ansible/community.general
1
0
Fork 0
mirror of https://github.com/ansible-collections/community.general.git synced 2024-09-14 20:13:21 +02:00
Code Releases Activity

Merge pull request #3740 from jimi1283/issue_3716

Browse source 
Adding support for hashed known_hosts entries
This commit is contained in:
Michael DeHaan 2013-08-03 10:24:03 -07:00
commit f7723651d3
1 changed files with 18 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

20
lib/ansible/runner/connection_plugins/ssh.py
View file

@ -23,7 +23,9 @@ import pipes
import random
import select
import fcntl
import hmac
import pwd
from hashlib import sha1
import ansible.constants as C
from ansible.callbacks import vvv
from ansible import errors
@ -39,6 +41,7 @@ class Connection(object):
self.user = user
self.password = password
self.private_key_file = private_key_file
self.HASHED_KEY_MAGIC = "|1|"
def connect(self):
''' connect to the remote host '''
@ -105,8 +108,21 @@ class Connection(object):
if line is None or line.find(" ") == -1:
continue
tokens = line.split()
if host in tokens[0]:
return False
if tokens[0].find(self.HASHED_KEY_MAGIC) == 0:
# this is a hashed known host entry
try:
(kn_salt,kn_host) = tokens[0][len(self.HASHED_KEY_MAGIC):].split("|",2)
hash = hmac.new(kn_salt.decode('base64'), digestmod=sha1)
hash.update(host)
if hash.digest() == kn_host.decode('base64'):
return False
except:
# invalid hashed host key, skip it
continue
else:
# standard host file entry
if host in tokens[0]:
return False
return True
def exec_command(self, cmd, tmp_path, sudo_user,sudoable=False, executable='/bin/sh'):