Add new debug helper
This commit is contained in:
parent
aa747b1575
commit
06e22ca339
@ -1,11 +1,15 @@
|
||||
2009-10-15 Werner Koch <wk@g10code.com>
|
||||
|
||||
* run-verify.c: New.
|
||||
|
||||
2009-08-06 Werner Koch <wk@g10code.com>
|
||||
|
||||
* run-sign.c: New.
|
||||
|
||||
2009-07-07 Werner Koch <wk@g10code.com>
|
||||
|
||||
* run-keylist.c (main): Add options --cms and --openpgp.
|
||||
|
||||
* run-keylist.c (main): Add options --cms and --openpgp.
|
||||
|
||||
* gpg/pgp-keylist.c: Rename to ...
|
||||
* run-keylist.c: ... this.
|
||||
* gpg/pgp-import.c: Rename to ...
|
||||
|
@ -32,7 +32,8 @@ LDADD = ../src/libgpgme.la @GPG_ERROR_LIBS@
|
||||
|
||||
noinst_HEADERS = run-support.h
|
||||
|
||||
noinst_PROGRAMS = $(TESTS) run-keylist run-export run-import run-sign
|
||||
noinst_PROGRAMS = $(TESTS) run-keylist run-export run-import run-sign \
|
||||
run-verify
|
||||
|
||||
|
||||
if RUN_GPG_TESTS
|
||||
|
244
tests/run-verify.c
Normal file
244
tests/run-verify.c
Normal file
@ -0,0 +1,244 @@
|
||||
/* run-verify.c - Helper to perform a verify operation
|
||||
Copyright (C) 2009 g10 Code GmbH
|
||||
|
||||
This file is part of GPGME.
|
||||
|
||||
GPGME is free software; you can redistribute it and/or modify it
|
||||
under the terms of the GNU Lesser General Public License as
|
||||
published by the Free Software Foundation; either version 2.1 of
|
||||
the License, or (at your option) any later version.
|
||||
|
||||
GPGME is distributed in the hope that it will be useful, but
|
||||
WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
||||
Lesser General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU Lesser General Public
|
||||
License along with this program; if not, see <http://www.gnu.org/licenses/>.
|
||||
*/
|
||||
|
||||
/* We need to include config.h so that we know whether we are building
|
||||
with large file system (LFS) support. */
|
||||
#ifdef HAVE_CONFIG_H
|
||||
#include <config.h>
|
||||
#endif
|
||||
|
||||
#include <stdlib.h>
|
||||
#include <stdio.h>
|
||||
#include <string.h>
|
||||
|
||||
#include <gpgme.h>
|
||||
|
||||
#define PGM "run-verify"
|
||||
|
||||
#include "run-support.h"
|
||||
|
||||
|
||||
static int verbose;
|
||||
|
||||
static void
|
||||
print_summary (gpgme_sigsum_t summary)
|
||||
{
|
||||
if ( (summary & GPGME_SIGSUM_VALID ))
|
||||
fputs (" valid", stdout);
|
||||
if ( (summary & GPGME_SIGSUM_GREEN ))
|
||||
fputs (" green", stdout);
|
||||
if ( (summary & GPGME_SIGSUM_RED ))
|
||||
fputs (" red", stdout);
|
||||
if ( (summary & GPGME_SIGSUM_KEY_REVOKED))
|
||||
fputs (" revoked", stdout);
|
||||
if ( (summary & GPGME_SIGSUM_KEY_EXPIRED))
|
||||
fputs (" key-expired", stdout);
|
||||
if ( (summary & GPGME_SIGSUM_SIG_EXPIRED))
|
||||
