summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--src/common3
-rw-r--r--src/keytrans/openpgp2ssh.c2
-rwxr-xr-xsrc/monkeysphere18
3 files changed, 20 insertions, 3 deletions
diff --git a/src/common b/src/common
index 7df6908..c90fdd0 100644
--- a/src/common
+++ b/src/common
@@ -103,8 +103,9 @@ translate_ssh_variables() {
# get the user's home directory
userHome=$(getent passwd "$uname" | cut -d: -f6)
- # translate ssh-style path variables
+ # translate '%u' to user name
path=${path/\%u/"$uname"}
+ # translate '%h' to user home directory
path=${path/\%h/"$userHome"}
echo "$path"
diff --git a/src/keytrans/openpgp2ssh.c b/src/keytrans/openpgp2ssh.c
index 511af71..92bdc19 100644
--- a/src/keytrans/openpgp2ssh.c
+++ b/src/keytrans/openpgp2ssh.c
@@ -427,7 +427,7 @@ int main(int argc, char* argv[]) {
} else {
/* we have no idea what kind of key this is at all anyway! */
- err(0,"Input does contain any form of OpenPGP key I recognize.\n");
+ err(0,"Input does not contain any form of OpenPGP key I recognize.\n");
return 1;
}
}
diff --git a/src/monkeysphere b/src/monkeysphere
index 58f0fdc..e111d8e 100755
--- a/src/monkeysphere
+++ b/src/monkeysphere
@@ -54,11 +54,27 @@ gen_subkey(){
gpgOut=$(gpg --quiet --fixed-list-mode --list-keys --with-colons \
"$keyID" 2> /dev/null)
- # return 1 if there only "tru" lines are output from gpg
+ # fail if there only "tru" lines are output from gpg, which
+ # indicates the key was not found.
if [ -z "$(echo "$gpgOut" | grep -v '^tru:')" ] ; then
failure "Key ID '$keyID' not found."
fi
+ # fail if multiple pub lines are returned, which means the id given
+ # is not unique
+ if [ $(echo "$gpgOut" | grep '^pub:' | wc -l) -gt '1' ] ; then
+ failure "Key ID '$keyID' is not unique."
+ fi
+
+ # prompt if an authentication subkey already exists
+ if echo "$gpgOut" | egrep "^(pub|sub):" | cut -d: -f 12 | grep -q a ; then
+ echo "An authentication subkey already exists for key '$keyID'."
+ read -p "Are you sure you would like to generate another one? [y|N]: " OK; OK=${OK:N}
+ if [ "${OK/y/Y}" != 'Y' ] ; then
+ failure "aborting."
+ fi
+ fi
+
# set subkey defaults
SUBKEY_TYPE=${SUBKEY_TYPE:-"RSA"}
#SUBKEY_LENGTH=${SUBKEY_LENGTH:-"2048"}