sshlib

package module
v0.1.20 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Nov 18, 2024 License: MIT Imports: 44 Imported by: 11

README

go-sshlib

GoDoc

About

A library to handle ssh easily with Golang.It can do multiple proxy, x11 forwarding, etc. Supported on Linux, macOS and Windows.

If use pkcs11 authentication, cgo must be enabled.

Usage

See GoDoc reference.

Download

GO111MODULE=on go get github.com/blacknon/go-sshlib

Example

// Copyright (c) 2022 Blacknon. All rights reserved.
// Use of this source code is governed by an MIT license
// that can be found in the LICENSE file.

// Shell connection Example file.
// Change the value of the variable and compile to make sure that you can actually connect.
//
// This file uses password authentication. Please replace as appropriate.

package main

import (
    "fmt"
    "os"

    sshlib "github.com/blacknon/go-sshlib"
    "golang.org/x/crypto/ssh"
)

var (
    host     = "target.com"
    port     = "22"
    user     = "user"
    password = "password"

    termlog = "./test_termlog"
)

func main() {
    // Create sshlib.Connect
    con := &sshlib.Connect{
        // If you use x11 forwarding, please set to true.
        ForwardX11: false,

        // If you use ssh-agent forwarding, please set to true.
        // And after, run `con.ConnectSshAgent()`.
        ForwardAgent: false,
    }

    // Create ssh.AuthMethod
    authMethod := sshlib.CreateAuthMethodPassword(password)

    // If you use ssh-agent forwarding, uncomment it.
    // con.ConnectSshAgent()

    // Connect ssh server
    err := con.CreateClient(host, port, user, []ssh.AuthMethod{authMethod})
    if err != nil {
        fmt.Println(err)
        os.Exit(1)
    }

    // Set terminal log
    con.SetLog(termlog, false)

    // Create Session
    session, err := con.CreateSession()
    if err != nil {
        fmt.Println(err)
        os.Exit(1)
    }

    // Start ssh shell
    con.Shell(session)
}

Documentation

Overview

Package sshlib is a library to easily connect with ssh by go. You can perform multiple proxy, x11 forwarding, PKCS11 authentication, etc...

Example simple ssh shell

It is example code. simple connect ssh shell. You can also do tab completion, send sigint signal(Ctrl+C). 

package main

import (
	"fmt"
	"os"

	sshlib "github.com/blacknon/go-sshlib"
	"golang.org/x/crypto/ssh"
)

var (
	host     = "target.com"
	port     = "22"
	user     = "user"
	password = "password"

	termlog = "./test_termlog"
)

func main() {
	// Create sshlib.Connect
	con := &sshlib.Connect{
		// If you use x11 forwarding, please set to true.
		ForwardX11: false,

		// If you use ssh-agent forwarding, please set to true.
		// And after, run `con.ConnectSshAgent()`.
		ForwardAgent: false,
	}

	// Create ssh.AuthMethod
	authMethod := sshlib.CreateAuthMethodPassword(password)

	// If you use ssh-agent forwarding, uncomment it.
	// con.ConnectSshAgent()

	// Connect ssh server
	err := con.CreateClient(host, port, user, []ssh.AuthMethod{authMethod})
	if err != nil {
		fmt.Println(err)
		os.Exit(1)
	}

	// Set terminal log
	con.SetLog(termlog, false)

	// Start ssh shell
	con.Shell()
}

Example simple ssh proxy shell

Multple proxy by ssh connection is also available. Please refer to the sample code for usage with http and socks5 proxy. 

package main

import (
	"fmt"
	"os"

	sshlib "github.com/blacknon/go-sshlib"
	"golang.org/x/crypto/ssh"
)

var (
	// Proxy ssh server
	host1     = "proxy.com"
	port1     = "22"
	user1     = "user"
	password1 = "password"

	// Target ssh server
	host2     = "target.com"
	port2     = "22"
	user2     = "user"
	password2 = "password"

	termlog = "./test_termlog"
)

func main() {
	// ==========
	// proxy connect
	// ==========

	// Create proxy sshlib.Connect
	proxyCon := &sshlib.Connect{}

	// Create proxy ssh.AuthMethod
	proxyAuthMethod := sshlib.CreateAuthMethodPassword(password1)

