pax_global_header 0000666 0000000 0000000 00000000064 12313043653 0014512 g ustar 00root root 0000000 0000000 52 comment=decd2a4d54956686fca8ebe1adea7949e46c5cd5
instance-identity-module-instance-identity-1.4/ 0000775 0000000 0000000 00000000000 12313043653 0021725 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/.gitignore 0000664 0000000 0000000 00000000036 12313043653 0023714 0 ustar 00root root 0000000 0000000 target
*.iml
*.iws
*.ipr
work
instance-identity-module-instance-identity-1.4/LICENSE.txt 0000664 0000000 0000000 00000002110 12313043653 0023542 0 ustar 00root root 0000000 0000000 The MIT License
Copyright (c) 2011-, CloudBees, Inc. and contributors
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in
all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
THE SOFTWARE.
instance-identity-module-instance-identity-1.4/pom.xml 0000664 0000000 0000000 00000002411 12313043653 0023240 0 ustar 00root root 0000000 0000000
4.0.0
org.jenkins-ci.plugins
plugin
1.532.2
org.jenkins-ci.modules
instance-identity
1.4
jenkins-module
Instance Identity
Maintains an RSA key pair that can serve as a foundation of authentication when communicating with Jenkins
scm:git:git://github.com/jenkinsci/${project.artifactId}-module.git
scm:git:ssh://git@github.com/jenkinsci/${project.artifactId}-module.git
MIT License
http://www.opensource.org/licenses/mit-license.php
org.bouncycastle
bcpkix-jdk15on
1.47
instance-identity-module-instance-identity-1.4/src/ 0000775 0000000 0000000 00000000000 12313043653 0022514 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/main/ 0000775 0000000 0000000 00000000000 12313043653 0023440 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/main/java/ 0000775 0000000 0000000 00000000000 12313043653 0024361 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/main/java/org/ 0000775 0000000 0000000 00000000000 12313043653 0025150 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/main/java/org/jenkinsci/ 0000775 0000000 0000000 00000000000 12313043653 0027125 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/main/java/org/jenkinsci/main/ 0000775 0000000 0000000 00000000000 12313043653 0030051 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/main/java/org/jenkinsci/main/modules/ 0000775 0000000 0000000 00000000000 12313043653 0031521 5 ustar 00root root 0000000 0000000 0000775 0000000 0000000 00000000000 12313043653 0035157 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/main/java/org/jenkinsci/main/modules/instance_identity InstanceIdentity.java 0000664 0000000 0000000 00000011124 12313043653 0041277 0 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/main/java/org/jenkinsci/main/modules/instance_identity package org.jenkinsci.main.modules.instance_identity;
import hudson.FilePath;
import hudson.Util;
import hudson.model.PageDecorator;
import java.io.File;
import java.io.FileOutputStream;
import java.io.FileReader;
import java.io.IOException;
import java.io.OutputStream;
import java.io.Reader;
import java.io.StringReader;
import java.io.StringWriter;
import java.security.GeneralSecurityException;
import java.security.KeyPair;
import java.security.KeyPairGenerator;
import java.security.SecureRandom;
import java.security.interfaces.RSAPrivateKey;
import java.security.interfaces.RSAPublicKey;
import java.util.logging.Level;
import java.util.logging.Logger;
import jenkins.model.Jenkins;
import jenkins.security.CryptoConfidentialKey;
import org.apache.commons.io.FileUtils;
import org.bouncycastle.openssl.PEMReader;
import org.bouncycastle.openssl.PEMWriter;
/**
* Captures the RSA key pair that identifies/authenticates this instance.
* Useful wherever we need to authenticate Jenkins against something external to it ({@code sshd-module} for example).
