Changeset View
Changeset View
Standalone View
Standalone View
share/rpcauth/rpcauth.py
| #!/usr/bin/env python3 | #!/usr/bin/env python3 | ||||
| # Copyright (c) 2015-2017 The Bitcoin Core developers | # Copyright (c) 2015-2018 The Bitcoin Core developers | ||||
| # Distributed under the MIT software license, see the accompanying | # Distributed under the MIT software license, see the accompanying | ||||
| # file COPYING or http://www.opensource.org/licenses/mit-license.php. | # file COPYING or http://www.opensource.org/licenses/mit-license.php. | ||||
| import base64 | from argparse import ArgumentParser | ||||
| from base64 import urlsafe_b64encode | |||||
| from binascii import hexlify | from binascii import hexlify | ||||
| from getpass import getpass | |||||
| from os import urandom | |||||
| import hmac | import hmac | ||||
| import os | |||||
| import sys | |||||
| def generate_salt(size): | def generate_salt(size): | ||||
| """Create size byte hex salt""" | """Create size byte hex salt""" | ||||
| return hexlify(os.urandom(size)).decode() | return hexlify(urandom(size)).decode() | ||||
| def generate_password(): | def generate_password(): | ||||
| """Create 32 byte b64 password""" | """Create 32 byte b64 password""" | ||||
| return base64.urlsafe_b64encode(os.urandom(32)).decode('utf-8') | return urlsafe_b64encode(urandom(32)).decode('utf-8') | ||||
| def password_to_hmac(salt, password): | def password_to_hmac(salt, password): | ||||
| m = hmac.new(bytearray(salt, 'utf-8'), | m = hmac.new(bytearray(salt, 'utf-8'), | ||||
| bytearray(password, 'utf-8'), 'SHA256') | bytearray(password, 'utf-8'), 'SHA256') | ||||
| return m.hexdigest() | return m.hexdigest() | ||||
| def main(): | def main(): | ||||
| if len(sys.argv) < 2: | parser = ArgumentParser( | ||||
| sys.stderr.write( | description='Create login credentials for a JSON-RPC user') | ||||
| 'Please include username (and an optional password, will generate one if not provided) as an argument.\n') | parser.add_argument('username', help='the username for authentication') | ||||
| sys.exit(0) | parser.add_argument( | ||||
| 'password', help='leave empty to generate a random password or specify "-" to prompt for password', nargs='?') | |||||
| username = sys.argv[1] | args = parser.parse_args() | ||||
| if not args.password: | |||||
| args.password = generate_password() | |||||
| elif args.password == '-': | |||||
| args.password = getpass() | |||||
| # Create 16 byte hex salt | # Create 16 byte hex salt | ||||
| salt = generate_salt(16) | salt = generate_salt(16) | ||||
| if len(sys.argv) > 2: | password_hmac = password_to_hmac(salt, args.password) | ||||
| password = sys.argv[2] | |||||
| else: | |||||
| password = generate_password() | |||||
| password_hmac = password_to_hmac(salt, password) | |||||
| print('String to be appended to bitcoin.conf:') | print('String to be appended to bitcoin.conf:') | ||||
| print('rpcauth={0}:{1}${2}'.format(username, salt, password_hmac)) | print('rpcauth={0}:{1}${2}'.format(args.username, salt, password_hmac)) | ||||
| print('Your password:\n{0}'.format(password)) | print('Your password:\n{0}'.format(args.password)) | ||||
| if __name__ == '__main__': | if __name__ == '__main__': | ||||
| main() | main() | ||||