fputs (" sig-expired", stdout);
|
||||
if ( (summary & GPGME_SIGSUM_KEY_MISSING))
|
||||
fputs (" key-missing", stdout);
|
||||
if ( (summary & GPGME_SIGSUM_CRL_MISSING))
|
||||
fputs (" crl-missing", stdout);
|
||||
if ( (summary & GPGME_SIGSUM_CRL_TOO_OLD))
|
||||
fputs (" crl-too-old", stdout);
|
||||
if ( (summary & GPGME_SIGSUM_BAD_POLICY ))
|
||||
fputs (" bad-policy", stdout);
|
||||
if ( (summary & GPGME_SIGSUM_SYS_ERROR ))
|
||||
fputs (" sys-error", stdout);
|
||||
}
|
||||
|
||||
static void
|
||||
print_validity (gpgme_validity_t val)
|
||||
{
|
||||
const char *s = NULL;
|
||||
|
||||
switch (val)
|
||||
{
|
||||
case GPGME_VALIDITY_UNKNOWN: s = "unknown"; break;
|
||||
case GPGME_VALIDITY_UNDEFINED:s = "undefined"; break;
|
||||
case GPGME_VALIDITY_NEVER: s = "never"; break;
|
||||
case GPGME_VALIDITY_MARGINAL: s = "marginal"; break;
|
||||
case GPGME_VALIDITY_FULL: s = "full"; break;
|
||||
case GPGME_VALIDITY_ULTIMATE: s = "ultimate"; break;
|
||||
}
|
||||
if (s)
|
||||
fputs (s, stdout);
|
||||
else
|
||||
printf ("[bad validity value %u]", (unsigned int)val);
|
||||
}
|
||||
|
||||
|
||||
static void
|
||||
print_result (gpgme_verify_result_t result)
|
||||
{
|
||||
gpgme_signature_t sig;
|
||||
int count = 0;
|
||||
|
||||
printf ("Original file name: %s\n", nonnull(result->file_name));
|
||||
for (sig = result->signatures; sig; sig = sig->next)
|
||||
{
|
||||
printf ("Signature %d\n", count++);
|
||||
printf (" status ....: %s\n", gpg_strerror (sig->status));
|
||||
printf (" summary ...:"); print_summary (sig->summary); putchar ('\n');
|
||||
printf (" fingerprint: %s\n", nonnull (sig->fpr));
|
||||
printf (" created ...: %lu\n", sig->timestamp);
|
||||
printf (" expires ...: %lu\n", sig->exp_timestamp);
|
||||
printf (" validity ..: ");
|
||||
print_validity (sig->validity); putchar ('\n');
|
||||
printf (" val.reason : %s\n", gpg_strerror (sig->status));
|
||||
printf (" pubkey algo: %d\n", sig->pubkey_algo);
|
||||
printf (" digest algo: %d\n", sig->hash_algo);
|
||||
printf (" pka address: %s\n", nonnull (sig->pka_address));
|
||||
printf (" pka trust .: %s\n",
|
||||
sig->pka_trust == 0? "n/a" :
|
||||
sig->pka_trust == 1? "bad" :
|
||||
sig->pka_trust == 2? "okay": "RFU");
|
||||
printf (" other flags:%s%s\n",
|
||||
sig->wrong_key_usage? " wrong-key-usage":"",
|
||||
sig->chain_model? " chain-model":""
|
||||
);
|
||||
printf (" notations .: %s\n",
|
||||
sig->notations? "yes":"no");
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
|
||||
static int
|
||||
show_usage (int ex)
|
||||
{
|
||||
fputs ("usage: " PGM " [options] [DETACHEDSIGFILE] FILE\n\n"
|
||||
"Options:\n"
|
||||
" --verbose run in verbose mode\n"
|
||||
" --openpgp use the OpenPGP protocol (default)\n"
|
||||
" --cms use the CMS protocol\n"
