112 lines
2.8 KiB
Go
112 lines
2.8 KiB
Go
package sshmanager
|
|
|
|
import (
|
|
"bytes"
|
|
"context"
|
|
"crypto/sha256"
|
|
"encoding/base64"
|
|
"fmt"
|
|
"net"
|
|
"os"
|
|
"path/filepath"
|
|
"strings"
|
|
"time"
|
|
|
|
"golang.org/x/crypto/ssh"
|
|
)
|
|
|
|
type ConnResult struct {
|
|
Success bool
|
|
Output string
|
|
Error string
|
|
Fingerprint string
|
|
}
|
|
|
|
func TestSSHConnection(ctx context.Context, host string, port int, user, privKeyPath, knownHostsPath string, strictHostKeyChecking bool) (*ConnResult, error) {
|
|
addr := fmt.Sprintf("%s:%d", host, port)
|
|
|
|
auths := []ssh.AuthMethod{}
|
|
if privKeyPath != "" {
|
|
key, err := os.ReadFile(privKeyPath)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("reading private key: %w", err)
|
|
}
|
|
signer, err := ssh.ParsePrivateKey(key)
|
|
if err != nil {
|
|
return nil, fmt.Errorf("parsing private key: %w", err)
|
|
}
|
|
auths = append(auths, ssh.PublicKeys(signer))
|
|
}
|
|
|
|
var capturedFingerprint string
|
|
hostKeyCallback := func(hostname string, remote net.Addr, key ssh.PublicKey) error {
|
|
h := sha256.Sum256(key.Marshal())
|
|
capturedFingerprint = "SHA256:" + base64.RawStdEncoding.EncodeToString(h[:])
|
|
if strictHostKeyChecking && knownHostsPath != "" {
|
|
kh, err := GetKnownHost(filepath.Dir(knownHostsPath), host, port)
|
|
if err != nil {
|
|
return fmt.Errorf("checking known_hosts: %w", err)
|
|
}
|
|
if kh == nil {
|
|
return fmt.Errorf("host key not found in known_hosts: %s", hostname)
|
|
}
|
|
wantFP := kh.Fingerprint
|
|
if capturedFingerprint != wantFP {
|
|
return fmt.Errorf("host key mismatch: got %s, want %s", capturedFingerprint, wantFP)
|
|
}
|
|
}
|
|
return nil
|
|
}
|
|
|
|
cfg := &ssh.ClientConfig{
|
|
User: user,
|
|
Auth: auths,
|
|
HostKeyCallback: hostKeyCallback,
|
|
Timeout: 10 * time.Second,
|
|
}
|
|
|
|
ctx, cancel := context.WithTimeout(ctx, 30*time.Second)
|
|
defer cancel()
|
|
|
|
conn, err := ssh.Dial("tcp", addr, cfg)
|
|
if err != nil {
|
|
if strings.Contains(err.Error(), "known_hosts") || strings.Contains(err.Error(), "host key") {
|
|
return &ConnResult{
|
|
Success: false,
|
|
Error: fmt.Sprintf("host key verification failed: %v", err),
|
|
Fingerprint: capturedFingerprint,
|
|
}, nil
|
|
}
|
|
return &ConnResult{
|
|
Success: false,
|
|
Error: fmt.Sprintf("connection failed: %v", err),
|
|
Fingerprint: capturedFingerprint,
|
|
}, nil
|
|
}
|
|
defer conn.Close()
|
|
|
|
session, err := conn.NewSession()
|
|
if err != nil {
|
|
return &ConnResult{Success: false, Error: fmt.Sprintf("session: %v", err), Fingerprint: capturedFingerprint}, nil
|
|
}
|
|
defer session.Close()
|
|
|
|
var stdout, stderr bytes.Buffer
|
|
session.Stdout = &stdout
|
|
session.Stderr = &stderr
|
|
|
|
if err := session.Run("echo ok && uname -a"); err != nil {
|
|
return &ConnResult{
|
|
Success: false,
|
|
Error: fmt.Sprintf("exec: %v, stderr: %s", err, stderr.String()),
|
|
Fingerprint: capturedFingerprint,
|
|
}, nil
|
|
}
|
|
|
|
return &ConnResult{
|
|
Success: true,
|
|
Output: stdout.String(),
|
|
Fingerprint: capturedFingerprint,
|
|
}, nil
|
|
}
|