	// Connect proxy server
	err := proxyCon.CreateClient(host1, port1, user1, []ssh.AuthMethod{proxyAuthMethod})
	if err != nil {
		fmt.Println(err)
		os.Exit(1)
	}

	// ==========
	// target connect
	// ==========

	// Create target sshlib.Connect
	targetCon := &sshlib.Connect{
		ProxyDialer: proxyCon.Client,
	}

	// Create target ssh.AuthMethod
	targetAuthMethod := sshlib.CreateAuthMethodPassword(password2)

	// Connect target server
	err = targetCon.CreateClient(host2, port2, user2, []ssh.AuthMethod{targetAuthMethod})
	if err != nil {
		fmt.Println(err)
		os.Exit(1)
	}

	// Set terminal log
	targetCon.SetLog(termlog, false)

	// Start ssh shell
	targetCon.Shell()
}

This library was created for my ssh client (https://github.com/blacknon/lssh)

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

func CreateAuthMethodCertificate 

func CreateAuthMethodCertificate(cert string, keySigner ssh.Signer) (auth ssh.AuthMethod, err error)

CreateAuthMethodCertificate returns ssh.AuthMethod generated from Certificate. To generate an AuthMethod from a certificate, you will need the certificate's private key Signer. Signer should be generated from CreateSignerPublicKey() or CreateSignerPKCS11().

func CreateAuthMethodPKCS11 

func CreateAuthMethodPKCS11(provider, pin string) (auth []ssh.AuthMethod, err error)

CreateAuthMethodPKCS11 return []ssh.AuthMethod generated from pkcs11 token. PIN is required to generate a AuthMethod from a PKCS 11 token. Not available if cgo is disabled.

WORNING: Does not work if multiple tokens are stuck at the same time.

func CreateAuthMethodPassword 

func CreateAuthMethodPassword(password string) (auth ssh.AuthMethod)

CreateAuthMethodPassword returns ssh.AuthMethod generated from password.

func CreateAuthMethodPublicKey 

func CreateAuthMethodPublicKey(key, password string) (auth ssh.AuthMethod, err error)

CreateAuthMethodPublicKey returns ssh.AuthMethod generated from PublicKey. If you have not specified a passphrase, please specify a empty character("").

func CreateSignerAgent added in v0.1.1 

func CreateSignerAgent(sshAgent interface{}) (signers []ssh.Signer, err error)

CreateSignerAgent return []ssh.Signer from ssh-agent. In sshAgent, put agent.Agent or agent.ExtendedAgent.

func CreateSignerCertificate 

func CreateSignerCertificate(cert string, keySigner ssh.Signer) (certSigner ssh.Signer, err error)

CreateSignerCertificate returns ssh.Signer generated from Certificate. To generate an AuthMethod from a certificate, you will need the certificate's private key Signer. Signer should be generated from CreateSignerPublicKey() or CreateSignerPKCS11().

func CreateSignerPKCS11 

func CreateSignerPKCS11(provider, pin string) (signers []ssh.Signer, err error)

CreateSignerPKCS11 returns []ssh.Signer generated from PKCS11 token. PIN is required to generate a Signer from a PKCS 11 token. Not available if cgo is disabled.

WORNING: Does not work if multiple tokens are stuck at the same time.

func CreateSignerPublicKey 

func CreateSignerPublicKey(key, password string) (signer ssh.Signer, err error)

CreateSignerPublicKey returns []ssh.Signer generated from public key. If you have not specified a passphrase, please specify a empty character("").

func CreateSignerPublicKeyData added in v0.1.1 

func CreateSignerPublicKeyData(keyData []byte, password string) (signer ssh.Signer, err error)

CreateSignerPublicKeyData return ssh.Signer from private key and password

func CreateSignerPublicKeyPrompt added in v0.1.1 

func CreateSignerPublicKeyPrompt(key, password string) (signer ssh.Signer, err error)

CreateSignerPublicKeyPrompt rapper CreateSignerPKCS11. Output a passphrase input prompt if the passphrase is not entered or incorrect.

