Compare commits

...
This repository has been archived on 2021-01-14. You can view files and clone it, but cannot push or open issues or pull requests.

2 Commits

Author SHA1 Message Date
BBaoVanC 0b22731076
Remove a few leftover lines 2020-09-03 21:28:14 -05:00
BBaoVanC 9f2c7c2b88
Clean up and reorganize keygen.py
This makes it easier to add new features
- Clearer variable names
- Split up large functions into smaller ones for each action
- Help make it easier to add new features
2020-09-03 20:20:22 -05:00
1 changed files with 70 additions and 65 deletions

135
keygen.py
View File

@ -8,41 +8,59 @@ import sys
import os import os
# Check if encryption key already exists # Load secret
enckey = Path(settings.ENCKEY_PATH) def load_secret():
if enckey.is_file(): with open(settings.ENCKEY_PATH, "rb") as sf:
print("Encryption key found.") secret = sf.read()
else: return secret
print("Encryption key not found.")
print("Generating key...")
key = Fernet.generate_key()
with open(settings.ENCKEY_PATH, "wb") as key_file:
key_file.write(key)
print("Encryption key generated and stored in secret.key.")
# Load encryption key
def load_key():
with open(settings.ENCKEY_PATH, "rb") as kf:
kdata = kf.read()
return kdata
# Encrypting and storing of key # Encrypting and storing of key
def encrypt_key(message): def append_uploadkey(akey):
key = load_key() with open('uploadkeys', 'a+') as uploadkeysf:
keyf = Fernet(key) print(str(akey), file=uploadkeysf)
with open('uploadkeys', 'a+') as uploadkeys:
print(str(token), file=uploadkeys)
with open("uploadkeys", "rb") as keyfile: def decrypt_uploadkeys():
keyfile_data = keyfile.read() with open("uploadkeys", "rb") as uploadkeysf:
uploadkeys_data = uploadkeysf.read()
encrypted_data = keyf.encrypt(keyfile_data) try:
secret = load_secret()
secretf = Fernet(secret)
decrypted_data = secretf.decrypt(uploadkeys_data) # decrypt data
with open("uploadkeys", "wb") as ukf:
ukf.write(decrypted_data) # write the original file
print("Done decrypting") # debug
return True
except InvalidToken:
print("InvalidToken") # debug
print("The encrypted key data is invalid and cannot be read.")
print("It may be necessary to clear the file entirely, which will invalidate all tokens.")
proceed = ask_yn("Do you wish to proceed to clearing the uploadkeys file? [y/n] ")
with open("uploadkeys", "wb") as keyfile: if proceed:
keyfile.write(encrypted_data) os.remove("uploadkeys")
print("Removed uploadkeys file.")
proceed2 = ask_yn("Would you like to continue and generate a new key? [y/n] ")
if not proceed2:
return False
else:
return True
else:
return False
def encrypt_uploadkeys():
with open("uploadkeys", "rb") as uploadkeysf:
uploadkeys_data = uploadkeysf.read()
secret = load_secret()
secretf = Fernet(secret)
encrypted_data = secretf.encrypt(uploadkeys_data)
with open("uploadkeys", "wb") as uploadkeysf:
uploadkeysf.write(encrypted_data)
def ask_yn(msg): def ask_yn(msg):
@ -58,46 +76,33 @@ def ask_yn(msg):
return proceed return proceed
start = ask_yn("Have you run this program as the correct user (for example, nginx uses www-data)? [y/n] ") # Check if encryption secret already exists
if not start: if Path(settings.ENCKEY_PATH).is_file():
print("Please run this as the correct user with: sudo su [user] -s /bin/sh -c 'python3 keygen/py'") print("Encryption secret found.")
else: else:
print("Encryption secret not found.")
print("Generating secret...")
newsecret = Fernet.generate_key()
with open(settings.ENCKEY_PATH, "wb") as secret_file:
secret_file.write(newsecret)
print("Encryption secret generated and stored in {0}".format(settings.ENCKEY_PATH))
N = 64 # Size of token
# Generate key if __name__ == "__main__":
token = ''.join(secrets.choice(string.ascii_letters + string.digits) for i in range(N)) start = ask_yn("Have you run this program as the correct user (for example, nginx uses www-data)? [y/n] ")
if not start:
print("Please run this as the correct user with: sudo su [user] -s /bin/sh -c 'python3 keygen.py'")
# Decrypt the existing keyfile
key = load_key()
keyf = Fernet(key)
genkey = True
uploadkeysp = Path("uploadkeys")
if not uploadkeysp.is_file():
uploadkeysp.touch()
else: else:
with open("uploadkeys", "rb") as ukf: uploadkeysp = Path("uploadkeys")
# read the encrypted data if not uploadkeysp.is_file():
encrypted_data = ukf.read() uploadkeysp.touch()
try: if decrypt_uploadkeys(): # Decrypt the file
decrypted_data = keyf.decrypt(encrypted_data) # decrypt data N = 64 # Size of key
with open("uploadkeys", "wb") as ukf: key = ''.join(secrets.choice(string.ascii_letters + string.digits) for i in range(N))
ukf.write(decrypted_data) # write the original file print("Your new key is: " + str(key)) # Print key
except InvalidToken: append_uploadkey(key) # Save the new key to file unencrypted
print("The encrypted key data is invalid and cannot be read.") encrypt_uploadkeys() # Encrypt the uploadkeys file
print("It may be necessary to clear the file entirely, which will invalidate all tokens.") else:
proceed = ask_yn("Do you wish to proceed to clearing the uploadkeys file? [y/n] ") print("Exiting.")
if proceed:
os.remove("uploadkeys")
print("Removed uploadkeys file.")
proceed2 = ask_yn("Would you like to continue and generate a new token? [y/n] ")
if not proceed2:
genkey = False
if genkey:
print("Your new token is: " + str(token)) # Print token
encrypt_key(str(token)) # Encrypt the key and save