c22974f99f
2002-02-26 Marcus Brinkmann <marcus@g10code.de> * gpgme.texi (Encrypting a Plaintext): Document gpgme_op_encrypt_sign and gpgme_op_encrypt_sign_start. gpgme/ 2002-02-25 Marcus Brinkmann <marcus@g10code.de> * engine.c (_gpgme_engine_op_encrypt_sign): New function. * engine.h (_gpgme_engine_op_encrypt_sign): New prototype. * rungpg.c (_gpgme_append_gpg_args_from_signers): New function. (_gpgme_gpg_op_sign): Use that new function. (_gpgme_gpg_op_encrypt_sign): New function. * rungpg.h (_gpgme_gpg_op_encrypt_sign): New prototype. * gpgme.h (gpgme_op_encrypt_sign_start): New prototype. (gpgme_op_encrypt_sign): Likewise. * Makefile.am (libgpgme_la_SOURCES): Add encrypt-sign.c. * ops.h (_gpgme_encrypt_status_handler): Add prototype. (_gpgme_sign_status_handler): Add prototype. * sign.c (sign_status_handler): Rename to ... (_gpgme_sign_status_handler): ... this and make non-static. * encrypt.c (encrypt_status_handler): Rename to ... (_gpgme_encrypt_status_handler): ... this and make non-static. * encrypt.c (gpgme_op_encrypt_start): Use new status handler name. * sign.c (gpgme_op_sign_start): Likewise. tests/ 2002-02-26 Marcus Brinkmann <marcus@g10code.de> * gpg/t-encrypt-sign.c: New file. * gpg/Makefile.am (TESTS): Add t-encrypt-sign.
263 lines
6.8 KiB
C
263 lines
6.8 KiB
C
/* sign.c - signing functions
|
|
* Copyright (C) 2000 Werner Koch (dd9jn)
|
|
* Copyright (C) 2001, 2002 g10 Code GmbH
|
|
*
|
|
* This file is part of GPGME.
|
|
*
|
|
* GPGME is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 2 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* GPGME is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA
|
|
*/
|
|
|
|
#include <config.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <assert.h>
|
|
|
|
#include "util.h"
|
|
#include "context.h"
|
|
#include "ops.h"
|
|
|
|
#define SKIP_TOKEN_OR_RETURN(a) do { \
|
|
while (*(a) && *(a) != ' ') (a)++; \
|
|
while (*(a) == ' ') (a)++; \
|
|
if (!*(a)) \
|
|
return; /* oops */ \
|
|
} while (0)
|
|
|
|
struct sign_result_s
|
|
{
|
|
int okay;
|
|
GpgmeData xmlinfo;
|
|
};
|
|
|
|
void
|
|
_gpgme_release_sign_result (SignResult result)
|
|
{
|
|
if (!result)
|
|
return;
|
|
gpgme_data_release (result->xmlinfo);
|
|
xfree (result);
|
|
}
|
|
|
|
/* Parse the args and save the information
|
|
* <type> <pubkey algo> <hash algo> <class> <timestamp> <key fpr>
|
|
* in an XML structure. With args of NULL the xml structure is closed.
