nkeys) {
36*1cc99327Saidaleuc *nkeys = n;
37*1cc99327Saidaleuc }
38*1cc99327Saidaleuc return true;
39*1cc99327Saidaleuc }
40*1cc99327Saidaleuc
check_openssh_pub_key(const char * key,Error ** errp)41*1cc99327Saidaleuc bool check_openssh_pub_key(const char *key, Error **errp)
42*1cc99327Saidaleuc {
43*1cc99327Saidaleuc /* simple sanity-check, we may want more? */
44*1cc99327Saidaleuc if (!key || key[0] == '#' || strchr(key, '\n')) {
45*1cc99327Saidaleuc error_setg(errp, "invalid OpenSSH public key: '%s'", key);
46*1cc99327Saidaleuc return false;
47*1cc99327Saidaleuc }
48*1cc99327Saidaleuc
49*1cc99327Saidaleuc return true;
50*1cc99327Saidaleuc }
51