# vim:ft=sh:
# fedora setup

local host
local found
local expected
local obtained

wget https://admin.fedoraproject.org/ssh_known_hosts -O ~/.ssh/fedora-known_hosts
while read host; do
	found=$(grep $(dig +short "${host}") ~/.ssh/fedora-known_hosts)
	if test -n "${found}"; then
		chmod u+w ~/.ssh/config
		cat >>~/.ssh/config <<EOF

Host $host
	HostKeyAlias $(echo "${found}" | cut -d, -f1)
	IdentityFile ~/.ssh/fedora-id_rsa
	UserKnownHostsFile /dev/null
	GlobalKnownHostsFile ~/.ssh/fedora-known_hosts
EOF
		chmod u-w ~/.ssh/config
	fi
done <<-EOFOUT
	fedorapeople.org
	git.fedorahosted.org
EOFOUT
# git.fedorahosted.org ~ fedorahosted.org

# github
expected=$(wget https://help.github.com/articles/generating-ssh-keys -O- \
  | xmllint --html --xpath \
    "//pre[@class='command-line']/span/text()[starts-with(.,'RSA key fingerprint is ')]" \
    - | cut -c24-70)

obtained=$(expect <<-EOF
	log_user 0
	spawn ssh git@github.com \
	  -oStrictHostKeyChecking=ask \
	  -oUserKnownHostsFile=~/.ssh/github-known_hosts \
	  -oIdentityFile=/dev/null
	expect -re {RSA key fingerprint is ([[:xdigit:]]{2}(?:[:][[:xdigit:]]{2}){15})} {
		set fingerprint \$expect_out(1,string)
		puts "\$fingerprint"
		send "no\r"
		sleep 1
	}
EOF
)

[ "${obtained}" = "${expected}" ] \
  && ssh-keyscan github.com >~/.ssh/github-known_hosts 2>/dev/null
  || echo "Documented and obtained RSA fingerprint does NOT match"