From d81400d93b013481a216b4555a99b5f77c56aae3 Mon Sep 17 00:00:00 2001
From: Stefan Karpinski <stefan@karpinski.org>
Date: Thu, 3 Dec 2020 11:39:05 -0500
Subject: [PATCH] bundled known hosts: generate file on the fly

---
 src/known_hosts    |  4 ----
 src/ssh_options.jl | 25 ++++++++++++++++++++++++-
 test/runtests.jl   |  2 +-
 test/setup.jl      |  2 +-
 4 files changed, 26 insertions(+), 7 deletions(-)
 delete mode 100644 src/known_hosts

diff --git a/src/known_hosts b/src/known_hosts
deleted file mode 100644
index a9f2357..0000000
--- a/src/known_hosts
+++ /dev/null
@@ -1,4 +0,0 @@
-github.com ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGmdnm9tUDbO9IDSwBK6TbQa+PXYPCPy6rbTrTtw7PHkccKrpp0yVhp5HdEIcKr6pLlVDBfOLX9QUsyCOV0wzfjIJNlGEYsdlLJizHhbn2mUjvSAHQqZETYP81eFzLQNnPHt4EVVUh7VfDESU84KezmD5QlWpXLmvU31/yMf+Se8xhHTvKSCZIFImWwoG6mbUoWf9nzpIoaSjB+weqqUUmpaaasXVal72J+UX2B+2RPW3RcT0eOzQgqlJL3RKrTJvdsjE3JEAvGq3lGHSZXy28G3skua2SmVi/w4yCE6gbODqnTWlg7+wC604ydGXA8VJiS5ap43JXiUFFAaQ==
-gitlab.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFSMqzJeV9rUzU4kWitGjeR4PWSa29SPqJ1fVkhtj3Hw9xjLVXVYrU9QlYWrOLXBpQ6KWjbjTDTdDkoohFzgbEY=
-gitlab.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAfuCHKVTjquxvt6CM6tdG4SLp1Btn/nOeHHE5UOzRdf
-gitlab.com ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsj2bNKTBSpIYDEGk9KxsGh3mySTRgMtXL583qmBpzeQ+jqCMRgBqB98u3z++J1sKlXHWfM9dyhSevkMwSbhoR8XIq/U0tCNyokEi/ueaBMCvbcTHhO7FcwzY92WK4Yt0aGROY5qX2UKSeOvuP4D6TPqKF1onrSzH9bx9XUf2lEdWT/ia1NEKjunUqu1xOB/StKDHMoX4/OKyIzuS0q/T1zOATthvasJFoPrAjkohTyaDUz2LN5JoH839hViyEG82yB+MjcFV5MU3N1l1QL3cVUCh93xSaua1N85qivl+siMkPGbO5xR/En4iEY6K2XPASUEMaieWVNTRCtJ4S8H+9
diff --git a/src/ssh_options.jl b/src/ssh_options.jl
index 6c72167..49eb433 100644
--- a/src/ssh_options.jl
+++ b/src/ssh_options.jl
@@ -106,8 +106,8 @@ match; the caller should only continue to search further known hosts files if
 there are no entries for the host in question in an earlier file.
 """
 function ssh_known_hosts_files()
+    bundled = bundled_known_hosts()
     default = joinpath(ssh_dir(), "known_hosts")
-    bundled = joinpath(@__DIR__, "known_hosts")
     value = get(ENV, "SSH_KNOWN_HOSTS_FILES", nothing)
     value === nothing && return [default, bundled]
     isempty(value) && return String[]
@@ -140,3 +140,26 @@ function ssh_known_hosts_file()
     end
     return files[1]
 end
+
+## helper functions
+
+const BUNDLED_KNOWN_HOSTS_LOCK = ReentrantLock()
+const BUNDLED_KNOWN_HOSTS_FILE = Ref{String}()
+
+function bundled_known_hosts()
+    lock(BUNDLED_KNOWN_HOSTS_LOCK) do
+        if !isassigned(BUNDLED_KNOWN_HOSTS_FILE)
+            BUNDLED_KNOWN_HOSTS_FILE[], io = mktemp()
+            write(io, BUNDLED_KNOWN_HOSTS)
+            close(io)
+        end
+    end
+    return BUNDLED_KNOWN_HOSTS_FILE[]
+end
+
+const BUNDLED_KNOWN_HOSTS = """
+github.com ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAQEAq2A7hRGmdnm9tUDbO9IDSwBK6TbQa+PXYPCPy6rbTrTtw7PHkccKrpp0yVhp5HdEIcKr6pLlVDBfOLX9QUsyCOV0wzfjIJNlGEYsdlLJizHhbn2mUjvSAHQqZETYP81eFzLQNnPHt4EVVUh7VfDESU84KezmD5QlWpXLmvU31/yMf+Se8xhHTvKSCZIFImWwoG6mbUoWf9nzpIoaSjB+weqqUUmpaaasXVal72J+UX2B+2RPW3RcT0eOzQgqlJL3RKrTJvdsjE3JEAvGq3lGHSZXy28G3skua2SmVi/w4yCE6gbODqnTWlg7+wC604ydGXA8VJiS5ap43JXiUFFAaQ==
+gitlab.com ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYAAAAIbmlzdHAyNTYAAABBBFSMqzJeV9rUzU4kWitGjeR4PWSa29SPqJ1fVkhtj3Hw9xjLVXVYrU9QlYWrOLXBpQ6KWjbjTDTdDkoohFzgbEY=
+gitlab.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIAfuCHKVTjquxvt6CM6tdG4SLp1Btn/nOeHHE5UOzRdf
+gitlab.com ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCsj2bNKTBSpIYDEGk9KxsGh3mySTRgMtXL583qmBpzeQ+jqCMRgBqB98u3z++J1sKlXHWfM9dyhSevkMwSbhoR8XIq/U0tCNyokEi/ueaBMCvbcTHhO7FcwzY92WK4Yt0aGROY5qX2UKSeOvuP4D6TPqKF1onrSzH9bx9XUf2lEdWT/ia1NEKjunUqu1xOB/StKDHMoX4/OKyIzuS0q/T1zOATthvasJFoPrAjkohTyaDUz2LN5JoH839hViyEG82yB+MjcFV5MU3N1l1QL3cVUCh93xSaua1N85qivl+siMkPGbO5xR/En4iEY6K2XPASUEMaieWVNTRCtJ4S8H+9
+"""
diff --git a/test/runtests.jl b/test/runtests.jl
index 511df58..5e85a2b 100644
--- a/test/runtests.jl
+++ b/test/runtests.jl
@@ -31,7 +31,7 @@ end
 
 @testset "ssh_options" begin
     path_sep = Sys.iswindows() ? ";" : ":"
-    bundled = joinpath(pkg_dir, "src", "known_hosts")
+    bundled = bundled_known_hosts()
 
     @testset "defaults" begin
         @test ssh_key_pass() === nothing
diff --git a/test/setup.jl b/test/setup.jl
index 50053cb..99d4fef 100644
--- a/test/setup.jl
+++ b/test/setup.jl
@@ -1,7 +1,7 @@
 using Test
 using Logging
 using NetworkOptions
-using NetworkOptions: CA_ROOTS_VARS, bundled_ca_roots
+using NetworkOptions: CA_ROOTS_VARS, bundled_ca_roots, bundled_known_hosts
 
 const pkg_dir = dirname(@__DIR__)