Allow input from stdin for 'certificate fingerprint' command (#1270)

command/certificate/fingerprint.go

@@ -8,7 +8,9 @@ import (
  //nolint:gosec // support for sha1 fingerprints
  _ "crypto/sha1"
 
+ "github.com/pkg/errors"
  "github.com/smallstep/cli/flags"
+ "github.com/smallstep/cli/utils"
  "github.com/urfave/cli"
  "go.step.sm/cli-utils/errs"
  "go.step.sm/crypto/fingerprint"
@@ -99,21 +101,26 @@ debugging invalid certificates remotely.`,
 }
 
 func fingerprintAction(ctx *cli.Context) error {
- if err := errs.NumberOfArguments(ctx, 1); err != nil {
+ if err := errs.MinMaxNumberOfArguments(ctx, 0, 1); err != nil {
  return err
  }
 
  var (
+ crtFile = ctx.Args().Get(0)
  certs []*x509.Certificate
  serverName = ctx.String("servername")
  roots = ctx.String("roots")
  bundle = ctx.Bool("bundle")
  insecure = ctx.Bool("insecure")
- crtFile = ctx.Args().First()
  format = ctx.String("format")
  useSHA1 = ctx.Bool("sha1")
  )
 
+ // Use stdin if no argument is used.
+ if crtFile == "" {
+ crtFile = "-"
+ }
+
  if useSHA1 && !insecure {
  return errs.RequiredInsecureFlag(ctx, "sha")
  }
@@ -132,17 +139,24 @@ func fingerprintAction(ctx *cli.Context) error {
  return err
  }
  default:
- certs, err = pemutil.ReadCertificateBundle(crtFile)
+ b, err := utils.ReadFile(crtFile)
  if err != nil {
- // Fallback to parse a CSR
- csr, csrErr := pemutil.ReadCertificateRequest(crtFile)
- if csrErr != nil {
- return err
+ return errors.Wrapf(err, "error reading file %s", crtFile)
+ }
+
+ var pemError *pemutil.InvalidPEMError
+ certs, err = pemutil.ParseCertificateBundle(b)
+ switch {
+ case errors.As(err, &pemError) && pemError.Type == pemutil.PEMTypeCertificate:
+ csr, err := pemutil.ParseCertificateRequest(b)
+ if err != nil {
+ return errors.Errorf("file %s does not contain any valid CERTIFICATE or CERTIFICATE REQUEST blocks", crtFile)
  }
- // We will only need the raw DER bytes to generate a fingerprint.
  certs = []*x509.Certificate{
  {Raw: csr.Raw},
  }
+ case err != nil:
+ return fmt.Errorf("error parsing %s: %w", crtFile, err)
  }
  }
 

go.mod

@@ -16,7 +16,7 @@ require (
  github.com/pquerna/otp v1.4.0
  github.com/slackhq/nebula v1.9.3
  github.com/smallstep/assert v0.0.0-20200723003110-82e2b9b3b262
- github.com/smallstep/certificates v0.27.2
+ github.com/smallstep/certificates v0.27.3-0.20240912083530-c118a2a15439
  github.com/smallstep/certinfo v1.12.2
  github.com/smallstep/go-attestation v0.4.4-0.20240109183208-413678f90935
  github.com/smallstep/truststore v0.13.0
@@ -37,12 +37,13 @@ require (
 