Only Support UNIX-like OS.

func GetStdin added in v0.1.6 

func GetStdin() io.ReadCloser

func NewChangeOSFS added in v0.1.16 

func NewChangeOSFS(fs billy.Filesystem) billy.Filesystem

NewChangeOSFS wraps billy osfs to add the change interface

func NewChangeSFTPFS added in v0.1.16 

func NewChangeSFTPFS(client *sftp.Client, base string) billy.Filesystem

func RequestTty 

func RequestTty(session *ssh.Session) (err error)

RequestTty requests the association of a pty with the session on the remote host. Terminal size is obtained from the currently connected terminal

Types

type AgentInterface 

type AgentInterface interface{}

AgentInterface Interface for storing agent.Agent or agent.ExtendedAgent.

func ConnectSshAgent added in v0.1.1 

func ConnectSshAgent() (ag AgentInterface)

ConnectSshAgent

type C11 added in v0.1.2 

type C11 struct {
	Label string
	PIN   string
	Ctx   *crypto11.Context
}

C11 struct for Crypto11 processing. Not available if cgo is disabled.

func (*C11) CreateCtx added in v0.1.2 

func (c *C11) CreateCtx(ctx *pkcs11.Ctx) (err error)

CreateCtx is create crypto11.Context Not available if cgo is disabled.

func (*C11) GetSigner added in v0.1.2 

func (c *C11) GetSigner() (signer []crypto11.Signer, err error)

GetSigner return []crypto11.Signer. Not available if cgo is disabled.

type COS added in v0.1.16 

type COS struct {
	billy.Filesystem
}

COS or OSFS + Change wraps a billy.FS to not fail the `Change` interface.

func (COS) Chmod added in v0.1.16 

func (fs COS) Chmod(name string, mode os.FileMode) error

Chmod changes mode

func (COS) Chown added in v0.1.16 

func (fs COS) Chown(name string, uid, gid int) error

Chown changes ownership

func (COS) Chtimes added in v0.1.16 

func (fs COS) Chtimes(name string, atime time.Time, mtime time.Time) error

Chtimes changes access time

func (COS) Lchown added in v0.1.16 

func (fs COS) Lchown(name string, uid, gid int) error

Lchown changes ownership 

func (fs COS) Link(path string, link string) error

func (COS) Mkfifo added in v0.1.16 

func (fs COS) Mkfifo(path string, mode uint32) error

func (COS) Mknod added in v0.1.16 

func (fs COS) Mknod(path string, mode uint32, major uint32, minor uint32) error

func (COS) Socket added in v0.1.16 

func (fs COS) Socket(path string) error

type Connect 

type Connect struct {
	// Client *ssh.Client
	Client *ssh.Client

	// Session
	Session *ssh.Session

	// Session Stdin, Stdout, Stderr...
	Stdin  io.Reader
	Stdout io.Writer
	Stderr io.Writer

	// ProxyDialer
	ProxyDialer proxy.ContextDialer

	// Connect timeout second.
	ConnectTimeout int

	// SendKeepAliveMax and SendKeepAliveInterval
	SendKeepAliveMax      int
	SendKeepAliveInterval int

	// Session use tty flag.
	// Set it before CraeteClient.
	TTY bool

	// Forward ssh agent flag.
	// Set it before CraeteClient.
	ForwardAgent bool

	// Set the TTY to be used as the input and output for the Session/Cmd.
	PtyRelayTty *os.File

	// StdoutMutex is a mutex for use Stdout.
	StdoutMutex *sync.Mutex

	// CheckKnownHosts if true, check knownhosts.
	// Ignored if HostKeyCallback is set.
	// Set it before CraeteClient.
	CheckKnownHosts bool

	// HostKeyCallback is ssh.HostKeyCallback.
	// This item takes precedence over `CheckKnownHosts`.
	// Set it before CraeteClient.
	HostKeyCallback ssh.HostKeyCallback

	// OverwriteKnownHosts if true, if the knownhost is different, check whether to overwrite.
	OverwriteKnownHosts bool

	// KnownHostsFiles is list of knownhosts files path.
	KnownHostsFiles []string

	// TextAskWriteKnownHosts defines a confirmation message when writing a knownhost.
	// We are using Go's template engine and have the following variables available.
	// - Address ... ssh server hostname
	// - RemoteAddr ... ssh server address
	// - Fingerprint ... ssh PublicKey fingerprint
	TextAskWriteKnownHosts string

