Signing 2 - hc keygen

CHANGELOG.md

@@ -4,6 +4,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 ### Changed
+- Added command `hc keygen` which creates a new key pair, asks for a passphrase and writes an encrypted key bundle file to `~/.holochain/keys`.
 - core now depends on `pretty_assertions` crate
 - `ChainHeader::sources()` is now `ChainHeader::provenances()`
 - Headers from other agents are stored in the EAV

cli/Cargo.toml

@@ -9,6 +9,8 @@ holochain_core_types = { path = "../core_types" }
 holochain_core = { path = "../core" }
 holochain_cas_implementations = { path = "../cas_implementations" }
 holochain_conductor_api = { path = "../conductor_api" }
+holochain_dpki = { path = "../hc_dpki" }
+holochain_sodium = { path = "../sodium" }
 holochain_wasm_utils = { path = "../wasm_utils" }
 structopt = "0.2"
 failure = "^0.1"
@@ -25,3 +27,5 @@ dir-diff = "0.3.1"
 colored = "1.6"
 ignore = "0.4.3"
 rustyline = "^2.1"
+rpassword = "2.1.0"
+directories = "1.0"

cli/src/cli/keygen.rs

@@ -0,0 +1,50 @@
+use error::DefaultResult;
+use holochain_dpki::{
+    bundle::KeyBundle,
+    keypair::{Keypair, SEEDSIZE},
+    util::PwHashConfig,
+};
+use holochain_sodium::{pwhash, random::random_secbuf, secbuf::SecBuf};
+use rpassword;
+use std::{
+    fs::{create_dir_all, File},
+    io::prelude::*,
+    path::PathBuf,
+};
+
+pub fn keygen() -> DefaultResult<()> {
+    let passphrase = rpassword::read_password_from_tty(Some("Passphrase: ")).unwrap();
+
+    let mut seed = SecBuf::with_secure(SEEDSIZE);
+    random_secbuf(&mut seed);
+    let mut keypair = Keypair::new_from_seed(&mut seed).unwrap();
+    let passphrase_bytes = passphrase.as_bytes();
+    let mut passphrase_buf = SecBuf::with_insecure(passphrase_bytes.len());
+    passphrase_buf
+        .write(0, passphrase_bytes)
+        .expect("SecBuf must be writeable");
+
+    let bundle: KeyBundle = keypair
+        .get_bundle(
+            &mut passphrase_buf,
+            "hint".to_string(),
+            Some(PwHashConfig(
+                pwhash::OPSLIMIT_INTERACTIVE,
+                pwhash::MEMLIMIT_INTERACTIVE,
+                pwhash::ALG_ARGON2ID13,
+            )),
+        )
+        .unwrap();
+
+    let path = match directories::UserDirs::new() {
+        Some(user_dirs) => user_dirs.home_dir().join(".holochain").join("keys"),
+        None => PathBuf::new(),
+    };
+
+    create_dir_all(path.clone())?;
+    let path = path.join(keypair.pub_keys);
+    let mut file = File::create(path.clone())?;
+    file.write_all(serde_json::to_string(&bundle).unwrap().as_bytes())?;
+    println!("Wrote {}.", path.to_str().unwrap());
+    Ok(())
+}

cli/src/cli/mod.rs

@@ -1,6 +1,7 @@
 mod agent;
 mod generate;
 mod init;
+mod keygen;
 pub mod package;
 mod run;
 mod scaffold;
@@ -11,6 +12,7 @@ pub use self::{
     agent::agent,
     generate::generate,
     init::init,
+    keygen::keygen,
     package::{package, unpack},
     run::run,
     test::{test, TEST_DIR_NAME},

cli/src/main.rs

@@ -2,7 +2,9 @@ extern crate holochain_cas_implementations;
 extern crate holochain_conductor_api;
 extern crate holochain_core;
 extern crate holochain_core_types;
+extern crate holochain_dpki;
 extern crate holochain_net;
+extern crate holochain_sodium;
 extern crate holochain_wasm_utils;
 extern crate structopt;
 #[macro_use]
@@ -19,6 +21,7 @@ extern crate toml;
 #[macro_use]
 extern crate serde_json;
 extern crate ignore;
+extern crate rpassword;
 extern crate rustyline;
 extern crate tempfile;
 extern crate uuid;
@@ -142,6 +145,12 @@ enum Cli {
         #[structopt(long = "skip-package", short = "s", help = "Skip packaging DNA")]
         skip_build: bool,
     },
+    #[structopt(
+        name = "keygen",
+        alias = "k",
+        about = "Creates a new agent key pair, asks for a passphrase and writes an encrypted key bundle to ~/.holochain/keys"
+    )]
+    KeyGen,
 }
 
 fn main() {
@@ -183,6 +192,7 @@ fn run() -> HolochainResult<()> {
             cli::test(&current_path, &dir, &testfile, skip_build)
         }
         .map_err(HolochainError::Default)?,
+        Cli::KeyGen => cli::keygen().map_err(|e| HolochainError::Default(format_err!("{}", e)))?,
     }
 
     Ok(())

hc_dpki/src/bundle.rs

@@ -3,6 +3,7 @@
 /// The bundle_type tells if the bundle is a RootSeed bundle | DeviceSeed bundle | DevicePINSeed Bundle | ApplicationKeys Bundle
 ///
 /// the data includes a base64 encoded string of the ReturnBundleData Struct that was created by combining all the keys in one SecBuf
+#[derive(Serialize, Deserialize)]
 pub struct KeyBundle {
     pub bundle_type: String,
     pub hint: String,

hc_dpki/src/lib.rs

@@ -4,10 +4,11 @@ extern crate holochain_sodium;
 #[macro_use]
 extern crate arrayref;
 extern crate base64;
-extern crate rustc_serialize;
-
 extern crate bip39;
 extern crate boolinator;
+extern crate rustc_serialize;
+#[macro_use]
+extern crate serde;
 
 pub mod bundle;
 pub mod error;