|
|
*/
|
|
static void
|
|
append_xml_siginfo (GpgmeData *rdh, char *args)
|
|
{
|
|
GpgmeData dh;
|
|
char helpbuf[100];
|
|
int i;
|
|
char *s;
|
|
unsigned long ul;
|
|
|
|
if (!*rdh)
|
|
{
|
|
if (gpgme_data_new (rdh))
|
|
{
|
|
return; /* fixme: We are ignoring out-of-core */
|
|
}
|
|
dh = *rdh;
|
|
_gpgme_data_append_string (dh, "<GnupgOperationInfo>\n");
|
|
}
|
|
else
|
|
{
|
|
dh = *rdh;
|
|
_gpgme_data_append_string (dh, " </signature>\n");
|
|
}
|
|
|
|
if (!args)
|
|
{
|
|
/* Just close the XML containter. */
|
|
_gpgme_data_append_string (dh, "</GnupgOperationInfo>\n");
|
|
return;
|
|
}
|
|
|
|
_gpgme_data_append_string (dh, " <signature>\n");
|
|
|
|
_gpgme_data_append_string (dh,
|
|
*args == 'D' ? " <detached/>\n" :
|
|
*args == 'C' ? " <cleartext/>\n" :
|
|
*args == 'S' ? " <standard/>\n" : "");
|
|
SKIP_TOKEN_OR_RETURN (args);
|
|
|
|
sprintf (helpbuf, " <algo>%d</algo>\n", atoi (args));
|
|
_gpgme_data_append_string (dh, helpbuf);
|
|
SKIP_TOKEN_OR_RETURN (args);
|
|
|
|
i = atoi (args);
|
|
sprintf (helpbuf, " <hashalgo>%d</hashalgo>\n", atoi (args));
|
|
_gpgme_data_append_string (dh, helpbuf);
|
|
switch (i)
|
|
{
|
|
case 1: s = "pgp-md5"; break;
|
|
case 2: s = "pgp-sha1"; break;
|
|
case 3: s = "pgp-ripemd160"; break;
|
|
case 5: s = "pgp-md2"; break;
|
|
case 6: s = "pgp-tiger192"; break;
|
|
case 7: s = "pgp-haval-5-160"; break;
|
|
case 8: s = "pgp-sha256"; break;
|
|
case 9: s = "pgp-sha384"; break;
|
|
case 10: s = "pgp-sha512"; break;
|
|
default: s = "pgp-unknown"; break;
|
|
}
|
|
sprintf (helpbuf, " <micalg>%s</micalg>\n", s);
|
|
_gpgme_data_append_string (dh,helpbuf);
|
|
SKIP_TOKEN_OR_RETURN (args);
|
|
|
|
sprintf (helpbuf, " <sigclass>%.2s</sigclass>\n", args);
|
|
_gpgme_data_append_string (dh, helpbuf);
|
|
SKIP_TOKEN_OR_RETURN (args);
|
|
|
|
ul = strtoul (args, NULL, 10);
|
|
sprintf (helpbuf, " <created>%lu</created>\n", ul);
|
|
_gpgme_data_append_string (dh, helpbuf);
|
|
SKIP_TOKEN_OR_RETURN (args);
|
|
|
|
/* Count the length of the finperprint. */
|
|
for (i = 0; args[i] && args[i] != ' '; i++)
|
|
;
|
|
_gpgme_data_append_string (dh, " <fpr>");
|
|
_gpgme_data_append (dh, args, i);
|
|
_gpgme_data_append_string (dh, "</fpr>\n");
|
|
}
|
|
|
|
void
|
|
_gpgme_sign_status_handler (GpgmeCtx ctx, GpgStatusCode code, char *args)
|
|
{
|
|
_gpgme_passphrase_status_handler (ctx, code, args);
|
|
|
|
if (ctx->error)
|
|
return;
|
|
test_and_allocate_result (ctx, sign);
|
|
|
|
switch (code)
|
|
{
|
|
case STATUS_EOF:
|
|
if (ctx->result.sign->okay)
|
|
{
|
|
append_xml_siginfo (&ctx->result.sign->xmlinfo, NULL);
|
|
_gpgme_set_op_info (ctx, ctx->result.sign->xmlinfo);
|
|
ctx->result.sign->xmlinfo = NULL;
|
|
}
|
|
if (!ctx->error && !ctx->result.sign->okay)
|
|
ctx->error = mk_error (No_Data); /* Hmmm: choose a better error? */