	// TextAskOverwriteKnownHosts defines a confirmation message when over-writing a knownhost.
	// We are using Go's template engine and have the following variables available.
	// - Address ... ssh server hostname
	// - RemoteAddr ... ssh server address
	// - OldKeyText ... old ssh PublicKey text.
	//                  ex: /home/user/.ssh/known_hosts:17: ecdsa-sha2-nistp256 AAAAE2VjZHN...bJklasnFtkFSDyOjTFSv2g=
	// - NewFingerprint ... new ssh PublicKey fingerprint
	TextAskOverwriteKnownHosts string

	// ssh-agent interface.
	// agent.Agent or agent.ExtendedAgent
	// Set it before CraeteClient.
	Agent AgentInterface

	// Forward x11 flag.
	// Set it before CraeteClient.
	ForwardX11 bool

	// Forward X11 trusted flag.
	// This flag is ssh -Y option like flag.
	// Set it before CraeteClient.
	ForwardX11Trusted bool

	// Dynamic forward related logger
	DynamicForwardLogger *log.Logger
	// contains filtered or unexported fields
}

Connect structure to store contents about ssh connection.

func (*Connect) AddKeySshAgent 

func (c *Connect) AddKeySshAgent(sshAgent interface{}, key interface{})

AddKeySshAgent is rapper agent.Add(). key must be a *rsa.PrivateKey, *dsa.PrivateKey or *ecdsa.PrivateKey, which will be inserted into the agent.

Should use `ssh.ParseRawPrivateKey()` or `ssh.ParseRawPrivateKeyWithPassphrase()`.

func (*Connect) ChangeWinSize added in v0.1.18 

func (c *Connect) ChangeWinSize(session *ssh.Session)

func (*Connect) CheckClientAlive 

func (c *Connect) CheckClientAlive() error

CheckClientAlive check alive ssh.Client.

func (*Connect) CmdShell added in v0.1.1 

func (c *Connect) CmdShell(session *ssh.Session, command string) (err error)

Shell connect command shell over ssh. Used to start a shell with a specified command.

func (*Connect) Command added in v0.1.1 

func (c *Connect) Command(command string) (err error)

Command connect and run command over ssh. Output data is processed by channel because it is executed in parallel. If specification is troublesome, it is good to generate and process session from ssh package.

func (*Connect) CreateClient 

func (c *Connect) CreateClient(host, port, user string, authMethods []ssh.AuthMethod) (err error)

CreateClient set c.Client.

func (*Connect) CreateSession 

func (c *Connect) CreateSession() (session *ssh.Session, err error)

CreateSession retrun ssh.Session

func (*Connect) ForwardSshAgent 

func (c *Connect) ForwardSshAgent(session *ssh.Session)

ForwardAgent forward ssh-agent in session.

func (*Connect) HTTPDynamicForward added in v0.1.11 

func (c *Connect) HTTPDynamicForward(address, port string) (err error)

HTTPDynamicForward forwarding http data. Like Dynamic forward (`ssh -D <port>`). but use http proxy.

func (*Connect) HTTPReverseDynamicForward added in v0.1.12 

func (c *Connect) HTTPReverseDynamicForward(address, port string) (err error)

HTTPReverseDynamicForward reverse forwarding http data. Like Reverse Dynamic forward (`ssh -R <port>`). but use http proxy.

func (*Connect) NFSForward added in v0.1.16 

func (c *Connect) NFSForward(address, port, basepoint string) (err error)

func (*Connect) NFSReverseForward added in v0.1.16 

func (c *Connect) NFSReverseForward(address, port, sharepoint string) (err error)

NFSReverseForward is Start NFS Server and forward port to remote server. This port is forawrd GO-NFS Server.

func (*Connect) SendKeepAlive 

func (c *Connect) SendKeepAlive(session *ssh.Session)

SendKeepAlive send packet to session. TODO(blacknon): Interval及びMaxを設定できるようにする(v0.1.1)

func (*Connect) SetLog 

func (c *Connect) SetLog(path string, timestamp bool)

