1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
|
#!/usr/local/bin/perl
use strict;
use warnings;
use Net::SSH::AuthorizedKeysFile;
use Log::Log4perl qw(:easy);
use Getopt::Std;
getopts("sv", \my %opts);
my $level = $INFO;
if($opts{v}) {
$level = $DEBUG;
}
Log::Log4perl->easy_init({ level => $level, layout => "%F{1}-%L: %m%n" });
my($file) = @ARGV;
die "usage: $0 file" unless defined $file;
my $ak = Net::SSH::AuthorizedKeysFile->new(
file => $file,
strict => ($opts{s} ? 1 : 0),
);
my $rc = $ak->read();
if($rc) {
print "$file ok\n";
} else {
print "$file *not* ok\n";
}
my @keys = $ak->keys();
print "Found ", scalar @keys, " keys\n";
for my $key (@keys) {
print " * ", $key->type(), "\n";
}
__END__
=head1 NAME
authorized-keys-test - Validate a authorized_keys file
=head1 SYNOPSIS
authorized-keys-test ~/.ssh/authorized_keys
=head1 DESCRIPTION
authorized-keys-test reads in the keys of an ssh client authorized_keys
file and reports any errors.
=head1 OPTIONS
=over 4
=item -v
Verbose mode. Turns on DEBUG instead of INFO.
=item -s
Strict mode. If on, the test insists on properly formatted authorized_keys
files and isn't nearly as lenient as the sshd daemon's parser.
=back
=head1 EXAMPLES
$ authorized-keys-test ~/.ssh/authorized_keys
/home/joe/.ssh/authorized_keys ok
Found 4 keys
* ssh-2
* ssh-2
* ssh-2
* ssh-2
# strict mode:
$ authorized-keys-test -s ~/.ssh/authorized_keys
AuthorizedKeysFile.pm-69: Key [eme alsdkfj] failed sanity check -- ignored
AuthorizedKeysFile.pm-71: Strict mode on: Abort
/home/joe/.ssh/authorized_keys *not* ok
Found 4 keys
* ssh-2
* ssh-2
* ssh-2
* ssh-2
=head1 LEGALESE
Copyright 2009 by Mike Schilli, all rights reserved.
This program is free software, you can redistribute it and/or
modify it under the same terms as Perl itself.
=head1 AUTHOR
2009, Mike Schilli <cpan@perlmeister.com>
|
