Weiterentwicklung
This commit is contained in:
55
client/get_cert_and_connect.sh
Normal file
55
client/get_cert_and_connect.sh
Normal file
@ -0,0 +1,55 @@
|
||||
#!/bin/bash
|
||||
set -e
|
||||
|
||||
# Farbige Ausgaben
|
||||
GREEN='\033[0;32m'
|
||||
YELLOW='\033[1;33m'
|
||||
RED='\033[0;31m'
|
||||
NC='\033[0m' # No Color
|
||||
|
||||
# Konfiguration
|
||||
CA_HOST="100.87.87.5" # IP der CA-VM
|
||||
CA_USER="alf" # Nutzer auf der CA-VM
|
||||
CA_PORT=22 # Port für SSH-Zugriff auf die CA
|
||||
CA_TARGET=2222 # Port für SSH-Zugriff auf Ziel-VM
|
||||
REMOTE_SIGN_SCRIPT="/home/alf/remote_sign.sh"
|
||||
TARGET_HOST="100.87.87.80" # Zielsystem (Rechner 2)
|
||||
SSH_USER="alf" # Ziel-Login-Benutzer
|
||||
KEY_DIR="./temp_keys"
|
||||
KEY_NAME="temp_user_key"
|
||||
VALIDITY=300 # 5 Minuten
|
||||
|
||||
mkdir -p "$KEY_DIR"
|
||||
cd "$KEY_DIR"
|
||||
|
||||
echo -e "${YELLOW}[*] Prüfe auf vorhandene temporäre Schlüssel...${NC}"
|
||||
if [[ -f "$KEY_NAME" || -f "${KEY_NAME}.pub" || -f "${KEY_NAME}-cert.pub" ]]; then
|
||||
echo -e "${YELLOW}[!] Vorherige temporäre Schlüssel werden gelöscht...${NC}"
|
||||
rm -f "$KEY_NAME" "$KEY_NAME.pub" "$KEY_NAME-cert.pub"
|
||||
fi
|
||||
|
||||
echo -e "${YELLOW}[*] Generiere temporären SSH-Key...${NC}"
|
||||
ssh-keygen -f "$KEY_NAME" -N "" -C "$SSH_USER@temp" > /dev/null
|
||||
|
||||
echo -e "${YELLOW}[*] Sende Public Key zur CA (${CA_HOST})...${NC}"
|
||||
scp -P "$CA_PORT" "${KEY_NAME}.pub" "${CA_USER}@${CA_HOST}:/tmp/" || {
|
||||
echo -e "${RED}[!] Fehler beim Senden des Public Keys zur CA${NC}"
|
||||
exit 1
|
||||
}
|
||||
|
||||
echo -e "${YELLOW}[*] Fordere Signatur von CA an...${NC}"
|
||||
ssh -p "$CA_PORT" "${CA_USER}@${CA_HOST}" \
|
||||
"$REMOTE_SIGN_SCRIPT /tmp/${KEY_NAME}.pub $SSH_USER $VALIDITY" || {
|
||||
echo -e "${RED}[!] Fehler bei der Signierung durch die CA${NC}"
|
||||
exit 1
|
||||
}
|
||||
|
||||
echo -e "${YELLOW}[*] Lade signiertes Zertifikat von CA...${NC}"
|
||||
scp -P "$CA_PORT" "${CA_USER}@${CA_HOST}:/tmp/${KEY_NAME}-cert.pub" . || {
|
||||
echo -e "${RED}[!] Fehler beim Abrufen des Zertifikats von der CA${NC}"
|
||||
exit 1
|
||||
}
|
||||
|
||||
echo -e "${GREEN}[✓] Zertifikat erfolgreich erhalten${NC}"
|
||||
echo -e "${YELLOW}[*] Starte SSH-Verbindung zum Zielsystem (${TARGET_HOST}) über Port ${CA_TARGET}...${NC}"
