17#include <boost/thread/once.hpp>
18#include <boost/interprocess/smart_ptr/scoped_ptr.hpp>
24#undef ZYPP_BASE_LOGGER_LOGGROUP
25#define ZYPP_BASE_LOGGER_LOGGROUP "zypp::gpg"
37 boost::once_flag gpgme_init_once = BOOST_ONCE_INIT;
41 const char *version = gpgme_check_version(NULL);
44 MIL <<
"Initialized libgpgme version: " << version << endl;
48 MIL <<
"Initialized libgpgme with unknown version" << endl;
53 using GpgmeDataPtr = boost::interprocess::scoped_ptr<gpgme_data, boost::function<void (gpgme_data_t)>>;
54 using GpgmeKeyPtr = boost::interprocess::scoped_ptr<_gpgme_key, boost::function<void (gpgme_key_t)>>;
55 using FILEPtr = boost::interprocess::scoped_ptr<FILE, boost::function<int (FILE *)>>;
59 GpgmeErr( gpgme_error_t err_r = GPG_ERR_NO_ERROR )
62 operator gpgme_error_t()
const {
return _err; }
67 std::ostream &
operator<<( std::ostream &
str,
const GpgmeErr & obj )
68 {
return str <<
"<" << gpgme_strsource(obj) <<
"> " << gpgme_strerror(obj); }
71 std::ostream &
operator<<( std::ostream &
str,
const _gpgme_op_import_result & obj )
73 str <<
"gpgme_op_import_result {" << endl;
74 str <<
" " << obj.considered <<
" The total number of considered keys." << endl;
75 str <<
" " << obj.no_user_id <<
" The number of keys without user ID." << endl;
76 str <<
" " << obj.imported <<
" The total number of imported keys." << endl;
77 str <<
" " << obj.imported_rsa <<
" imported RSA keys." << endl;
78 str <<
" " << obj.unchanged <<
" unchanged keys." << endl;
79 str <<
" " << obj.new_user_ids <<
" new user IDs." << endl;
80 str <<
" " << obj.new_sub_keys <<
" new sub keys." << endl;
81 str <<
" " << obj.new_signatures <<
" new signatures." << endl;
82 str <<
" " << obj.new_revocations <<
" new revocations." << endl;
83 str <<
" " << obj.secret_read <<
" secret keys read." << endl;
84 str <<
" " << obj.secret_imported <<
" imported secret keys." << endl;
85 str <<
" " << obj.secret_unchanged <<
" unchanged secret keys." << endl;
86 str <<
" " << obj.not_imported <<
" keys not imported." << endl;
87 for ( gpgme_import_status_t p = obj.imports; p; p = p->next )
89 str <<
" - " << p->fpr <<
": " << p->result << endl;
108 { boost::call_once( gpgme_init_once, initGpgme ); }
136 template<
typename Callback >
137 bool importKey(GpgmeDataPtr &data, Callback &&calcDataSize );
159 if (!
PathInfo( signature_r ).isExist())
160 return std::list<std::string>();
162 FILEPtr sigFile(fopen(signature_r.
c_str(),
"rb"), fclose);
164 ERR <<
"Unable to open signature file '" << signature_r <<
"'" <<endl;
165 return std::list<std::string>();
168 GpgmeDataPtr sigData(
nullptr, gpgme_data_release);
169 GpgmeErr err = gpgme_data_new_from_stream (&sigData.get(), sigFile.get());
172 return std::list<std::string>();
184 GpgmeDataPtr sigData(
nullptr, gpgme_data_release);
185 GpgmeErr err = gpgme_data_new_from_mem(&sigData.get(), keyData_r.data(), keyData_r.size(), 1 );
188 return std::list<std::string>();
191 return readSignaturesFprsOptVerify( sigData, file_r, verify_r );
