class Net::SSH::Authentication::Methods::Publickey

Implements the “publickey” SSH authentication method.

Public Instance Methods

authenticate(next_service, username, password=nil) click to toggle source

Attempts to perform public-key authentication for the given username, trying each identity known to the key manager. If any of them succeed, returns true, otherwise returns false. This requires the presence of a key manager.

# File lib/net/ssh/authentication/methods/publickey.rb, line 16
def authenticate(next_service, username, password=nil)
  return false unless key_manager

  key_manager.each_identity do |identity|
    return true if authenticate_with(identity, next_service, username)
  end

  return false
end

Private Instance Methods

authenticate_with(identity, next_service, username) click to toggle source

Attempts to perform public-key authentication for the given username, with the given identity (public key). Returns true if successful, or false otherwise.

# File lib/net/ssh/authentication/methods/publickey.rb, line 49
def authenticate_with(identity, next_service, username)
  debug { "trying publickey (#{identity.fingerprint})" }
  send_request(identity, username, next_service)

  message = session.next_message

  case message.type
  when USERAUTH_PK_OK
    buffer = build_request(identity, username, next_service, true)
    sig_data = Net::SSH::Buffer.new
    sig_data.write_string(session_id)
    sig_data.append(buffer.to_s)

    sig_blob = key_manager.sign(identity, sig_data)

    send_request(identity, username, next_service, sig_blob.to_s)
    message = session.next_message

    case message.type
    when USERAUTH_SUCCESS
      debug { "publickey succeeded (#{identity.fingerprint})" }
      return true
    when USERAUTH_FAILURE
      debug { "publickey failed (#{identity.fingerprint})" }

      raise Net::SSH::Authentication::DisallowedMethod unless
        message[:authentications].split(/,/).include? 'publickey'

      return false
    else
      raise Net::SSH::Exception,
        "unexpected server response to USERAUTH_REQUEST: #{message.type} (#{message.inspect})"
    end

  when USERAUTH_FAILURE
    return false

  else
    raise Net::SSH::Exception, "unexpected reply to USERAUTH_REQUEST: #{message.type} (#{message.inspect})"
  end
end
build_request(pub_key, username, next_service, has_sig) click to toggle source

Builds a packet that contains the request formatted for sending a public-key request to the server.

# File lib/net/ssh/authentication/methods/publickey.rb, line 30
def build_request(pub_key, username, next_service, has_sig)
  blob = Net::SSH::Buffer.new
  blob.write_key pub_key

  userauth_request(username, next_service, "publickey", has_sig,
    pub_key.ssh_type, blob.to_s)
end
send_request(pub_key, username, next_service, signature=nil) click to toggle source

Builds and sends a request formatted for a public-key authentication request.

# File lib/net/ssh/authentication/methods/publickey.rb, line 40
def send_request(pub_key, username, next_service, signature=nil)
  msg = build_request(pub_key, username, next_service, !signature.nil?)
  msg.write_string(signature) if signature
  send_message(msg)
end