|
||||
ssh -p "$CA_TARGET" -i "$KEY_NAME" "$SSH_USER@$TARGET_HOST"
|
||||
33
client/get_cert_and_connect.sh.old
Normal file
33
client/get_cert_and_connect.sh.old
Normal file
@ -0,0 +1,33 @@
|
||||
#!/bin/bash
|
||||
set -e
|
||||
|
||||
# Konfiguration
|
||||
CA_HOST="100.87.87.5" # Hostname oder IP der CA-VM
|
||||
CA_USER="alf" # Nutzer auf CA-VM
|
||||
CA_PORT=22 # Port SSH-Zugang CA
|
||||
CA_TARGET=2222 # Port SSH-Zugang Ziel-VM
|
||||
REMOTE_SIGN_SCRIPT="/home/alf/remote_sign.sh"
|
||||
TARGET_HOST="100.87.87.80" # Zielsystem (Rechner 2)
|
||||
SSH_USER="alf" # Ziel-Login-Benutzer
|
||||
KEY_DIR="./temp_keys"
|
||||
KEY_NAME="temp_user_key"
|
||||
VALIDITY=300 # 5 Minuten
|
||||
|
||||
mkdir -p "$KEY_DIR"
|
||||
cd "$KEY_DIR"
|
||||
|
||||
# 1. Temporären Key erzeugen
|
||||
ssh-keygen -f "$KEY_NAME" -N "" -C "$SSH_USER@temp" > /dev/null
|
||||
|
||||
# 2. Public Key zur CA kopieren
|
||||
scp -P "$CA_PORT" "${KEY_NAME}.pub" "${CA_USER}@${CA_HOST}:/tmp/"
|
||||
|
||||
# 3. Signaturprozess auf CA anstoßen
|
||||
ssh -p "$CA_PORT" "${CA_USER}@${CA_HOST}" \
|
||||
"$REMOTE_SIGN_SCRIPT /tmp/${KEY_NAME}.pub $SSH_USER $VALIDITY"
|
||||
|
||||
# 4. Zertifikat zurückholen
|
||||
scp -P "$CA_PORT" "${CA_USER}@${CA_HOST}:/tmp/${KEY_NAME}-cert.pub" .
|
||||
|
||||
# 5. Verbindung aufbauen zum Zielsystem über alternativen Port
|
||||
ssh -p "$CA_TARGET" -i "$KEY_NAME" "$SSH_USER@$TARGET_HOST"
|
||||
38
client/temp_keys/temp_user_key
Normal file
38
client/temp_keys/temp_user_key
Normal file
@ -0,0 +1,38 @@
|
||||
-----BEGIN OPENSSH PRIVATE KEY-----
|
||||
b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAABlwAAAAdzc2gtcn
|
||||
NhAAAAAwEAAQAAAYEAyHvmcx0FD9inVdBcqzPJMdHH9PUO8KSUpEXIBX2Jm0WbiDdujV10
|
||||
I1XNG7PvTGvSYiC6Fgkfu8SPJhcoOdPApzLH7ZDdMnNHvn11ZkGCJvp/S2H8YAOcs//Fqa
|
||||
2JM1Fmm2ne+etEHOLaYlZOq0cgo5ILUFlLysciXQSyhD7RWu0ocWWEkNJ4fJ9wyZKjPe4p
|
||||
wUzflkHs1od3JjxUNiDq2rQ1j8amfCbLae3Oc9ZgkH+qG3djezQ9bIcWYY8DgSK5/DDjmh
|
||||
/TXXrQFPslaHMuGXGqy1SZng/XgQDyAebbd0dO2pYxrS2DcaQmULGTTf4Yi7jt6iD4Aw/4
|
||||
P93ZRlLMDzdNeWo+ZJy/2r7aU7buDkV+Kkxb/QGbBufdeMYgXebmxrHBwsXtYPVREAIbGN
|
||||
ZzrD0qnKNlcRSHb/j1RorQqk+i6U6m12FjYQsq9uZj5WcUdU9qAHQUT/7VNAm0tbvPzzW2
|
||||
2DPLTqNPZCbFVz6wKK+Auust2gJyWqMWnJXkmnhxAAAFgG+A+AlvgPgJAAAAB3NzaC1yc2
|
||||
