
* lang/qt/src/decryptverifyarchivejob.cpp, lang/qt/src/decryptverifyarchivejob.h (DecryptVerifyArchiveJob): Add member functions setProcessAllSignatures, processAllSignatures. * lang/qt/src/decryptverifyarchivejob_p.h (DecryptVerifyArchiveJobPrivate): Add member m_processAllSignatures. * lang/qt/src/decryptverifyjob.cpp, lang/qt/src/decryptverifyjob.h (DecryptVerifyJob): Add member functions setProcessAllSignatures, processAllSignatures. * lang/qt/src/decryptverifyjob_p.h (DecryptVerifyJobPrivate): Add member m_processAllSignatures. * lang/qt/src/qgpgmedecryptverifyarchivejob.cpp (decrypt_verify_from_file_name): Add argument "processAllSignatures". Set context flag "proc-all-sigs" if requested. (QGpgMEDecryptVerifyArchiveJob::start): Set context flag "proc-all-sigs" if requested. (QGpgMEDecryptVerifyArchiveJobPrivate::startIt): Pass m_processAllSignatures to decrypt_verify_from_file_name. * lang/qt/src/qgpgmedecryptverifyjob.cpp (decrypt_verify_from_filename): Add argument "processAllSignatures". Set context flag "proc-all-sigs" if requested. (QGpgMEDecryptVerifyJob::start, QGpgMEDecryptVerifyJob::exec): Set context flag "proc-all-sigs" if requested. (QGpgMEDecryptVerifyJobPrivate::startIt): Pass m_processAllSignatures to decrypt_verify_from_filename. * lang/qt/src/qgpgmeverifydetachedjob.cpp (verify_from_filename): Add argument "processAllSignatures". Set context flag "proc-all-sigs" if requested. (QGpgMEVerifyDetachedJob::start, QGpgMEVerifyDetachedJob::exec): Set context flag "proc-all-sigs" if requested. (QGpgMEVerifyDetachedJobPrivate::startIt): Pass m_processAllSignatures to decrypt_verify_from_filename. * lang/qt/src/qgpgmeverifyopaquejob.cpp (verify_from_filename): Add argument "processAllSignatures". Set context flag "proc-all-sigs" if requested. (QGpgMEVerifyOpaqueJob::start, QGpgMEVerifyOpaqueJob::exec): Set context flag "proc-all-sigs" if requested. (QGpgMEVerifyOpaqueJobPrivate::startIt): Pass m_processAllSignatures to decrypt_verify_from_filename. * lang/qt/src/verifydetachedjob.cpp, lang/qt/src/verifydetachedjob.h (VerifyDetachedJob): Add member functions setProcessAllSignatures, processAllSignatures. * lang/qt/src/verifydetachedjob_p.h (VerifyDetachedJobPrivate): Add member m_processAllSignatures. * lang/qt/src/verifyopaquejob.cpp, lang/qt/src/verifyopaquejob.h (VerifyOpaqueJob): Add member functions setProcessAllSignatures, processAllSignatures. * lang/qt/src/verifyopaquejob_p.h (VerifyOpaqueJobPrivate): Add member m_processAllSignatures. * lang/qt/tests/run-decryptverifyarchivejob.cpp, lang/qt/tests/run-decryptverifyjob.cpp, lang/qt/tests/run-verifydetachedjob.cpp, lang/qt/tests/run-verifyopaquejob.cpp (struct CommandLineOptions): Add member processAllSignatures. (parseCommandLine): Add command line option --process-all-signatures. (main): Pass new option to the job. -- The new option processAllSignatures is added to all jobs that verify data signatures. By enabling this option, one can tell gpg not to stop checking signatures after the first bad signature. GnuPG-bug-id: 6870
217 lines
7.0 KiB
C++
217 lines
7.0 KiB
C++
/*
|
|
qgpgmeverifyopaquejob.cpp
|
|
|
|
This file is part of qgpgme, the Qt API binding for gpgme
|
|
Copyright (c) 2004,2007,2008 Klarälvdalens Datakonsult AB
|
|
Copyright (c) 2016 by Bundesamt für Sicherheit in der Informationstechnik
|
|
Software engineering by Intevation GmbH
|
|
|
|
QGpgME is free software; you can redistribute it and/or
|
|
modify it under the terms of the GNU General Public License as
|
|
published by the Free Software Foundation; either version 2 of the
|
|
License, or (at your option) any later version.
