#建议保存编码为：bom头 + utf8
#删除秘钥2，生成秘钥2。秘钥2不备份，但生成秘钥2的10天内禁止再次生成，避免频繁生成秘钥2导致被控机失控。

if ( ($IsWindows -eq $True) -or ($PSVersionTable.psversion.major -lt 6) ) #win
{
	& 'c:\ProgramData\kasini3000\0k_source.ps1'
}

if ($IsLinux -eq $True)
{
	& '/etc/kasini3000/0k_source.ps1'
}

if ( ($IsWindows -eq $True) -or ($PSVersionTable.psversion.major -lt 6) ) #win
{
	if (Test-Path -LiteralPath "${global:kasini3000_data_path}\ssh_key_files_old1\id_rsa")
	{
		if (Test-Path -LiteralPath "$env:USERPROFILE\.ssh\id_rsa")
		{
			$秘钥1 = Get-Item "$env:USERPROFILE\.ssh\id_rsa"
			if ($秘钥1.LastWriteTime -ge (Get-Date).adddays(-10))
			{
				Write-Error '错误：秘钥1建立日期少于10天，禁止更新秘钥2'
				exit 2
			}

			if (Test-Path -LiteralPath "${global:kasini3000_data_path}\ssh_key_files_old1")
			{
				Remove-Item -Path "${global:kasini3000_data_path}\ssh_key_files_old1\*"
			}
			else
			{
				Write-Warning "错误，找不到密钥2路径"
				mkdir -Name "${global:kasini3000_data_path}\ssh_key_files_old1"
			}
		}
		else
		{
			Write-Error "错误，找不到秘钥1。应该先运行【jl建立主控机ssh秘钥1z.ps1】"
			exit 1
		}
	}

	& 'read-host+timeout_v2.1.ps1' -变量名 '【ssh私钥密码】' -变量值 'y'

	Write-Verbose ${global:【ssh私钥密码】}

	switch (${global:【ssh私钥密码】})
	{
		'y'
		{
			$a = @"
ssh-keygen -t rsa -b 4096 -f '${global:kasini3000_data_path}\ssh_key_files_old1\id_rsa' --% -N ''
"@

			Write-Verbose $a
			#cmd.exe /c $a
			Invoke-Expression -Command $a
			break
		}

		'n'
		{
			$b = @"
ssh-keygen -t rsa -b 4096 -f '${global:kasini3000_data_path}\ssh_key_files_old1\id_rsa' --% -N ''
"@

			Write-Verbose $b
			#cmd.exe /c $b
			Invoke-Expression -Command $b
			${global:【ssh私钥密码】} = $null
			break
		}

		default
		{
			Write-Error 'y/n 输入错误，使用默认值 "y" ！'
			$a = @"
ssh-keygen -t rsa -b 4096 -f '${global:kasini3000_data_path}\ssh_key_files_old1\id_rsa' --% -N ''
"@

			#cmd.exe /c $a
			Invoke-Expression -Command $a
		}
	}
}


if ($IsLinux -eq $True)
{
	if (Test-Path -LiteralPath "${global:kasini3000_data_path}/ssh_key_files_old1/id_rsa")
	{
		if (Test-Path -LiteralPath '/root/.ssh/id_rsa')
		{
			$秘钥1 = Get-Item '/root/.ssh/id_rsa'
			if ($秘钥1.LastWriteTime -ge (Get-Date).adddays(-10))
			{
				Write-Error '错误：秘钥1建立日期少于10天，禁止更新秘钥2'
				exit 2
			}

			if (Test-Path -LiteralPath "${global:kasini3000_data_path}/ssh_key_files_old1")
			{
				Remove-Item -Path "${global:kasini3000_data_path}/ssh_key_files_old1/*"
			}
			else
			{
				Write-Warning "错误，找不到密钥2路径"
				mkdir -Name "${global:kasini3000_data_path}/ssh_key_files_old1"
			}
		}
		else
		{
			Write-Error "错误，找不到秘钥1。应该先运行【jl建立主控机ssh秘钥1.ps1】"
			exit 1
		}
	}

	& 'read-host+timeout_v2.1.ps1' -变量名 '【ssh私钥密码】' -变量值 'y'

	Write-Verbose ${global:【ssh私钥密码】}

	switch (${global:【ssh私钥密码】})
	{
		'y'
		{
			@"
ssh-keygen -t rsa -b 4096 -N '' -f '${global:kasini3000_data_path}/ssh_key_files_old1/id_rsa'
"@ | /usr/bin/bash


			break
		}

		'n'
		{

			@"
ssh-keygen -t rsa -b 4096  -f '${global:kasini3000_data_path}/ssh_key_files_old1/id_rsa'
"@ | /usr/bin/bash

			${global:【ssh私钥密码】} = $null

			break
		}

		default
		{
			Write-Error 'y/n 输入错误，使用默认值 "y" ！'

			@"
ssh-keygen -t rsa -b 4096 -N '' -f '${global:kasini3000_data_path}/ssh_key_files_old1/id_rsa'
"@ | /usr/bin/bash

		}
	}
	chmod 600 /root/.ssh/id_rsa
	chmod 600 /root/kasini3000/ssh_key_files_old1/id_rsa
	chmod 600 /root/kasini3000/ssh_key_files_old2/id_rsa
}

& 'gx更新主控机上的_双公钥文件authorized_keys.ps1'

exit 0