EAAAGBAMh75nMdBQ/Yp1XQXKszyTHRx/T1DvCklKRFyAV9iZtFm4g3bo1ddCNVzRuz70xr
|
||||
0mIguhYJH7vEjyYXKDnTwKcyx+2Q3TJzR759dWZBgib6f0th/GADnLP/xamtiTNRZptp3v
|
||||
nrRBzi2mJWTqtHIKOSC1BZS8rHIl0EsoQ+0VrtKHFlhJDSeHyfcMmSoz3uKcFM35ZB7NaH
|
||||
dyY8VDYg6tq0NY/Gpnwmy2ntznPWYJB/qht3Y3s0PWyHFmGPA4Eiufww45of01160BT7JW
|
||||
hzLhlxqstUmZ4P14EA8gHm23dHTtqWMa0tg3GkJlCxk03+GIu47eog+AMP+D/d2UZSzA83
|
||||
TXlqPmScv9q+2lO27g5FfipMW/0Bmwbn3XjGIF3m5saxwcLF7WD1URACGxjWc6w9KpyjZX
|
||||
EUh2/49UaK0KpPoulOptdhY2ELKvbmY+VnFHVPagB0FE/+1TQJtLW7z881ttgzy06jT2Qm
|
||||
xVc+sCivgLrrLdoCclqjFpyV5Jp4cQAAAAMBAAEAAAGABt4frc/PrZRJXyotEnxKpxc9l0
|
||||
mRwnKQ2PO+/1kmjpga1Na5RcRuxwsYZJuMVfzXjx754OldGeyIztA6Q4jab5/Qs3Wj7id+
|
||||
zKq1i9Qwpi8sjyODJrLY+l2HouFb8tMWBbrhtYP2qFqpCndUaI+eMZw+IPl+HCsoJTGU/+
|
||||
y69TdsjD3jBacAE5zOm0kXqHZxHbsJabdGaq7nSPsGE3ibMvS7ZPp0F4qoqy9HRDaSxkBp
|
||||
TlmPodfPRtl1zc+9Wf4be1LOLvQ0SKyv7sMD82LLdz6cWF4xTjsXXP3LQ+y6vLokPkJA42
|
||||
F01EB5p0aCpJCI5EfSsZ8t0+A11EWWoDnfYLaZs9m+7LWSFSvEnME/zsczMP87TVbo+dbW
|
||||
ThqQH6ARmTspX4xVLn6OWHx5qD+AVgIbRTQPYbgygYFsI/XMVtuCefUA1TqWIrsTu62bI9
|
||||
McYpF7I2wn9LfyIcnUGI1TIJb7usun2Y1mOwpeLk5kTJabZp5VbwpPAXFkO/xF+/Q1AAAA
|
||||
wHjJHeF7cp8HYIZqeqkFgK2zEbkppLVOWAh4vedoTqxmMbCo3+V4ztFapM+fKOs2HhxMuG
|
||||
JEDB3T0WfGZGNhE+L6wiW0A67F3uWVuwSUweehAFz49saN7RYRuAgnhyOqvdfFx1P36eNN
|
||||
pVKLJP8wDMHeKtaas7oN2Lqp1J2dtxt5fVz+FzKIW3l3sIubuE6HCmTrBam/z6DJ+GbXMr
|
||||
/DOS5nyAncMkaKbnp78TYltMJb7I35vGD0nrk7DfTUE+3M2QAAAMEA9Yh6HttJe9aTBHMv
|
||||
e0KYe5z639sXfTChuJqD0USxo42CXcKrmJpE56pydoNww0ENcMdimWIRY07vCvznrD1l6q
|
||||
8JgQS4TA1CmrIvSNFO+5/x2SG2SxjuuPkjI6Sl6fosFnOPH8dXbNEkHKuGF3z1nIecg3s6
|
||||
3s3buMeLKxj+IMrTAhLRkKg2JxqEPhvDIS0RK607Fs3TlDr1rBm+reyhSiK+rSo8hpDy55
|
||||
nOYRPJAlg51gOlBw+T74u7yVcYa83nAAAAwQDRB8xfvfRmfb2j+rV0AO+yWQKYSNqurnN2
|
||||
2ZKZFivxC60yiQtsrpZ9guSSb5kgNoxwCxcRIXyRnB+doC+Kvx9gZrFjiOYsHg1NEOl41r
|
||||
uxCPydhO0Dar8l7cyVksyl2TRTVbu8OpjS/PeUQbKvV9RTKkqOdRIUbwMY7QlASJ99kBAp
|
||||
4yQLm3yrfaepeQCeHJGil9cBcsgaTuTruBlWNvyVe2KyzfW6XAzXtRQTouiiauQ7QZz3Aw
|
||||
5W+fi3Ir/XS+cAAAAIYWxmQHRlbXABAgM=
|
||||
-----END OPENSSH PRIVATE KEY-----
|
||||
1
client/temp_keys/temp_user_key.pub
Normal file
1
client/temp_keys/temp_user_key.pub
Normal file
@ -0,0 +1 @@
|
||||
ssh-rsa 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 alf@temp
|
||||
Reference in New Issue
Block a user