|
|
|
|
QGpgME is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License along
|
|
with this program; if not, write to the Free Software Foundation, Inc.,
|
|
51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
|
|
|
|
In addition, as a special exception, the copyright holders give
|
|
permission to link the code of this program with any edition of
|
|
the Qt library by Trolltech AS, Norway (or with modified versions
|
|
of Qt that use the same license as Qt), and distribute linked
|
|
combinations including the two. You must obey the GNU General
|
|
Public License in all respects for all of the code used other than
|
|
Qt. If you modify this file, you may extend this exception to
|
|
your version of the file, but you are not obligated to do so. If
|
|
you do not wish to do so, delete this exception statement from
|
|
your version.
|
|
*/
|
|
|
|
#ifdef HAVE_CONFIG_H
|
|
#include "config.h"
|
|
#endif
|
|
|
|
#include "qgpgmeverifyopaquejob.h"
|
|
|
|
#include "dataprovider.h"
|
|
#include "util.h"
|
|
#include "verifyopaquejob_p.h"
|
|
|
|
#include <gpgme++/context.h>
|
|
#include <gpgme++/data.h>
|
|
#include <gpgme++/verificationresult.h>
|
|
|
|
#include <QBuffer>
|
|
#include <QFile>
|
|
|
|
#include <cassert>
|
|
|
|
using namespace QGpgME;
|
|
using namespace GpgME;
|
|
|
|
namespace
|
|
{
|
|
|
|
class QGpgMEVerifyOpaqueJobPrivate : public VerifyOpaqueJobPrivate
|
|
{
|
|
QGpgMEVerifyOpaqueJob *q = nullptr;
|
|
|
|
public:
|
|
QGpgMEVerifyOpaqueJobPrivate(QGpgMEVerifyOpaqueJob *qq)
|
|
: q{qq}
|
|
{
|
|
}
|
|
|
|
~QGpgMEVerifyOpaqueJobPrivate() override = default;
|
|
|
|
private:
|
|
GpgME::Error startIt() override;
|
|
|
|
void startNow() override
|
|
{
|
|
q->run();
|
|
}
|
|
};
|
|
|
|
}
|
|
|
|
QGpgMEVerifyOpaqueJob::QGpgMEVerifyOpaqueJob(Context *context)
|
|
: mixin_type(context)
|
|
{
|
|
setJobPrivate(this, std::unique_ptr<QGpgMEVerifyOpaqueJobPrivate>{new QGpgMEVerifyOpaqueJobPrivate{this}});
|
|
lateInitialization();
|
|
}
|
|
|
|
QGpgMEVerifyOpaqueJob::~QGpgMEVerifyOpaqueJob() {}
|
|
|
|
static QGpgMEVerifyOpaqueJob::result_type verify_opaque(Context *ctx, QThread *thread, const std::weak_ptr<QIODevice> &signedData_, const std::weak_ptr<QIODevice> &plainText_)
|
|
{
|
|
|
|
const std::shared_ptr<QIODevice> plainText = plainText_.lock();
|
|
const std::shared_ptr<QIODevice> signedData = signedData_.lock();
|
|
|
|
const _detail::ToThreadMover ptMover(plainText, thread);
|
|
const _detail::ToThreadMover sdMover(signedData, thread);
|
|
|
|
QGpgME::QIODeviceDataProvider in(signedData);
|
|
Data indata(&in);
|
|
if (!signedData->isSequential()) {
|
|
indata.setSizeHint(signedData->size());
|
|
}
|
|
|
|
if (!plainText) {
|
|
QGpgME::QByteArrayDataProvider out;
|
|
Data outdata(&out);
|
|
|
|
const VerificationResult res = ctx->verifyOpaqueSignature(indata, outdata);
|
|
Error ae;
|
|
const QString log = _detail::audit_log_as_html(ctx, ae);
|
|
return std::make_tuple(res, out.data(), log, ae);
|
|
} else {
|
|
QGpgME::QIODeviceDataProvider out(plainText);
|
|
Data outdata(&out);
|
|
|
|
const VerificationResult res = ctx->verifyOpaqueSignature(indata, outdata);
|
|
Error ae;
|
|
const QString log = _detail::audit_log_as_html(ctx, ae);
