diff --git a/src/bin/proxmox_backup_client/key.rs b/src/bin/proxmox_backup_client/key.rs
index e84f5b6b..05cd5165 100644
--- a/src/bin/proxmox_backup_client/key.rs
+++ b/src/bin/proxmox_backup_client/key.rs
@@ -398,13 +398,47 @@ fn paper_key(
};
let data = file_get_contents(&path)?;
- let data = std::str::from_utf8(&data)?;
+ let data = String::from_utf8(data)?;
+
+ let (data, is_private_key) = if data.starts_with("-----BEGIN ENCRYPTED PRIVATE KEY-----\n") {
+ let lines: Vec = data
+ .lines()
+ .map(|s| s.trim_end())
+ .filter(|s| !s.is_empty())
+ .map(String::from)
+ .collect();
+
+ if !lines[lines.len()-1].starts_with("-----END ENCRYPTED PRIVATE KEY-----") {
+ bail!("unexpected key format");
+ }
+
+ if lines.len() < 20 {
+ bail!("unexpected key format");
+ }
+
+ (lines, true)
+ } else {
+ match serde_json::from_str::(&data) {
+ Ok(key_config) => {
+ let lines = serde_json::to_string_pretty(&key_config)?
+ .lines()
+ .map(String::from)
+ .collect();
+
+ (lines, false)
+ },
+ Err(err) => {
+ eprintln!("Couldn't parse '{:?}' as KeyConfig - {}", path, err);
+ bail!("Neither a PEM-formatted private key, nor a PBS key file.");
+ },
+ }
+ };
let format = output_format.unwrap_or(PaperkeyFormat::Html);
match format {
- PaperkeyFormat::Html => paperkey_html(data, subject),
- PaperkeyFormat::Text => paperkey_text(data, subject),
+ PaperkeyFormat::Html => paperkey_html(&data, subject, is_private_key),
+ PaperkeyFormat::Text => paperkey_text(&data, subject, is_private_key),
}
}
@@ -439,7 +473,7 @@ pub fn cli() -> CliCommandMap {
.insert("paperkey", paper_key_cmd_def)
}
-fn paperkey_html(data: &str, subject: Option) -> Result<(), Error> {
+fn paperkey_html(lines: &[String], subject: Option, is_private: bool) -> Result<(), Error> {
let img_size_pt = 500;
@@ -468,21 +502,7 @@ fn paperkey_html(data: &str, subject: Option) -> Result<(), Error> {
println!("Subject: {}
", subject);
}
- if data.starts_with("-----BEGIN ENCRYPTED PRIVATE KEY-----\n") {
- let lines: Vec = data.lines()
- .map(|s| s.trim_end())
- .filter(|s| !s.is_empty())
- .map(String::from)
- .collect();
-
- if !lines[lines.len()-1].starts_with("-----END ENCRYPTED PRIVATE KEY-----") {
- bail!("unexpected key format");
- }
-
- if lines.len() < 20 {
- bail!("unexpected key format");
- }
-
+ if is_private {
const BLOCK_SIZE: usize = 20;
let blocks = (lines.len() + BLOCK_SIZE -1)/BLOCK_SIZE;
@@ -503,8 +523,7 @@ fn paperkey_html(data: &str, subject: Option) -> Result<(), Error> {
println!("
");
- let data = data.join("\n");
- let qr_code = generate_qr_code("svg", data.as_bytes())?;
+ let qr_code = generate_qr_code("svg", data)?;
let qr_code = base64::encode_config(&qr_code, base64::STANDARD_NO_PAD);
println!("");
@@ -520,16 +539,13 @@ fn paperkey_html(data: &str, subject: Option) -> Result<(), Error> {
return Ok(());
}
- let key_config: KeyConfig = serde_json::from_str(&data)?;
- let key_text = serde_json::to_string_pretty(&key_config)?;
-
println!("");
println!("
");
println!("-----BEGIN PROXMOX BACKUP KEY-----");