*
* @author Kohsuke Kawaguchi
*/
public class InstanceIdentity {
private final KeyPair keys;
public InstanceIdentity() throws IOException {
this(new File(Jenkins.getInstance().getRootDir(), "identity.key.enc"), new File(Jenkins.getInstance().getRootDir(), "identity.key"));
}
public InstanceIdentity(File keyFile) throws IOException {
this(keyFile, null);
}
InstanceIdentity(File keyFile, File oldKeyFile) throws IOException {
KeyPairGenerator gen;
try {
gen = KeyPairGenerator.getInstance("RSA");
} catch (Exception e) {
throw new AssertionError(e); // RSA algorithm should be always there
}
if (oldKeyFile.exists()) {
keys = read(new FileReader(oldKeyFile), gen);
write(keys, keyFile);
Util.deleteFile(oldKeyFile);
} else if (keyFile.exists()) {
byte[] enc = FileUtils.readFileToByteArray(keyFile);
Reader in;
try {
in = new StringReader(new String(KEY.decrypt().doFinal(enc), "UTF-8"));
} catch (GeneralSecurityException x) {
throw new IOException(x);
}
keys = read(in, gen);
} else {
gen.initialize(2048,new SecureRandom()); // going beyond 2048 requires crypto extension
keys = gen.generateKeyPair();
write(keys, keyFile);
}
}
private static KeyPair read(Reader in, KeyPairGenerator gen) throws IOException {
// a hack to work around a problem in PEMReader (or JCE, depending on how you look at it.)
// I can't just pass in null as a provider --- JCE doesn't default to the default provider,
// but it chokes that I passed in null. Urgh.
String provider = gen.getProvider().getName();
try {
return (KeyPair) new PEMReader(in, null, provider).readObject();
} finally {
in.close();
}
}
private static void write(KeyPair keys, File keyFile) throws IOException {
StringWriter sw = new StringWriter();
PEMWriter w = new PEMWriter(sw, "SunJCE");
try {
w.writeObject(keys);
} finally {
w.close();
}
OutputStream os = new FileOutputStream(keyFile);
try {
os.write(KEY.encrypt().doFinal(sw.toString().getBytes("UTF-8")));
} catch (GeneralSecurityException x) {
throw new IOException(x);
} finally {
os.close();
}
makeReadOnly(keyFile);
}
// Would be neater to actually write an encrypted RSA key in PEM format, but could not wrangle BouncyCastle into reading the result, so just doing generic encryption instead:
private static final CryptoConfidentialKey KEY = new CryptoConfidentialKey(InstanceIdentity.class, "KEY");
/**
* Try to make the key read-only.
*/
private static void makeReadOnly(File keyFile) {
try {
new FilePath(keyFile).chmod(0600);
} catch (Throwable e) {
LOGGER.log(Level.WARNING, "Failed to make read only: "+keyFile,e);
}
}
public RSAPublicKey getPublic() {
return (RSAPublicKey)keys.getPublic();
}
public RSAPrivateKey getPrivate() {
return (RSAPrivateKey)keys.getPrivate();
}
public static InstanceIdentity get() {
return Jenkins.getInstance().getExtensionList(PageDecorator.class).get(PageDecoratorImpl.class).identity;
}
private static final Logger LOGGER = Logger.getLogger(InstanceIdentity.class.getName());
}
PageDecoratorImpl.java 0000664 0000000 0000000 00000001333 12313043653 0041363 0 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/main/java/org/jenkinsci/main/modules/instance_identity package org.jenkinsci.main.modules.instance_identity;
import hudson.Extension;
import hudson.model.PageDecorator;
import org.apache.commons.codec.binary.Base64;
import java.io.IOException;
import java.security.interfaces.RSAPublicKey;
/**
* Advertises the public key.