|
|
return std::make_tuple(res, QByteArray(), log, ae);
|
|
}
|
|
|
|
}
|
|
|
|
static QGpgMEVerifyOpaqueJob::result_type verify_opaque_qba(Context *ctx, const QByteArray &signedData)
|
|
{
|
|
const std::shared_ptr<QBuffer> buffer(new QBuffer);
|
|
buffer->setData(signedData);
|
|
if (!buffer->open(QIODevice::ReadOnly)) {
|
|
assert(!"This should never happen: QBuffer::open() failed");
|
|
}
|
|
return verify_opaque(ctx, nullptr, buffer, std::shared_ptr<QIODevice>());
|
|
}
|
|
|
|
static QGpgMEVerifyOpaqueJob::result_type verify_from_filename(Context *ctx,
|
|
const QString &inputFilePath,
|
|
const QString &outputFilePath,
|
|
bool processAllSignatures)
|
|
{
|
|
Data indata;
|
|
#ifdef Q_OS_WIN
|
|
indata.setFileName(inputFilePath.toUtf8().constData());
|
|
#else
|
|
indata.setFileName(QFile::encodeName(inputFilePath).constData());
|
|
#endif
|
|
|
|
PartialFileGuard partFileGuard{outputFilePath};
|
|
if (partFileGuard.tempFileName().isEmpty()) {
|
|
return std::make_tuple(VerificationResult{Error::fromCode(GPG_ERR_EEXIST)}, QByteArray{}, QString{}, Error{});
|
|
}
|
|
|
|
Data outdata;
|
|
#ifdef Q_OS_WIN
|
|
outdata.setFileName(partFileGuard.tempFileName().toUtf8().constData());
|
|
#else
|
|
outdata.setFileName(QFile::encodeName(partFileGuard.tempFileName()).constData());
|
|
#endif
|
|
|
|
if (processAllSignatures) {
|
|
ctx->setFlag("proc-all-sigs", "1");
|
|
}
|
|
const auto verificationResult = ctx->verifyOpaqueSignature(indata, outdata);
|
|
|
|
if (!verificationResult.error().code()) {
|
|
// the operation succeeded -> save the result under the requested file name
|
|
partFileGuard.commit();
|
|
}
|
|
|
|
Error ae;
|
|
const QString log = _detail::audit_log_as_html(ctx, ae);
|
|
return std::make_tuple(verificationResult, QByteArray{}, log, ae);
|
|
}
|
|
|
|
Error QGpgMEVerifyOpaqueJob::start(const QByteArray &signedData)
|
|
{
|
|
if (processAllSignatures()) {
|
|
context()->setFlag("proc-all-sigs", "1");
|
|
}
|
|
run(std::bind(&verify_opaque_qba, std::placeholders::_1, signedData));
|
|
return Error();
|
|
}
|
|
|
|
void QGpgMEVerifyOpaqueJob::start(const std::shared_ptr<QIODevice> &signedData, const std::shared_ptr<QIODevice> &plainText)
|
|
{
|
|
if (processAllSignatures()) {
|
|
context()->setFlag("proc-all-sigs", "1");
|
|
}
|
|
run(std::bind(&verify_opaque, std::placeholders::_1, std::placeholders::_2, std::placeholders::_3, std::placeholders::_4), signedData, plainText);
|
|
}
|
|
|
|
GpgME::VerificationResult QGpgME::QGpgMEVerifyOpaqueJob::exec(const QByteArray &signedData, QByteArray &plainText)
|
|
{
|
|
if (processAllSignatures()) {
|
|
context()->setFlag("proc-all-sigs", "1");
|
|
}
|
|
const result_type r = verify_opaque_qba(context(), signedData);
|
|
plainText = std::get<1>(r);
|
|
return std::get<0>(r);
|
|
}
|
|
|
|
GpgME::Error QGpgMEVerifyOpaqueJobPrivate::startIt()
|
|
{
|
|
if (m_inputFilePath.isEmpty() || m_outputFilePath.isEmpty()) {
|
|
return Error::fromCode(GPG_ERR_INV_VALUE);
|
|
}
|
|
|
|
q->run([=](Context *ctx) {
|
|
return verify_from_filename(ctx, m_inputFilePath, m_outputFilePath, m_processAllSignatures);
|
|
});
|
|
|
|
return {};
|
|
}
|
|
|
|
#include "qgpgmeverifyopaquejob.moc"
|