SSH Authorization

# SPDX-FileCopyrightText: 2012 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
##############################################################################

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.103591");
  script_version("2023-07-28T16:09:07+0000");
  script_tag(name:"last_modification", value:"2023-07-28 16:09:07 +0000 (Fri, 28 Jul 2023)");
  script_tag(name:"creation_date", value:"2012-10-24 10:55:52 +0100 (Wed, 24 Oct 2012)");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:N/A:N");
  script_tag(name:"cvss_base", value:"0.0");
  script_name("SSH Authorization"); # nb: Don't change the script name, this name is hardcoded within some manager functions...
  script_category(ACT_SETTINGS);
  script_copyright("Copyright (C) 2012 Greenbone AG");
  script_family("Credentials");

  # Preference type to trigger client-side ssh-login selection per target
  script_add_preference(name:"Keys:", type:"sshlogin", value:"-", id:5);
  script_add_preference(name:"SSH login name:", type:"entry", value:"", id:1); # nb: Don't change this name and id, these are hardcoded / used in GVMd
  script_add_preference(name:"SSH password (unsafe!):", type:"password", value:"", id:3); # nb: Don't change this name and id, these are hardcoded / used in GVMd
  script_add_preference(name:"SSH public key:", type:"file", value:"", id:6);
  script_add_preference(name:"SSH private key:", type:"file", value:"", id:4); # nb: Don't change this name and id, these are hardcoded / used in GVMd
  script_add_preference(name:"SSH key passphrase:", type:"password", value:"", id:2); # nb: Don't change this name and id, these are hardcoded / used in GVMd
  script_add_preference(name:"SSH privilege login name:", type:"entry", value:"", id:7); # nb: Don't change this name and id, these are hardcoded / used in GVMd
  script_add_preference(name:"SSH privilege password:", type:"password", value:"", id:8); # nb: Don't change this name and id, these are hardcoded / used in GVMd

  script_tag(name:"summary", value:"This script allows users to enter the information
  required to authorize and login via ssh protocol.

  These data will be used by other tests to executed authenticated checks.");

  script_tag(name:"qod_type", value:"remote_banner");

  exit(0);
}

ssh_login_name     = script_get_preference( "SSH login name:", id:1 );
ssh_password       = script_get_preference( "SSH password (unsafe!):", id:3 );
ssh_public_key     = script_get_preference_file_content( "SSH public key:", id:6 );
ssh_private_key    = script_get_preference_file_content( "SSH private key:", id:4 );
ssh_key_passphrase = script_get_preference( "SSH key passphrase:", id:2 );
ssh_priv_login     = script_get_preference( "SSH privilege login name:", id:7 );
ssh_priv_password  = script_get_preference( "SSH privilege password:", id:8 );

if( ssh_login_name )     set_kb_item( name:"Secret/SSH/login", value:ssh_login_name );
if( ssh_password )       set_kb_item( name:"Secret/SSH/password", value:ssh_password );
if( ssh_public_key )     set_kb_item( name:"Secret/SSH/publickey", value:ssh_public_key );
if( ssh_private_key )    set_kb_item( name:"Secret/SSH/privatekey", value:ssh_private_key );
if( ssh_key_passphrase ) set_kb_item( name:"Secret/SSH/passphrase", value:ssh_key_passphrase );
if( ssh_priv_login )     set_kb_item( name:"Secret/SSH/privlogin", value:ssh_priv_login );
if( ssh_priv_password )  set_kb_item( name:"Secret/SSH/privpassword", value:ssh_priv_password );

exit( 0 );