*
* @author Kohsuke Kawaguchi
*/
@Extension
public class PageDecoratorImpl extends PageDecorator {
public final InstanceIdentity identity;
public PageDecoratorImpl() throws IOException {
super(PageDecoratorImpl.class);
this.identity = new InstanceIdentity();
}
public String getEncodedPublicKey() {
RSAPublicKey key = identity.getPublic();
return new String(Base64.encodeBase64(key.getEncoded()));
}
}
instance-identity-module-instance-identity-1.4/src/main/resources/ 0000775 0000000 0000000 00000000000 12313043653 0025452 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/main/resources/org/ 0000775 0000000 0000000 00000000000 12313043653 0026241 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/main/resources/org/jenkinsci/ 0000775 0000000 0000000 00000000000 12313043653 0030216 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/main/resources/org/jenkinsci/main/ 0000775 0000000 0000000 00000000000 12313043653 0031142 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/main/resources/org/jenkinsci/main/modules/ 0000775 0000000 0000000 00000000000 12313043653 0032612 5 ustar 00root root 0000000 0000000 0000775 0000000 0000000 00000000000 12313043653 0036250 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/main/resources/org/jenkinsci/main/modules/instance_identity 0000775 0000000 0000000 00000000000 12313043653 0041611 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/main/resources/org/jenkinsci/main/modules/instance_identity/PageDecoratorImpl httpHeaders.jelly 0000664 0000000 0000000 00000000215 12313043653 0045123 0 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/main/resources/org/jenkinsci/main/modules/instance_identity/PageDecoratorImpl
instance-identity-module-instance-identity-1.4/src/test/ 0000775 0000000 0000000 00000000000 12313043653 0023473 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/test/java/ 0000775 0000000 0000000 00000000000 12313043653 0024414 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/test/java/org/ 0000775 0000000 0000000 00000000000 12313043653 0025203 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/test/java/org/jenkinsci/ 0000775 0000000 0000000 00000000000 12313043653 0027160 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/test/java/org/jenkinsci/main/ 0000775 0000000 0000000 00000000000 12313043653 0030104 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/test/java/org/jenkinsci/main/modules/ 0000775 0000000 0000000 00000000000 12313043653 0031554 5 ustar 00root root 0000000 0000000 0000775 0000000 0000000 00000000000 12313043653 0035212 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/test/java/org/jenkinsci/main/modules/instance_identity InstanceIdentityTest.java 0000664 0000000 0000000 00000004725 12313043653 0042203 0 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/test/java/org/jenkinsci/main/modules/instance_identity /*
* The MIT License
*
* Copyright 2014 Jesse Glick.
*
* Permission is hereby granted, free of charge, to any person obtaining a copy
* of this software and associated documentation files (the "Software"), to deal
* in the Software without restriction, including without limitation the rights