 require (
  cloud.google.com/go v0.115.1 // indirect
- cloud.google.com/go/auth v0.9.1 // indirect
+ cloud.google.com/go/auth v0.9.3 // indirect
  cloud.google.com/go/auth/oauth2adapt v0.2.4 // indirect
  cloud.google.com/go/compute/metadata v0.5.0 // indirect
- cloud.google.com/go/iam v1.1.13 // indirect
- cloud.google.com/go/longrunning v0.5.12 // indirect
- cloud.google.com/go/security v1.17.4 // indirect
+ cloud.google.com/go/iam v1.2.0 // indirect
+ cloud.google.com/go/longrunning v0.6.0 // indirect
+ cloud.google.com/go/security v1.18.0 // indirect
+ dario.cat/mergo v1.0.1 // indirect
  filippo.io/edwards25519 v1.1.0 // indirect
  github.com/AndreasBriese/bbloom v0.0.0-20190825152654-46b345b51c96 // indirect
  github.com/Azure/azure-sdk-for-go/sdk/azcore v1.14.0 // indirect
@@ -52,14 +53,15 @@ require (
  github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal v0.7.1 // indirect
  github.com/AzureAD/microsoft-authentication-library-for-go v1.2.2 // indirect
  github.com/Masterminds/goutils v1.1.1 // indirect
- github.com/Masterminds/semver/v3 v3.2.0 // indirect
- github.com/Masterminds/sprig/v3 v3.2.3 // indirect
+ github.com/Masterminds/semver/v3 v3.3.0 // indirect
+ github.com/Masterminds/sprig/v3 v3.3.0 // indirect
  github.com/asaskevich/govalidator v0.0.0-20210307081110-f21760c49a8d // indirect
  github.com/beorn7/perks v1.0.1 // indirect
  github.com/boombuler/barcode v1.0.1 // indirect
  github.com/cespare/xxhash v1.1.0 // indirect
  github.com/cespare/xxhash/v2 v2.3.0 // indirect
  github.com/chzyer/readline v1.5.1 // indirect
+ github.com/coreos/go-oidc/v3 v3.11.0 // indirect
  github.com/corpix/uarand v0.2.0 // indirect
  github.com/cpuguy83/go-md2man/v2 v2.0.4 // indirect
  github.com/creack/pty v1.1.18 // indirect
@@ -71,6 +73,7 @@ require (
  github.com/dustin/go-humanize v1.0.1 // indirect
  github.com/felixge/httpsnoop v1.0.4 // indirect
  github.com/go-chi/chi/v5 v5.1.0 // indirect
+ github.com/go-jose/go-jose/v4 v4.0.2 // indirect
  github.com/go-kit/kit v0.13.0 // indirect
  github.com/go-kit/log v0.2.1 // indirect
  github.com/go-logfmt/logfmt v0.6.0 // indirect
@@ -87,61 +90,61 @@ require (
  github.com/google/go-tpm-tools v0.4.4 // indirect
  github.com/google/go-tspi v0.3.0 // indirect
  github.com/google/s2a-go v0.1.8 // indirect
- github.com/googleapis/enterprise-certificate-proxy v0.3.2 // indirect
+ github.com/googleapis/enterprise-certificate-proxy v0.3.3 // indirect
  github.com/googleapis/gax-go/v2 v2.13.0 // indirect
- github.com/huandu/xstrings v1.4.0 // indirect
- github.com/imdario/mergo v0.3.13 // indirect
+ github.com/huandu/xstrings v1.5.0 // indirect
  github.com/jackc/pgpassfile v1.0.0 // indirect
  github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a // indirect
  github.com/jackc/pgx/v5 v5.6.0 // indirect
  github.com/jackc/puddle/v2 v2.2.1 // indirect
  github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51 // indirect
- github.com/klauspost/compress v1.16.3 // indirect
+ github.com/klauspost/compress v1.17.9 // indirect
  github.com/kr/pty v1.1.8 // indirect
  github.com/kylelemons/godebug v1.1.0 // indirect
  github.com/mattn/go-colorable v0.1.13 // indirect
  github.com/mattn/go-isatty v0.0.20 // indirect
  github.com/mgutz/ansi v0.0.0-20200706080929-d51e80ef957d // indirect
  github.com/mitchellh/copystructure v1.2.0 // indirect
