8 unstable releases (3 breaking)
0.5.1 | Oct 25, 2024 |
---|---|
0.5.0 | Sep 18, 2024 |
0.4.0 | Mar 25, 2024 |
0.3.0 | Feb 27, 2024 |
0.2.3 | Mar 28, 2022 |
#21 in Authentication
90,179 downloads per month
Used in 2 crates
105KB
2K
SLoC
ssh-agent-lib
A collection of types for writing custom SSH agents and connecting to existing ones.
The types in this crate closely follow the SSH Agent Protocol Internet Draft specification and can be used to utilize remote keys not supported by the default OpenSSH agent.
Examples
The following examples show a sample agent and a sample client.
For more elaborate example see the examples
directory or crates using ssh-agent-lib
.
Agent
The following example starts listening on a socket and processing requests.
On Unix it uses ssh-agent.sock
Unix domain socket while on Windows it uses a named pipe \\.\pipe\agent
.
#[cfg(not(windows))]
use tokio::net::UnixListener as Listener;
#[cfg(windows)]
use ssh_agent_lib::agent::NamedPipeListener as Listener;
use ssh_agent_lib::error::AgentError;
use ssh_agent_lib::agent::{Session, listen};
use ssh_agent_lib::proto::{Identity, SignRequest};
use ssh_key::{Algorithm, Signature};
#[derive(Default, Clone)]
struct MyAgent;
#[ssh_agent_lib::async_trait]
impl Session for MyAgent {
async fn request_identities(&mut self) -> Result<Vec<Identity>, AgentError> {
Ok(vec![ /* public keys that this agent knows of */ ])
}
async fn sign(&mut self, request: SignRequest) -> Result<Signature, AgentError> {
// get the signature by signing `request.data`
let signature = vec![];
Ok(Signature::new(
Algorithm::new("algorithm").map_err(AgentError::other)?,
signature,
).map_err(AgentError::other)?)
}
}
#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
#[cfg(not(windows))]
let socket = "ssh-agent.sock";
#[cfg(windows)]
let socket = r"\\.\pipe\agent";
let _ = std::fs::remove_file(socket); // remove the socket if exists
listen(Listener::bind(socket)?, MyAgent::default()).await?;
Ok(())
}
Now, point your OpenSSH client to this socket using SSH_AUTH_SOCK
environment variable and it will transparently use the agent:
SSH_AUTH_SOCK=ssh-agent.sock ssh user@example.com
On Windows the path of the pipe has to be used:
SSH_AUTH_SOCK=\\.\pipe\agent ssh user@example.com
Client
The following example connects to the agent pointed to by the SSH_AUTH_SOCK
environment variable and prints identities (public keys) that the agent knows of:
use service_binding::Binding;
use ssh_agent_lib::client::connect;
#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
#[cfg(unix)]
let mut client =
connect(Binding::FilePath(std::env::var("SSH_AUTH_SOCK")?.into()).try_into()?)?;
#[cfg(windows)]
let mut client =
connect(Binding::NamedPipe(std::env::var("SSH_AUTH_SOCK")?.into()).try_into()?)?;
eprintln!(
"Identities that this agent knows of: {:#?}",
client.request_identities().await?
);
Ok(())
}
License
This project is licensed under either of:
at your option.
Contribution
Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in this crate by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.
Note
This library has been forked from sekey/ssh-agent.rs as the upstream seems not be maintained (at least as of 2022). The library was previously licensed under MIT, however in #36, we relicensed it to MIT/Apache 2.0.
Contributors gave their approval for relicensing #36 screenshot
What remains from the original library is considered minor and does not count for copyright assignment.
Dependencies
~7–16MB
~224K SLoC