SetLog set up terminal log logging. This only happens in Connect.Shell().

func (*Connect) SetLogWithRemoveAnsiCode added in v0.1.4 

func (c *Connect) SetLogWithRemoveAnsiCode(path string, timestamp bool)

func (*Connect) Shell 

func (c *Connect) Shell(session *ssh.Session) (err error)

Shell connect login shell over ssh.

func (*Connect) TCPDynamicForward added in v0.1.1 

func (c *Connect) TCPDynamicForward(address, port string) (err error)

TCPDynamicForward forwarding tcp data. Like Dynamic forward (`ssh -D <port>`). listen port Socks5 proxy server.

func (*Connect) TCPLocalForward added in v0.1.1 

func (c *Connect) TCPLocalForward(localAddr, remoteAddr string) (err error)

TCPLocalForward forwarding tcp data. Like Local port forward (ssh -L). localAddr, remoteAddr is write as "address:port".

example) "127.0.0.1:22", "abc.com:9977"

func (*Connect) TCPRemoteForward added in v0.1.1 

func (c *Connect) TCPRemoteForward(localAddr, remoteAddr string) (err error)

TCPRemoteForward forwarding tcp data. Like Remote port forward (ssh -R). localAddr, remoteAddr is write as "address:port".

example) "127.0.0.1:22", "abc.com:9977"

func (*Connect) TCPReverseDynamicForward added in v0.1.7 

func (c *Connect) TCPReverseDynamicForward(address, port string) (err error)

TCPReverseDynamicForward reverse forwarding tcp data. Like Openssh Reverse Dynamic forward (`ssh -R <port>`).

func (*Connect) VerifyAndAppendNew added in v0.1.20 

func (c *Connect) VerifyAndAppendNew(hostname string, remote net.Addr, key ssh.PublicKey) (err error)

verifyAndAppendNew checks knownhosts from the files stored in c.KnownHostsFiles. If there is a problem with the known hosts check, it returns an error and the check content. If is no problem, error returns Nil.

【参考】: https://github.com/tatsushid/minssh/blob/57eae8c5bcf5d94639891f3267f05251f05face4/pkg/minssh/minssh.go#L190-L237

func (*Connect) X11Forward 

func (c *Connect) X11Forward(session *ssh.Session) (err error)

X11Forward send x11-req to ssh server and do x11 forwarding. Since the display number of the transfer destination and the PATH of the socket communication file are checked from the local environmsdent variable DISPLAY, this does not work if it is not set.

Also, the value of COOKIE transfers the local value as it is. This will be addressed in the future.

type ContextDialer added in v0.1.15 

type ContextDialer struct {
	Dialer proxy.Dialer
}

func (*ContextDialer) Dial added in v0.1.15 

func (c *ContextDialer) Dial(network, addr string) (net.Conn, error)

func (*ContextDialer) DialContext added in v0.1.15 

func (c *ContextDialer) DialContext(ctx context.Context, network, addr string) (net.Conn, error)

func (*ContextDialer) GetDialer added in v0.1.16 

func (c *ContextDialer) GetDialer() proxy.Dialer

type NetPipe 

type NetPipe struct {
	Command string

	Cmd *exec.Cmd
	// contains filtered or unexported fields
}

func (*NetPipe) Dial 

func (n *NetPipe) Dial(network, addr string) (con net.Conn, err error)

func (*NetPipe) DialContext added in v0.1.14 

func (n *NetPipe) DialContext(ctx context.Context, network, addr string) (con net.Conn, err error)

type OverwriteInventory added in v0.1.7 

type OverwriteInventory struct {
	Address     string
	RemoteAddr  string
	Fingerprint string
	OldKeyText  string
}

type Proxy 

type Proxy struct {
	// Type set proxy type.
	// Can specify `http`, `https`, `socks`, `socks5`, `command`.
	//
	// It is read at the time of specification depending on the type.
	Type string

	// Addr set proxy address.
	//
	Addr string

	// Port set proxy port.
	//
	Port string

	// Port set proxy user.
	//
	User string

	// Port set proxy user.
	//
	Password string

	// Command only use Type `command`.
	//
	Command string

	// Forwarder set Dialer.
	Forwarder ProxyDialer
}

func (*Proxy) CreateHttpProxyDialer 

func (p *Proxy) CreateHttpProxyDialer() (proxyDialer proxy.Dialer, err error)