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
* copies of the Software, and to permit persons to whom the Software is
* furnished to do so, subject to the following conditions:
*
* The above copyright notice and this permission notice shall be included in
* all copies or substantial portions of the Software.
*
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
* THE SOFTWARE.
*/
package org.jenkinsci.main.modules.instance_identity;
import hudson.model.PageDecorator;
import java.io.File;
import static org.junit.Assert.*;
import org.junit.Rule;
import org.junit.Test;
import org.jvnet.hudson.test.JenkinsRule;
import org.jvnet.hudson.test.recipes.LocalData;
public class InstanceIdentityTest {
@Rule public JenkinsRule r = new JenkinsRule();
private static final String TEST_IDENTITY = "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6R6FrlvuyBPstxHKCnRL+oKzEGlgGydD/1Tj/LhCAzgXKnJZFEvo3rrz8CqcWbW3gt04bNXcET9NvAATisR1KP2Zi3EUG/jsXy7q9tr9t0NVAgGC5i5MtU+VFo/te0xAou7nsGng6T/FCXCq1nSeBdfAEQ23+fwyNtJpSbP2EqOrycLox+Xh6M91rt1c3JEHEe/FIrD+NhHQ4m6R/HwWH6DDq8W7P8y9j9/ToVSBBZr0pRETBZre5nkJiwJ/EWnbjqqJ/LguOMTukxPXe8/b9CDFrkuzpYUn8ChtL0DDCE/SoI9jwBSXwj5kQyNoyC9sVrbmEbuAPZ2dRzcDen09CwIDAQAB";
@LocalData
@Test public void compatibility() throws Exception {
assertIdentity();
}
@LocalData
@Test public void reread() throws Exception {
assertIdentity();
}
private void assertIdentity() throws Exception {
assertEquals(TEST_IDENTITY, r.jenkins.getExtensionList(PageDecorator.class).get(PageDecoratorImpl.class).getEncodedPublicKey());
File d = r.jenkins.getRootDir();
assertTrue(new File(d, "identity.key.enc").isFile());
assertFalse(new File(d, "identity.key").isFile());
}
}
instance-identity-module-instance-identity-1.4/src/test/resources/ 0000775 0000000 0000000 00000000000 12313043653 0025505 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/test/resources/org/ 0000775 0000000 0000000 00000000000 12313043653 0026274 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/test/resources/org/jenkinsci/ 0000775 0000000 0000000 00000000000 12313043653 0030251 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/test/resources/org/jenkinsci/main/ 0000775 0000000 0000000 00000000000 12313043653 0031175 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/test/resources/org/jenkinsci/main/modules/ 0000775 0000000 0000000 00000000000 12313043653 0032645 5 ustar 00root root 0000000 0000000 0000775 0000000 0000000 00000000000 12313043653 0036303 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/test/resources/org/jenkinsci/main/modules/instance_identity 0000775 0000000 0000000 00000000000 12313043653 0042421 5 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/test/resources/org/jenkinsci/main/modules/instance_identity/InstanceIdentityTest compatibility.zip 0000664 0000000 0000000 00000003421 12313043653 0046016 0 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/test/resources/org/jenkinsci/main/modules/instance_identity/InstanceIdentityTest PK
khsD&
' identity.key -----BEGIN RSA PRIVATE KEY-----
MIIEpAIBAAKCAQEA6R6FrlvuyBPstxHKCnRL+oKzEGlgGydD/1Tj/LhCAzgXKnJZ