  github.com/mitchellh/reflectwalk v1.0.2 // indirect
- github.com/newrelic/go-agent/v3 v3.33.1 // indirect
+ github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
+ github.com/newrelic/go-agent/v3 v3.34.0 // indirect
  github.com/peterbourgon/diskv/v3 v3.0.1 // indirect
  github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect
  github.com/pmezard/go-difflib v1.0.0 // indirect
- github.com/prometheus/client_golang v1.19.1 // indirect
- github.com/prometheus/client_model v0.5.0 // indirect
- github.com/prometheus/common v0.48.0 // indirect
- github.com/prometheus/procfs v0.12.0 // indirect
- github.com/rs/xid v1.5.0 // indirect
+ github.com/prometheus/client_golang v1.20.3 // indirect
+ github.com/prometheus/client_model v0.6.1 // indirect
+ github.com/prometheus/common v0.55.0 // indirect
+ github.com/prometheus/procfs v0.15.1 // indirect
+ github.com/rs/xid v1.6.0 // indirect
  github.com/russross/blackfriday/v2 v2.1.0 // indirect
  github.com/schollz/jsonstore v1.1.0 // indirect
- github.com/shopspring/decimal v1.3.1 // indirect
+ github.com/shopspring/decimal v1.4.0 // indirect
  github.com/shurcooL/sanitized_anchor_name v1.0.0 // indirect
  github.com/sirupsen/logrus v1.9.3 // indirect
  github.com/smallstep/nosql v0.7.0 // indirect
  github.com/smallstep/pkcs7 v0.0.0-20231024181729-3b98ecc1ca81 // indirect
  github.com/smallstep/scep v0.0.0-20231024192529-aee96d7ad34d // indirect
- github.com/spf13/cast v1.5.0 // indirect
+ github.com/spf13/cast v1.7.0 // indirect
  github.com/weppos/publicsuffix-go v0.20.0 // indirect
  github.com/x448/float16 v0.8.4 // indirect
  go.etcd.io/bbolt v1.3.10 // indirect
  go.opencensus.io v0.24.0 // indirect
- go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.52.0 // indirect
- go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.53.0 // indirect
- go.opentelemetry.io/otel v1.28.0 // indirect
- go.opentelemetry.io/otel/metric v1.28.0 // indirect
- go.opentelemetry.io/otel/trace v1.28.0 // indirect
+ go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.54.0 // indirect
+ go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.54.0 // indirect
+ go.opentelemetry.io/otel v1.29.0 // indirect
+ go.opentelemetry.io/otel/metric v1.29.0 // indirect
+ go.opentelemetry.io/otel/trace v1.29.0 // indirect
  golang.org/x/exp v0.0.0-20240318143956-a85f2c67cd81 // indirect
- golang.org/x/net v0.28.0 // indirect
+ golang.org/x/net v0.29.0 // indirect
  golang.org/x/oauth2 v0.22.0 // indirect
  golang.org/x/sync v0.8.0 // indirect
  golang.org/x/text v0.18.0 // indirect
  golang.org/x/time v0.6.0 // indirect
- google.golang.org/api v0.194.0 // indirect
- google.golang.org/genproto v0.0.0-20240814211410-ddb44dafa142 // indirect
- google.golang.org/genproto/googleapis/api v0.0.0-20240814211410-ddb44dafa142 // indirect
- google.golang.org/genproto/googleapis/rpc v0.0.0-20240814211410-ddb44dafa142 // indirect
- google.golang.org/grpc v1.65.0 // indirect
+ google.golang.org/api v0.196.0 // indirect
+ google.golang.org/genproto v0.0.0-20240903143218-8af14fe29dc1 // indirect
+ google.golang.org/genproto/googleapis/api v0.0.0-20240827150818-7e3bb234dfed // indirect
+ google.golang.org/genproto/googleapis/rpc v0.0.0-20240903143218-8af14fe29dc1 // indirect
+ google.golang.org/grpc v1.66.0 // indirect
  gopkg.in/yaml.v3 v3.0.1 // indirect
  howett.net/plist v1.0.0 // indirect
  k8s.io/klog/v2 v2.100.1 // indirect