200 FILEPtr dataFile(fopen(file_r.
c_str(),
"rb"), fclose);
202 return std::list<std::string>();
204 GpgmeDataPtr fileData(
nullptr, gpgme_data_release);
205 GpgmeErr err = gpgme_data_new_from_stream (&fileData.get(), dataFile.get());
208 return std::list<std::string>();
211 err = gpgme_op_verify(
_ctx, sigData.get(), fileData.get(), NULL);
212 if (err != GPG_ERR_NO_ERROR) {
214 return std::list<std::string>();
217 gpgme_verify_result_t res = gpgme_op_verify_result(
_ctx);
218 if (!res || !res->signatures) {
219 ERR <<
"Unable to read signature fingerprints" <<endl;
220 return std::list<std::string>();
223 bool foundBadSignature =
false;
224 bool foundGoodSignature =
false;
225 std::list<std::string> signatures;
226 for ( gpgme_signature_t sig = res->signatures; sig; sig = sig->next ) {
234 std::string id( sig->fpr );
235 if (
id.size() > 16 )
236 id =
id.substr(
id.size()-16 );
238 DBG <<
"Found signature with ID: " <<
id <<
" in " << file_r << std::endl;
239 signatures.push_back( std::move(
id) );
242 if ( verify_r && sig->status != GPG_ERR_NO_ERROR ) {
243 const auto status = gpgme_err_code(sig->status);
249 if ( status != GPG_ERR_KEY_EXPIRED && status != GPG_ERR_NO_PUBKEY )
251 WAR <<
"Failed signature check: " << file_r <<
" " << GpgmeErr(sig->status) << endl;
252 if ( !foundBadSignature )
253 foundBadSignature =
true;
257 WAR <<
"Legacy: Ignore expired or unknown key: " << file_r <<
" " << GpgmeErr(sig->status) << endl;
259 if ( status == GPG_ERR_KEY_EXPIRED )
260 foundGoodSignature =
true;
263 foundGoodSignature =
true;
268 *verify_r = (!foundBadSignature) && foundGoodSignature;
288 DBG <<
"createForOpenPGP(" << keyring_r <<
")" << endl;
294 GpgmeErr err = gpgme_new( &ctx );
295 if ( err != GPG_ERR_NO_ERROR )
299 err = gpgme_set_protocol( ctx, GPGME_PROTOCOL_OpenPGP );
300 if ( err != GPG_ERR_NO_ERROR )
303 if ( !keyring_r.
empty() ) {
305 gpgme_engine_info_t enginfo = gpgme_ctx_get_engine_info( ctx );
309 err = gpgme_ctx_set_engine_info( ctx, GPGME_PROTOCOL_OpenPGP, enginfo->file_name, keyring_r.
c_str() );
310 if ( err != GPG_ERR_NO_ERROR )
320 if ( gpgme_engine_info_t enginfo = gpgme_ctx_get_engine_info(
_pimpl->
_ctx ) )
321 ret = enginfo->home_dir;
327 std::list<PublicKeyData> ret;
328 GpgmeErr err = GPG_ERR_NO_ERROR;
333 if ( (err = gpgme_set_keylist_mode(
_pimpl->
_ctx, GPGME_KEYLIST_MODE_LOCAL | GPGME_KEYLIST_MODE_SIGS )) != GPG_ERR_NO_ERROR ) {
334 ERR <<
"gpgme_set_keylist_mode: " << err << endl;
338 if ( (err = gpgme_op_keylist_start(
_pimpl->
_ctx, NULL, 0 )) != GPG_ERR_NO_ERROR ) {
339 ERR <<
"gpgme_op_keylist_start: " << err << endl;
346 for ( ; gpgme_op_keylist_next(
_pimpl->
_ctx, &(*key) ) == GPG_ERR_NO_ERROR; key.getDispose()( key ) ) {
349 ret.push_back( data );
363 std::list<PublicKeyData> ret;
385 GpgmeErr err = GPG_ERR_NO_ERROR;
387 GpgmeKeyPtr foundKey;
390 gpgme_key_t key =
nullptr;
391 gpgme_op_keylist_start(
_pimpl->
_ctx, NULL, 0);
392 while (!(err = gpgme_op_keylist_next(
_pimpl->
_ctx, &key))) {
393 if (key->subkeys &&
id ==
str::asString(key->subkeys->keyid)) {
394 GpgmeKeyPtr(key, gpgme_key_release).swap(foundKey);
397 gpgme_key_release(key);
402 WAR <<
"Key " <<
id <<
"not found" << endl;
407 gpgme_key_t keyarray[2];
408 keyarray[0] = foundKey.get();
411 GpgmeDataPtr out(
nullptr, gpgme_data_release);
412 err = gpgme_data_new (&out.get());
424 err = gpgme_op_export_keys (
_pimpl->
_ctx, keyarray, GPGME_EXPORT_MODE_MINIMAL, out.get());
426 int ret = gpgme_data_seek (out.get(), 0, SEEK_SET);
428 ERR <<
"Unable to seek in exported key data" << endl;
432 const int bufsize = 512;
433 char buf[bufsize + 1];
434 while ((ret = gpgme_data_read(out.get(), buf, bufsize)) > 0) {
435 stream.write(buf, ret);
440 ERR <<
"Unable to read exported key data" << endl;
444 ERR <<
"Error exporting key: "<< err << endl;
454 if ( !
