Method generateSSHKeys

ssh/ssh.ts:445–644

(msg: Api.Message, client: any, mode: "add" | "replace" = "add")

          break;

        case "set":
          await this.setTarget(msg, args.slice(1).join(" "));
          break;

        case "info":
          await this.showInfo(msg);
          break;

        case "restart":
          await this.restartSSH(msg);
          break;

        default:
          await msg.edit({
            text: `❓ 未知子命令，使用 <code>${mainPrefix}ssh help</code> 查看说明`,
            parseMode: "html"
          });
      }
    } catch (error: any) {
      console.error("[ssh] 执行失败:", error);
      await msg.edit({
        text: `❌ <b>执行失败:</b> ${htmlEscape(error.message || "未知错误")}`,
        parseMode: "html"
      });
    }
  }

  // 生成SSH密钥
  private async generateSSHKeys(msg: Api.Message, client: any, mode: "add" | "replace" = "add"): Promise<void> {
    await msg.edit({ text: "🔄 正在生成SSH密钥对...", parseMode: "html" });

    const timestamp = dayjs().format("YYYYMMDD_HHmmss");
    const workDir = path.join(createDirectoryInTemp("sshkey"), `keys_${timestamp}`);
    const keyName = `ssh_key_${timestamp}`;

    try {
      // 创建工作目录
      fs.mkdirSync(workDir, { recursive: true });

      // 生成RSA密钥对 - 使用验证过的路径
      if (!validatePath(keyName)) {
        throw new Error("密钥名称包含非法字符");
      }
      const keyPath = path.join(workDir, keyName);
      await execFileAsync("ssh-keygen", [
        "-t", "rsa", "-b", "4096", "-f", keyPath, "-N", "", "-C", `generated_${timestamp}`,
      ]);

      // 读取密钥文件
      const privateKey = fs.readFileSync(keyPath, "utf-8");
      const publicKey = fs.readFileSync(`${keyPath}.pub`, "utf-8").trim();

      // 验证公钥格式
      const keyParts = publicKey.split(/\s+/);
      if (keyParts.length < 2 || !keyParts[0].startsWith('ssh-')) {
        throw new Error("生成的公钥格式无效");
      }