- for line in key_text.lines() {
+ for line in lines {
println!("{}", line);
}
@@ -537,7 +553,7 @@ fn paperkey_html(data: &str, subject: Option) -> Result<(), Error> {
println!("
");
- let qr_code = generate_qr_code("svg", key_text.as_bytes())?;
+ let qr_code = generate_qr_code("svg", lines)?;
let qr_code = base64::encode_config(&qr_code, base64::STANDARD_NO_PAD);
println!("
");
@@ -554,27 +570,13 @@ fn paperkey_html(data: &str, subject: Option) -> Result<(), Error> {
Ok(())
}
-fn paperkey_text(data: &str, subject: Option) -> Result<(), Error> {
+fn paperkey_text(lines: &[String], subject: Option, is_private: bool) -> Result<(), Error> {
if let Some(subject) = subject {
println!("Subject: {}\n", subject);
}
- if data.starts_with("-----BEGIN ENCRYPTED PRIVATE KEY-----\n") {
- let lines: Vec = data.lines()
- .map(|s| s.trim_end())
- .filter(|s| !s.is_empty())
- .map(String::from)
- .collect();
-
- if !lines[lines.len()-1].starts_with("-----END ENCRYPTED PRIVATE KEY-----") {
- bail!("unexpected key format");
- }
-
- if lines.len() < 20 {
- bail!("unexpected key format");
- }
-
+ if is_private {
const BLOCK_SIZE: usize = 5;
let blocks = (lines.len() + BLOCK_SIZE -1)/BLOCK_SIZE;
@@ -589,8 +591,7 @@ fn paperkey_text(data: &str, subject: Option) -> Result<(), Error> {
for l in start..end {
println!("{:-2}: {}", l, lines[l]);
}
- let data = data.join("\n");
- let qr_code = generate_qr_code("utf8i", data.as_bytes())?;
+ let qr_code = generate_qr_code("utf8i", data)?;
let qr_code = String::from_utf8(qr_code)
.map_err(|_| format_err!("Failed to read qr code (got non-utf8 data)"))?;
println!("{}", qr_code);
@@ -600,14 +601,13 @@ fn paperkey_text(data: &str, subject: Option) -> Result<(), Error> {
return Ok(());
}
- let key_config: KeyConfig = serde_json::from_str(&data)?;
- let key_text = serde_json::to_string_pretty(&key_config)?;
-
println!("-----BEGIN PROXMOX BACKUP KEY-----");
- println!("{}", key_text);
+ for line in lines {
+ println!("{}", line);
+ }
println!("-----END PROXMOX BACKUP KEY-----");
- let qr_code = generate_qr_code("utf8i", key_text.as_bytes())?;
+ let qr_code = generate_qr_code("utf8i", &lines)?;
let qr_code = String::from_utf8(qr_code)
.map_err(|_| format_err!("Failed to read qr code (got non-utf8 data)"))?;
@@ -616,8 +616,7 @@ fn paperkey_text(data: &str, subject: Option) -> Result<(), Error> {
Ok(())
}
-fn generate_qr_code(output_type: &str, data: &[u8]) -> Result, Error> {
-
+fn generate_qr_code(output_type: &str, lines: &[String]) -> Result, Error> {
let mut child = Command::new("qrencode")
.args(&["-t", output_type, "-m0", "-s1", "-lm", "--output", "-"])
.stdin(Stdio::piped())
@@ -627,7 +626,8 @@ fn generate_qr_code(output_type: &str, data: &[u8]) -> Result, Error> {
{
let stdin = child.stdin.as_mut()
.ok_or_else(|| format_err!("Failed to open stdin"))?;
- stdin.write_all(data)
+ let data = lines.join("\n");
+ stdin.write_all(data.as_bytes())
.map_err(|_| format_err!("Failed to write to stdin"))?;
}