PathInfo( keyfile ).isExist() ) {
455 ERR <<
"Keyfile '" << keyfile <<
"' does not exist.";
459 GpgmeDataPtr data(
nullptr, gpgme_data_release);
462 err = gpgme_data_new_from_file(&data.get(), keyfile.
c_str(), 1);
464 ERR <<
"Error importing key: "<< err << endl;
473 GpgmeDataPtr data(
nullptr, gpgme_data_release);
476 err = gpgme_data_new_from_mem( &data.get(), keydata.data(), keydata.size(), 1);
478 ERR <<
"Error importing key: "<< err << endl;
485template<
typename Callback>
489 err = gpgme_op_import(
_ctx, data.get() );
491 ERR <<
"Error importing key: "<< err << endl;
497 if ( gpgme_import_result_t res = gpgme_op_import_result(
_ctx) )
499 if ( ! res->considered && std::forward<Callback>(calcDataSize)() )
502 ERR <<
"Error importing key: No keys considered (bsc#1127220, [libgpgme] signal received?)" << endl;
507 return (err == GPG_ERR_NO_ERROR);
512 gpgme_key_t key =
nullptr;
513 GpgmeErr err = GPG_ERR_NO_ERROR;
515 gpgme_op_keylist_start(
_pimpl->
_ctx, NULL, 0);
517 while (!(err = gpgme_op_keylist_next(
_pimpl->
_ctx, &key))) {
518 if (key->subkeys &&
id ==
str::asString(key->subkeys->keyid)) {
521 gpgme_key_release(key);
525 ERR <<
"Error deleting key: "<< err << endl;
530 gpgme_key_release(key);
534 WAR <<
"Key: '"<<
id <<
"' not found." << endl;
Reference counted access to a Tp object calling a custom Dispose function when the last AutoDispose h...
Impl & operator=(const Impl &)=delete
std::list< std::string > readSignaturesFprs(const Pathname &signature_r)
Return all fingerprints found in signature_r.
Impl(const Impl &)=delete
bool _volatile
readKeyFromFile workaround bsc#1140670
Impl & operator=(Impl &&)=delete
std::list< std::string > readSignaturesFprs(const ByteArray &signature_r)
Return all fingerprints found in signature_r.
std::list< std::string > readSignaturesFprsOptVerify(const Pathname &signature_r, const Pathname &file_r="/dev/null", bool *verify_r=nullptr)
Return all fingerprints found in signature_r and optionally verify the file_r on the fly.
bool verifySignaturesFprs(const Pathname &file_r, const Pathname &signature_r)
Tries to verify the file_r using signature_r.
bool importKey(GpgmeDataPtr &data, Callback &&calcDataSize)
bool exportKey(const std::string &id, std::ostream &stream)
Exports the key with id into the given stream, returns true on success.
std::list< PublicKeyData > listKeys()
Returns a list of all public keys found in the current keyring.
bool verify(const Pathname &file, const Pathname &signature)
Tries to verify file using signature, returns true on success.
static KeyManagerCtx createForOpenPGP()
Creates a new KeyManagerCtx for PGP using a volatile temp.
std::list< std::string > readSignatureFingerprints(const Pathname &signature)
Reads all fingerprints from the signature file , returns a list of all found fingerprints.
std::list< PublicKeyData > readKeyFromFile(const Pathname &file)
Returns a list of all PublicKeyData found in file.
RW_pointer< Impl > _pimpl
Pointer to implementation.
bool deleteKey(const std::string &id)
Tries to delete a key specified by id, returns true on success.
Pathname homedir() const
Return the homedir/keyring.
bool importKey(const Pathname &keyfile)
Tries to import a key from keyfile, returns true on success.
Class representing one GPG Public Keys data.
static PublicKeyData fromGpgmeKey(_gpgme_key *data)
Wrapper class for stat/lstat.
const char * c_str() const
String representation.
bool empty() const
Test for an empty path.
String related utilities and Regular expression matching.
int clean_dir(const Pathname &path)
Like 'rm -r DIR/ *'.
int assert_dir(const Pathname &path, unsigned mode)
Like 'mkdir -p'.
const std::string & asString(const std::string &t)
Global asString() that works with std::string too.
Easy-to use interface to the ZYPP dependency resolver.
Pathname myTmpDir()
Global access to the zypp.TMPDIR (created on demand, deleted when libzypp is unloaded)
std::ostream & operator<<(std::ostream &str, const SerialNumber &obj)
GpgmeException(const std::string &in_r, const GpgmeErr &err_r)
#define ZYPP_THROW(EXCPT)
Drops a logline and throws the Exception.