Changeset View
Changeset View
Standalone View
Standalone View
share/rpcauth/rpcauth.py
| #!/usr/bin/env python3 | #!/usr/bin/env python3 | ||||
| # Copyright (c) 2015-2017 The Bitcoin Core developers | # Copyright (c) 2015-2017 The Bitcoin Core developers | ||||
| # Distributed under the MIT software license, see the accompanying | # Distributed under the MIT software license, see the accompanying | ||||
| # file COPYING or http://www.opensource.org/licenses/mit-license.php. | # file COPYING or http://www.opensource.org/licenses/mit-license.php. | ||||
| import base64 | import base64 | ||||
| from binascii import hexlify | |||||
| import hmac | import hmac | ||||
| import os | import os | ||||
| from random import SystemRandom | |||||
| import sys | import sys | ||||
| def generate_salt(): | def generate_salt(size): | ||||
| # This uses os.urandom() underneath | """Create size byte hex salt""" | ||||
| cryptogen = SystemRandom() | return hexlify(os.urandom(size)).decode() | ||||
| # Create 16 byte hex salt | |||||
| salt_sequence = [cryptogen.randrange(256) for _ in range(16)] | |||||
| return ''.join([format(r, 'x') for r in salt_sequence]) | |||||
| def generate_password(): | def generate_password(): | ||||
| """Create 32 byte b64 password""" | """Create 32 byte b64 password""" | ||||
| return base64.urlsafe_b64encode(os.urandom(32)).decode('utf-8') | return base64.urlsafe_b64encode(os.urandom(32)).decode('utf-8') | ||||
| def password_to_hmac(salt, password): | def password_to_hmac(salt, password): | ||||
| m = hmac.new(bytearray(salt, 'utf-8'), | m = hmac.new(bytearray(salt, 'utf-8'), | ||||
| bytearray(password, 'utf-8'), 'SHA256') | bytearray(password, 'utf-8'), 'SHA256') | ||||
| return m.hexdigest() | return m.hexdigest() | ||||
| def main(): | def main(): | ||||
| if len(sys.argv) < 2: | if len(sys.argv) < 2: | ||||
| sys.stderr.write( | sys.stderr.write( | ||||
| 'Please include username (and an optional password, will generate one if not provided) as an argument.\n') | 'Please include username (and an optional password, will generate one if not provided) as an argument.\n') | ||||
| sys.exit(0) | sys.exit(0) | ||||
| username = sys.argv[1] | username = sys.argv[1] | ||||
| salt = generate_salt() | # Create 16 byte hex salt | ||||
| salt = generate_salt(16) | |||||
| if len(sys.argv) > 2: | if len(sys.argv) > 2: | ||||
| password = sys.argv[2] | password = sys.argv[2] | ||||
| else: | else: | ||||
| password = generate_password() | password = generate_password() | ||||
| password_hmac = password_to_hmac(salt, password) | password_hmac = password_to_hmac(salt, password) | ||||
| print('String to be appended to bitcoin.conf:') | print('String to be appended to bitcoin.conf:') | ||||
| print('rpcauth={0}:{1}${2}'.format(username, salt, password_hmac)) | print('rpcauth={0}:{1}${2}'.format(username, salt, password_hmac)) | ||||
| print('Your password:\n{0}'.format(password)) | print('Your password:\n{0}'.format(password)) | ||||
| if __name__ == '__main__': | if __name__ == '__main__': | ||||
| main() | main() | ||||