|
||||
, stderr);
|
||||
exit (ex);
|
||||
}
|
||||
|
||||
|
||||
int
|
||||
main (int argc, char **argv)
|
||||
{
|
||||
int last_argc = -1;
|
||||
gpgme_error_t err;
|
||||
gpgme_ctx_t ctx;
|
||||
gpgme_protocol_t protocol = GPGME_PROTOCOL_OpenPGP;
|
||||
FILE *fp_sig = NULL;
|
||||
gpgme_data_t sig = NULL;
|
||||
FILE *fp_msg = NULL;
|
||||
gpgme_data_t msg = NULL;
|
||||
gpgme_verify_result_t result;
|
||||
|
||||
if (argc)
|
||||
{ argc--; argv++; }
|
||||
|
||||
while (argc && last_argc != argc )
|
||||
{
|
||||
last_argc = argc;
|
||||
if (!strcmp (*argv, "--"))
|
||||
{
|
||||
argc--; argv++;
|
||||
break;
|
||||
}
|
||||
else if (!strcmp (*argv, "--help"))
|
||||
show_usage (0);
|
||||
else if (!strcmp (*argv, "--verbose"))
|
||||
{
|
||||
verbose = 1;
|
||||
argc--; argv++;
|
||||
}
|
||||
else if (!strcmp (*argv, "--openpgp"))
|
||||
{
|
||||
protocol = GPGME_PROTOCOL_OpenPGP;
|
||||
argc--; argv++;
|
||||
}
|
||||
else if (!strcmp (*argv, "--cms"))
|
||||
{
|
||||
protocol = GPGME_PROTOCOL_CMS;
|
||||
argc--; argv++;
|
||||
}
|
||||
else if (!strncmp (*argv, "--", 2))
|
||||
show_usage (1);
|
||||
|
||||
}
|
||||
|
||||
if (argc < 1 || argc > 2)
|
||||
show_usage (1);
|
||||
|
||||
fp_sig = fopen (argv[0], "rb");
|
||||
if (!fp_sig)
|
||||
{
|
||||
err = gpg_error_from_syserror ();
|
||||
fprintf (stderr, PGM ": can't open `%s': %s\n",
|
||||
argv[0], gpg_strerror (err));
|
||||
exit (1);
|
||||
}
|
||||
if (argc > 1)
|
||||
{
|
||||
fp_msg = fopen (argv[1], "rb");
|
||||
if (!fp_msg)
|
||||
{
|
||||
err = gpg_error_from_syserror ();
|
||||
fprintf (stderr, PGM ": can't open `%s': %s\n",
|
||||
argv[1], gpg_strerror (err));
|
||||
exit (1);
|
||||
}
|
||||
}
|
||||
|
||||
init_gpgme (protocol);
|
||||
|
||||
err = gpgme_new (&ctx);
|
||||
fail_if_err (err);
|
||||
gpgme_set_protocol (ctx, protocol);
|
||||
|
||||
err = gpgme_data_new_from_stream (&sig, fp_sig);
|
||||
if (err)
|
||||
{
|
||||
fprintf (stderr, PGM ": error allocating data object: %s\n",
|
||||
gpg_strerror (err));
|
||||
exit (1);
|
||||
}
|
||||
if (fp_msg)
|
||||
{
|
||||
err = gpgme_data_new_from_stream (&msg, fp_msg);
|
||||
if (err)
|
||||
{
|
||||
fprintf (stderr, PGM ": error allocating data object: %s\n",
|
||||
gpg_strerror (err));
|
||||
exit (1);
|
||||
}
|
||||
}
|
||||
|
||||
err = gpgme_op_verify (ctx, sig, msg, NULL);
|
||||
result = gpgme_op_verify_result (ctx);
|
||||
if (result)
|
||||
print_result (result);
|
||||
if (err)
|
||||
{
|
||||
fprintf (stderr, PGM ": signing failed: %s\n", gpg_strerror (err));
|
||||
exit (1);
|
||||
}
|
||||
|
||||
gpgme_data_release (msg);
|
||||
gpgme_data_release (sig);
|
||||
|
||||
gpgme_release (ctx);
|
||||
return 0;
|
||||
}
|
Loading…
Reference in New Issue
Block a user