CreateHttpProxy return ProxyDialer as http proxy.

func (*Proxy) CreateProxyCommandProxyDialer 

func (p *Proxy) CreateProxyCommandProxyDialer() (proxyDialer proxy.Dialer, err error)

CreateProxyCommandProxyDialer as ProxyCommand. When passing ProxyCommand, replace %h, %p and %r etc...

func (*Proxy) CreateProxyDialer 

func (p *Proxy) CreateProxyDialer() (proxyContextDialer ProxyDialer, err error)

CreateProxyDialer retrun ProxyDialer.

func (*Proxy) CreateSocks5ProxyDialer 

func (p *Proxy) CreateSocks5ProxyDialer() (proxyDialer proxy.Dialer, err error)

CreateSocks5Proxy return ProxyDialer as Socks5 proxy.

type ProxyDialer added in v0.1.15 

type ProxyDialer interface {
	Dial(network, addr string) (net.Conn, error)
	DialContext(ctx context.Context, network, addr string) (net.Conn, error)
}

type SFTPFS added in v0.1.16 

type SFTPFS struct {
	billy.Filesystem
	Client *sftp.Client
}

func (*SFTPFS) Capabilities added in v0.1.16 

func (fs *SFTPFS) Capabilities() billy.Capability

Capabilities

func (*SFTPFS) Create added in v0.1.16 

func (fs *SFTPFS) Create(filename string) (billy.File, error)

Create

func (*SFTPFS) Join added in v0.1.16 

func (fs *SFTPFS) Join(elem ...string) string

func (*SFTPFS) Lstat added in v0.1.16 

func (fs *SFTPFS) Lstat(filename string) (os.FileInfo, error)

Lstat

func (*SFTPFS) MkdirAll added in v0.1.16 

func (fs *SFTPFS) MkdirAll(filename string, perm os.FileMode) error

MkdirAll

func (*SFTPFS) Open added in v0.1.16 

func (fs *SFTPFS) Open(filename string) (billy.File, error)

Open

func (*SFTPFS) OpenFile added in v0.1.16 

func (fs *SFTPFS) OpenFile(filename string, flag int, perm os.FileMode) (billy.File, error)

OpenFile

func (*SFTPFS) ReadDir added in v0.1.16 

func (fs *SFTPFS) ReadDir(path string) ([]os.FileInfo, error)

ReadDir 

func (fs *SFTPFS) Readlink(link string) (string, error)

Readlink

func (*SFTPFS) Remove added in v0.1.16 

func (fs *SFTPFS) Remove(filename string) error

Remove

func (*SFTPFS) RemoveAll added in v0.1.16 

func (fs *SFTPFS) RemoveAll(filename string) error

RemoveAll

func (*SFTPFS) Rename added in v0.1.16 

func (fs *SFTPFS) Rename(from, to string) error

Rename

func (*SFTPFS) Stat added in v0.1.16 

func (fs *SFTPFS) Stat(filename string) (os.FileInfo, error)

Stat 

func (fs *SFTPFS) Symlink(target, link string) error

Symlink

func (*SFTPFS) TempFile added in v0.1.16 

func (fs *SFTPFS) TempFile(dir, prefix string) (billy.File, error)

TempFile

type WriteInventory added in v0.1.7 

type WriteInventory struct {
	Address     string
	RemoteAddr  string
	Fingerprint string
}

type XAuth added in v0.1.11 

type XAuth struct {
	// path for XAuthority files
	XAuthorityFilePath string

	// environment $DISPLAY.
	// example: /private/tmp/hoge/unix:0
	Display string
}

func (*XAuth) GetXAuthCookie added in v0.1.11 

func (x *XAuth) GetXAuthCookie(trusted bool) (cookie string, err error)

getXAuthCookie

func (*XAuth) GetXAuthList added in v0.1.11 

func (x *XAuth) GetXAuthList() (entries []xAuthEntry, err error)

getXAuthList

Source Files

View all Source files

Directories

Path Synopsis

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.