FEvo3rrz8CqcWbW3gt04bNXcET9NvAATisR1KP2Zi3EUG/jsXy7q9tr9t0NVAgGC
5i5MtU+VFo/te0xAou7nsGng6T/FCXCq1nSeBdfAEQ23+fwyNtJpSbP2EqOrycLo
x+Xh6M91rt1c3JEHEe/FIrD+NhHQ4m6R/HwWH6DDq8W7P8y9j9/ToVSBBZr0pRET
BZre5nkJiwJ/EWnbjqqJ/LguOMTukxPXe8/b9CDFrkuzpYUn8ChtL0DDCE/SoI9j
wBSXwj5kQyNoyC9sVrbmEbuAPZ2dRzcDen09CwIDAQABAoIBAQDLY6jovibwA4pF
E00+n8bmcv/98qI6LqEB9bPQe4aEvnxfuVKFBdHP+jb4tISjNIs+rvoa4t/VYHDW
9Q4XxV4e/FvpsCgGW8EHLq0r4Vb5fNJ/JIhrgbvFeQCvpbViHN5MCbq1TTtA5jVo
DhfPcgGpQVq+xkRc5C9/a0cXWd741I+cXVOwSo/AfLNqqqFbuYGOcDc/V4PS3lKi
RxmjWnsDbMZPgJCaIghfcFRDRzAeT9dFk+Kqan9/mBvHNTgQMUMUxydG6HP8Afsh
6TtbhVACfJPsy8S2wMZeL3jzAngaWe6E9gUPC/sGsPTbxUWGvCEvgTQ03k74SVqO
1RqqZ7hpAoGBAPmv5JSd1L/sqM6V5aFkgWyOkjBCLKQIMW7H8oEjoROlpPUgeZ+N
dXmh2W9T6rFQwA/KKcZh3Jr9rYffPorRyKzkAKmqLVGslAqfExP7KAue7uQS2aRc
C9cnUwwhjXW9YtdqCCOM/9pHXqEDeAt7XZxp/mjCwQF7XhrvylReAJNFAoGBAO8D
ZLOnsxpjEfI9nPUlkdoiSuif2rUHNyqY6X9D9THqwEHWw9czqToCwEkAnCaelxyL
ck4u0j0BUXLD2kWFT5EXsMZ8AtvrM3yP9829DK1zuyGqNCNg0fQ5RPQ6s/kWP0f7
xaPY+lMU4BP+439zrtUbPb2BnOsoRbg8oC/ofewPAoGBALAx3kS9p88Tyv+VKakd
SnN3nFOvrt7F5VQ+hrN4mAdMQb60/v6HjVmay9xSxHACArZhu98BWfKJhvY1pGXD
qi/O6WTQ8RAMj597J7RW7KherEeHwcvJJJXcay9JUhC+50wJx9qGelnnOTC4SPMZ
SDLDXUNCA37vNrYddpLYjuFdAoGAGTNkZMTjz35un/n7GKXzcOp4t3pTVw8BtA4X
YIHL0o2L4+U/FOuvhhxQJeJYlIHYMPxK+w9Yv3HqIo2f8ACUWRoEW4krzABKl3Ge
kSTDt24iZvRJNwm4WWXIbW/bFgJQfciAGDyCeEwVLEaNuhx6bKHIqriF0Q2X/Er4
INUEoeUCgYAFXzSexmrC6cGGk6Me/FOxwTFd0TtmH61kz6rbjjRzT33FpKxSFIEC
KcKzzs3L6GwgjGpFODo696qTM46VQEYRf4PDS87GorVGsPc9R3ZZcxpM+fPVX7QK
G152GqBaSyo3mfwoTC0Ap9qFB82Qxk3s+DPppzkRjGb13gZwRy9K5A==
-----END RSA PRIVATE KEY-----
PK
khsD&
' identity.key PK > reread.zip 0000664 0000000 0000000 00000004630 12313043653 0044412 0 ustar 00root root 0000000 0000000 instance-identity-module-instance-identity-1.4/src/test/resources/org/jenkinsci/main/modules/instance_identity/InstanceIdentityTest PK
MuD~FS identity.key.enc 䮓j}uwp`?yĺj' Bi*|T7 +B.Ɇ8|ox^E5>C= +e G]? 3#PBood&6JzR/أP^eHdqb3!ѡDo KQρVm|'◆ra4)<ͷAH
SよĜO`4YڌYeO.}?b~h C@m;}2OQ»V\DӶH-Z" -.rh5[ +jg$M٧roF; .ԉzg"gQm ؟ @hneXuZ2'
ED.[V͍~:Ijw7&<=j+e)SsmPH5-P#l)橁 ђ6k,R2@_u77 4j oNA:N?d 7}5$ j
L 3!
(, )Au!OAcp
t vv(29^&<=#`TqrwA;q "-4K@ r
H}MS
l(sYs M{)>{EW [agsBx#m 4M 'f_2/j "XUaN+
Eckesx4>WRv.BAVwsǦso}?u3`\dOv"c ƒr0+jgyKhK@Nlv| >>WcY]@6ŏ0h__d
?E?@u$GcV7 \ΓTJ) IrT RpX.F[ytY{"\ݥH I0x6F>۠br-z6i ,ͮ˯M ^U>E ѽ+w7NSN֩ojJwaAmm>ZLk$=]՜ xݻaߢT1O[>(6JӇ&aԶGN/҂ _UBVE~< .
|UOՖ$3 %Jd"x|2 hͼwJ~uZLDpz #bomG Im͒otV"\?r:k^0,4+hm~lnRr ~N+5?ul.|(t "i7&lq@#n~FbROsqHJV軄'~q|;
FfaS|D [ h`n94sl3?@vRqԕ4/){1vŜr_hE\z-
R wͧ+_v }
vFűxV]o#;kM8#_"O>T(/2j{&.4}וU\cr)1[{v3=| %m: S_<2)N7=]4a&dg*h? PK
DisDaap secrets/master.keybc497f8128e4b716d9ed1992522b82e5c85d58ded36fca0af9cdb4226d9d3806d9c7a3e969485fa54240afd4d3810089dc56a24a988292236aa835074ab9cc9d5979a22a4ff849ed9cf6a1de2f7767705b73e69e8c2ed1b6d9d38bc9b5eaabdebbd51f216dcfc774af8f5ab6f176691e32084bffc1fc079876dfe67eeb6cc122PK
tDG|0 0 I secrets/org.jenkinsci.main.modules.instance_identity.InstanceIdentity.KEYAZuڤ>AS@\bOJHW,<;?ZeTT PK
MuD~FS identity.key.enc PK
DisDaap secrets/master.keyPK
tDG|0 0 I secrets/org.jenkinsci.main.modules.instance_identity.InstanceIdentity.KEYPK