import re

import salt.utils.files
import salt.utils.stringutils
from salt.exceptions import CommandExecutionError


def key_is_encrypted(key):
    # NOTE: this is a temporary workaround until we can get salt/modules/ssh.py
    # working on Windows.
    try:
        with salt.utils.files.fopen(key, "r") as fp_:
            key_data = salt.utils.stringutils.to_unicode(fp_.read())
    except OSError as exc:
        # Raise a CommandExecutionError
        salt.utils.files.process_read_exception(exc, key)

    is_private_key = re.search(r"BEGIN (?:\w+\s)*PRIVATE KEY", key_data)
    is_encrypted = "ENCRYPTED" in key_data
    del key_data

    if not is_private_key:
        raise CommandExecutionError(f"{key} is not a private key")

    return is_encrypted