DFFML Rolling Alice: Engineering Logs: Volume 0: Architecting Alice, 11 May 2022

Previous Meeting Next Meeting

⏯

youtube image

►

From YouTube: Architecting Alice: Volume 0: Context: Part 25: StepCAing into the light?

Description

https://github.com/intel/dffml/discussions/1369#discussioncomment-2726286

A

All right, we are still messing with our uh keys here, so, let's find out. Where did that go so we would like to get back to our tab.

A

It's time to close a few tabs.

A

Once we get stuff on chain, we can close tabs all right.

A

Okay here so looks like you know, we've got step, looks like it's. There looks like that's the right path, let's try it down or let's try to run it just to confirm step c, a okay, open, ca.json.

A

Okay, so it looks like it works.

A

What's the license on the same patch youtube? Great okay? So what's it matter about that too many positional arguments were provided in step, config, okay, so maybe we need to go look at the docs because it's probably changed since this issue happened so.

A

uh What do we have? This is a command that says crypto.

A

Okay, positional arguments.

A

All right step command; okay,.

A

Flags be environment, variables.

A

A

A

Right now, excuse me.

A

All right, so, let's go look at their ssh stuff, ssh, step ca.

A

Step certificate.

A

Step crypto, jwt, inspect, okay, so step crypto.

A

All right so config so steps here.

A

A

Okay, so I think we're looking at the wrong thing so step cli, okay, yeah we're looking at the wrong thing here: linux binaries.

A

How did we end up with the wrong thing.

A

How do we install the certificates now, I'm concerned? This is still somewhat weird.

A

Maybe it just got moved over.

A

A

A

A step is not technically required, it is recommended. Okay, yeah.

A

A

A

Okay, so we're gonna find our place step ca.

A

A

Where were those curl commands hey.

A

All right here they are.

A

Okay, install lace, release, step cli, grab that all right.

A

What do we have here all right? Let's write this down so.

A

And then select and highlight, and then you can do this and that'll run the line and put the output right back in your shell.

A

A

A

A

Yeah so then, this one step c, a okay yeah, so.

A

We're just gonna add both these to path.

A

A

So we're gonna go. You know, here's a list of the binaries here's uh within the step, ca; here's the binary name, step within step. Here's here this binary name, step um with dfml.prepend to path.

A

And we're gonna do an expansion all right, so we're gonna prepend. All these binaries.

A

um That's that name.

A

All right there we go then aries.

A

Oh, it shows me.

A

All right so basically go through and prepend all those to a path, not list where's. This so.

A

All right command expected server test path, lightning list all right, so we accidentally added.

A

Prepend to path and then expansion.

A

All right so we'll step into this.

A

All right, we need to step in uh find it up here.

A

Until it gets you to the return, I think.

A

Okay, what's that, let's comp? Okay, so those are some bin directories there.

A

Prepend, a path.

A

For your pen to path rx, okay, args that looks very reasonable to me.

A

So what else? Usually it's because I'm passing the wrong thing there.

A

Okay, so where's it choking.

A

So process p open.

A

On five, thirty, three.

A

A

Trim key dot, split.

A

Foreign, because this is step.

A

Okay- and we don't need that because we prepended the path, so we can just say.

A

Gen key split and format, key split.

A

Just for speed.

A

A

A

All right, please enter the password.

A

Okay, what did we get so process read line standard out, read line okay, so this is crypto key okay, it looked like it looks like it might have. Actually, given us a output key here in ed 255, 19 format.

A

um Okay, so, let's see about the host key, then can we get that into our friendly format?

A

Dot pub? So we don't need that so we'll just say: identity root, key contents.

A

A

Identity root, keep him path.

A

A

Ssh key dot, pem.

A

Object or type bytes is not json serializable.

A

A

All right, let's see.

A

No password or what can we do from json web token? He encoded an existing json web code. Token create a pam representing the key.

A

Coded in an existing json web token, okay. So what about our json web token library? So I think we can say so. Maybe we can just use step to convert so export.

A

So how do we create a key.

A

A

Generate k, t y e c curve.

A

Okay, so maybe it's okp for kty and curve is okay, I'll, say that so let's try then.

A

So what is this 789 dumpster flow? Objective? Type bytes is not json serializable. Okay. So that's because we have these byte values in our config.

A

Okay and those byte values are that what are the byte values? Oh the passphrase, because we set the config.

A

A

Okay, so we don't need a, we were not protecting it in this case. We're not protecting it in this case, okay, but we need the private key. We want the private key.

A

Yeah, let's do it this way, let's use step we're going to use step, anyways we're going to use step to generate the key, we'll just pull it in we're. Almost there.

A

A

Okay, yeah, so it did take, it must have taken, because we must have the key.

A

To not even notice.

A

Oh, my god did it work. Did it not work print jwt.

A

None import from pam, okay,.

A

Okay: let's try! What about this step.

A

A

Good good good on you requiring the insecure flag there. Okay, kid thumbprints, it looks like we've got a key id.

A

A

Jwk, let's set the jwk, there should set the jwk. There say that we're going to use this.

A

Let's see what happens.

A

Will that work, oh, it might have worked. No.

A

It could have manifest.

A

Okay, don't worry about that right now. Just do dumps on this did that work.

A

Okay kind of like into cutting stir, not jwk, okay, so it didn't work.

A

um Okay, for here.

A

Zero working I'll go to not working.