Files
Redflag/scripts/generate-keypair.go
Fimeg ec3ba88459 feat: machine binding and version enforcement
migration 017 adds machine_id to agents table
middleware validates X-Machine-ID header on authed routes
agent client sends machine ID with requests
MIN_AGENT_VERSION config defaults 0.1.22
version utils added for comparison

blocks config copying attacks via hardware fingerprint
old agents get 426 upgrade required
breaking: <0.1.22 agents rejected
2025-11-02 09:30:04 -05:00

34 lines
935 B
Go

//go:build ignore
// +build ignore
package main
import (
"crypto/ed25519"
"crypto/rand"
"encoding/hex"
"fmt"
"os"
)
func main() {
// Generate Ed25519 keypair
publicKey, privateKey, err := ed25519.GenerateKey(rand.Reader)
if err != nil {
fmt.Printf("Failed to generate keypair: %v\n", err)
os.Exit(1)
}
// Output keys in hex format
fmt.Printf("Ed25519 Keypair Generated:\n\n")
fmt.Printf("Private Key (keep secret, add to server env):\n")
fmt.Printf("REDFLAG_SIGNING_PRIVATE_KEY=%s\n", hex.EncodeToString(privateKey))
fmt.Printf("\nPublic Key (embed in agent binaries):\n")
fmt.Printf("REDFLAG_PUBLIC_KEY=%s\n", hex.EncodeToString(publicKey))
fmt.Printf("\nPublic Key Fingerprint (for database):\n")
fmt.Printf("Fingerprint: %s\n", hex.EncodeToString(publicKey[:8])) // First 8 bytes as fingerprint
fmt.Printf("\nAdd the private key to your server environment and embed the public key in agent builds.\n")
}