|
|
break;
|
|
|
|
case STATUS_SIG_CREATED:
|
|
/* FIXME: We have no error return for multiple signatures. */
|
|
append_xml_siginfo (&ctx->result.sign->xmlinfo, args);
|
|
ctx->result.sign->okay = 1;
|
|
break;
|
|
|
|
default:
|
|
break;
|
|
}
|
|
}
|
|
|
|
GpgmeError
|
|
gpgme_op_sign_start (GpgmeCtx ctx, GpgmeData in, GpgmeData out,
|
|
GpgmeSigMode mode)
|
|
{
|
|
GpgmeError err = 0;
|
|
|
|
fail_on_pending_request (ctx);
|
|
ctx->pending = 1;
|
|
|
|
_gpgme_release_result (ctx);
|
|
|
|
if (mode != GPGME_SIG_MODE_NORMAL
|
|
&& mode != GPGME_SIG_MODE_DETACH
|
|
&& mode != GPGME_SIG_MODE_CLEAR)
|
|
return mk_error (Invalid_Value);
|
|
|
|
/* Create a process object. */
|
|
_gpgme_engine_release (ctx->engine);
|
|
ctx->engine = NULL;
|
|
err = _gpgme_engine_new (ctx->use_cms ? GPGME_PROTOCOL_CMS
|
|
: GPGME_PROTOCOL_OpenPGP, &ctx->engine);
|
|
if (err)
|
|
goto leave;
|
|
|
|
/* Check the supplied data. */
|
|
if (gpgme_data_get_type (in) == GPGME_DATA_TYPE_NONE)
|
|
{
|
|
err = mk_error (No_Data);
|
|
goto leave;
|
|
}
|
|
_gpgme_data_set_mode (in, GPGME_DATA_MODE_OUT);
|
|
if (!out || gpgme_data_get_type (out) != GPGME_DATA_TYPE_NONE)
|
|
{
|
|
err = mk_error (Invalid_Value);
|
|
goto leave;
|
|
}
|
|
_gpgme_data_set_mode (out, GPGME_DATA_MODE_IN);
|
|
|
|
err = _gpgme_passphrase_start (ctx);
|
|
if (err)
|
|
goto leave;
|
|
|
|
_gpgme_engine_set_status_handler (ctx->engine, _gpgme_sign_status_handler,
|
|
ctx);
|
|
_gpgme_engine_set_verbosity (ctx->engine, ctx->verbosity);
|
|
|
|
_gpgme_engine_op_sign (ctx->engine, in, out, mode, ctx->use_armor,
|
|
ctx->use_textmode, ctx->include_certs,
|
|
ctx /* FIXME */);
|
|
|
|
/* And kick off the process. */
|
|
err = _gpgme_engine_start (ctx->engine, ctx);
|
|
|
|
leave:
|
|
if (err)
|
|
{
|
|
ctx->pending = 0;
|
|
_gpgme_engine_release (ctx->engine);
|
|
ctx->engine = NULL;
|
|
}
|
|
return err;
|
|
}
|
|
|
|
/**
|
|
* gpgme_op_sign:
|
|
* @ctx: The context
|
|
* @in: Data to be signed
|
|
* @out: Detached signature
|
|
* @mode: Signature creation mode
|
|
*
|
|
* Create a detached signature for @in and write it to @out.
|
|
* The data will be signed using either the default key or the ones
|
|
* defined through @ctx.
|
|
* The defined modes for signature create are:
|
|
* <literal>
|
|
* GPGME_SIG_MODE_NORMAL (or 0)
|
|
* GPGME_SIG_MODE_DETACH
|
|
* GPGME_SIG_MODE_CLEAR
|
|
* </literal>
|
|
* Note that the settings done by gpgme_set_armor() and gpgme_set_textmode()
|
|
* are ignore for @mode GPGME_SIG_MODE_CLEAR.
|
|
*
|
|
* Return value: 0 on success or an error code.
|
|
**/
|
|
GpgmeError
|
|
gpgme_op_sign (GpgmeCtx ctx, GpgmeData in, GpgmeData out, GpgmeSigMode mode)
|
|
{
|
|
GpgmeError err = gpgme_op_sign_start (ctx, in, out, mode);
|
|
if (!err)
|
|
gpgme_wait (ctx, &err, 1);
|
|
return err;
|
|
}
|