1 files changed, 17 insertions, 7 deletions

diff --git a/lib/Kiki.hs b/lib/Kiki.hs
index 324efc4..1cc387b 100644
--- a/lib/Kiki.hs
+++ b/lib/Kiki.hs
@@ -13,6 +13,7 @@ import           Codec.Encryption.OpenPGP.ASCIIArmor.Types
 import           Control.Applicative
 import           Control.Exception
 import           Control.Monad
+import qualified Crypto.Hash as C
 import           Data.ASN1.BinaryEncoding
 import           Data.ASN1.Encoding
 import           Data.ASN1.Types
@@ -37,6 +38,7 @@ import           System.Posix.Types         (FileMode)
 import           System.Posix.IO            as Posix (createPipe)
 import           System.Posix.User
 #if defined(VERSION_memory)
+import           Data.ByteArray (convert)
 import           Data.ByteArray.Encoding
 import qualified Data.ByteString.Char8      as S8
 #elif defined(VERSION_dataenc)
@@ -582,14 +584,15 @@ writePublicKeyFiles rt fw grip myId = do
     installIpsecConf fw myId cs
     fileWriterCommit fw
 
-sshKeyToHostname :: Packet -> IO Char8.ByteString
+
+sshKeyToHostname :: Applicative m => Packet -> m Char8.ByteString
 sshKeyToHostname sshkey = do
-  (_, (sout, _serr)) <- runExternal shellScript (Just $ sshblobFromPacket sshkey)
-  return $ Char8.fromChunks [sout]
-  where
-    shellScript =
-      "f=$(mktemp) && cat > \"$f\" && ssh-keygen -r _ -f \"$f\"  |" ++
-      " (read _ _ _ _ _ hash _ && echo -n $hash.ssh.cryptonomic.net); r=$?; rm -f \"$f\"; exit $r"
+  case rsaKeyFromPacket sshkey of
+    Just (RSAKey (MPI n) (MPI e)) -> do
+        let blob = SSH.sshrsa e n
+            sha1 = C.hashlazy blob :: C.Digest C.SHA1
+        pure $ Char8.fromStrict (convertToBase Base16 sha1) <> ".ssh.cryptonomic.net"
+    Nothing   -> pure ""
 
 peerConnectionName :: Peer -> Char8.ByteString
 peerConnectionName = coerce . peerAddress
@@ -653,6 +656,13 @@ show_pem' keyspec wkgrip db keyfmt = do
 warn :: String -> IO ()
 warn str = hPutStrLn stderr str
 
+show_sshfp :: String -> String -> KeyDB -> IO ()
+show_sshfp keyspec wkgrip db = do
+    let s = parseSpec wkgrip keyspec
+    case selectPublicKey s db of
+        Nothing -> hPutStrLn stderr $ keyspec ++ ": not found"
+        Just k  -> Char8.putStrLn =<< sshKeyToHostname k
+
 show_ssh :: String -> String -> KeyDB -> IO ()
 show_ssh keyspec wkgrip db = either warn putStrLn $ show_ssh' keyspec wkgrip db