Merge branch 'mg/maint-tag-rfc1991'
* mg/maint-tag-rfc1991: tag: recognize rfc1991 signatures tag: factor out sig detection for tag display tag: factor out sig detection for body edits verify-tag: factor out signature detection t/t7004-tag: test handling of rfc1991 signatures
This commit is contained in:
commit
a5066a0b07
@ -29,8 +29,6 @@ struct tag_filter {
|
|||||||
struct commit_list *with_commit;
|
struct commit_list *with_commit;
|
||||||
};
|
};
|
||||||
|
|
||||||
#define PGP_SIGNATURE "-----BEGIN PGP SIGNATURE-----"
|
|
||||||
|
|
||||||
static int show_reference(const char *refname, const unsigned char *sha1,
|
static int show_reference(const char *refname, const unsigned char *sha1,
|
||||||
int flag, void *cb_data)
|
int flag, void *cb_data)
|
||||||
{
|
{
|
||||||
@ -70,9 +68,9 @@ static int show_reference(const char *refname, const unsigned char *sha1,
|
|||||||
return 0;
|
return 0;
|
||||||
}
|
}
|
||||||
/* only take up to "lines" lines, and strip the signature */
|
/* only take up to "lines" lines, and strip the signature */
|
||||||
|
size = parse_signature(buf, size);
|
||||||
for (i = 0, sp += 2;
|
for (i = 0, sp += 2;
|
||||||
i < filter->lines && sp < buf + size &&
|
i < filter->lines && sp < buf + size;
|
||||||
prefixcmp(sp, PGP_SIGNATURE "\n");
|
|
||||||
i++) {
|
i++) {
|
||||||
if (i)
|
if (i)
|
||||||
printf("\n ");
|
printf("\n ");
|
||||||
@ -242,8 +240,7 @@ static void write_tag_body(int fd, const unsigned char *sha1)
|
|||||||
{
|
{
|
||||||
unsigned long size;
|
unsigned long size;
|
||||||
enum object_type type;
|
enum object_type type;
|
||||||
char *buf, *sp, *eob;
|
char *buf, *sp;
|
||||||
size_t len;
|
|
||||||
|
|
||||||
buf = read_sha1_file(sha1, &type, &size);
|
buf = read_sha1_file(sha1, &type, &size);
|
||||||
if (!buf)
|
if (!buf)
|
||||||
@ -256,12 +253,7 @@ static void write_tag_body(int fd, const unsigned char *sha1)
|
|||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
sp += 2; /* skip the 2 LFs */
|
sp += 2; /* skip the 2 LFs */
|
||||||
eob = strstr(sp, "\n" PGP_SIGNATURE "\n");
|
write_or_die(fd, sp, parse_signature(sp, buf + size - sp));
|
||||||
if (eob)
|
|
||||||
len = eob - sp;
|
|
||||||
else
|
|
||||||
len = buf + size - sp;
|
|
||||||
write_or_die(fd, sp, len);
|
|
||||||
|
|
||||||
free(buf);
|
free(buf);
|
||||||
}
|
}
|
||||||
|
@ -17,13 +17,11 @@ static const char * const verify_tag_usage[] = {
|
|||||||
NULL
|
NULL
|
||||||
};
|
};
|
||||||
|
|
||||||
#define PGP_SIGNATURE "-----BEGIN PGP SIGNATURE-----"
|
|
||||||
|
|
||||||
static int run_gpg_verify(const char *buf, unsigned long size, int verbose)
|
static int run_gpg_verify(const char *buf, unsigned long size, int verbose)
|
||||||
{
|
{
|
||||||
struct child_process gpg;
|
struct child_process gpg;
|
||||||
const char *args_gpg[] = {"gpg", "--verify", "FILE", "-", NULL};
|
const char *args_gpg[] = {"gpg", "--verify", "FILE", "-", NULL};
|
||||||
char path[PATH_MAX], *eol;
|
char path[PATH_MAX];
|
||||||
size_t len;
|
size_t len;
|
||||||
int fd, ret;
|
int fd, ret;
|
||||||
|
|
||||||
@ -37,11 +35,7 @@ static int run_gpg_verify(const char *buf, unsigned long size, int verbose)
|
|||||||
close(fd);
|
close(fd);
|
||||||
|
|
||||||
/* find the length without signature */
|
/* find the length without signature */
|
||||||
len = 0;
|
len = parse_signature(buf, size);
|
||||||
while (len < size && prefixcmp(buf + len, PGP_SIGNATURE)) {
|
|
||||||
eol = memchr(buf + len, '\n', size - len);
|
|
||||||
len += eol ? eol - (buf + len) + 1 : size - len;
|
|
||||||
}
|
|
||||||
if (verbose)
|
if (verbose)
|
||||||
write_in_full(1, buf, len);
|
write_in_full(1, buf, len);
|
||||||
|
|
||||||
|
@ -1030,6 +1030,72 @@ test_expect_success GPG \
|
|||||||
test_cmp expect actual
|
test_cmp expect actual
|
||||||
'
|
'
|
||||||
|
|
||||||
|
# usage with rfc1991 signatures
|
||||||
|
echo "rfc1991" > gpghome/gpg.conf
|
||||||
|
get_tag_header rfc1991-signed-tag $commit commit $time >expect
|
||||||
|
echo "RFC1991 signed tag" >>expect
|
||||||
|
echo '-----BEGIN PGP MESSAGE-----' >>expect
|
||||||
|
test_expect_success GPG \
|
||||||
|
'creating a signed tag with rfc1991' '
|
||||||
|
git tag -s -m "RFC1991 signed tag" rfc1991-signed-tag $commit &&
|
||||||
|
get_tag_msg rfc1991-signed-tag >actual &&
|
||||||
|
test_cmp expect actual
|
||||||
|
'
|
||||||
|
|
||||||
|
cat >fakeeditor <<'EOF'
|
||||||
|
#!/bin/sh
|
||||||
|
cp "$1" actual
|
||||||
|
EOF
|
||||||
|
chmod +x fakeeditor
|
||||||
|
|
||||||
|
test_expect_success GPG \
|
||||||
|
'reediting a signed tag body omits signature' '
|
||||||
|
echo "RFC1991 signed tag" >expect &&
|
||||||
|
GIT_EDITOR=./fakeeditor git tag -f -s rfc1991-signed-tag $commit &&
|
||||||
|
test_cmp expect actual
|
||||||
|
'
|
||||||
|
|
||||||
|
test_expect_success GPG \
|
||||||
|
'verifying rfc1991 signature' '
|
||||||
|
git tag -v rfc1991-signed-tag
|
||||||
|
'
|
||||||
|
|
||||||
|
test_expect_success GPG \
|
||||||
|
'list tag with rfc1991 signature' '
|
||||||
|
echo "rfc1991-signed-tag RFC1991 signed tag" >expect &&
|
||||||
|
git tag -l -n1 rfc1991-signed-tag >actual &&
|
||||||
|
test_cmp expect actual &&
|
||||||
|
git tag -l -n2 rfc1991-signed-tag >actual &&
|
||||||
|
test_cmp expect actual &&
|
||||||
|
git tag -l -n999 rfc1991-signed-tag >actual &&
|
||||||
|
test_cmp expect actual
|
||||||
|
'
|
||||||
|
|
||||||
|
rm -f gpghome/gpg.conf
|
||||||
|
|
||||||
|
test_expect_success GPG \
|
||||||
|
'verifying rfc1991 signature without --rfc1991' '
|
||||||
|
git tag -v rfc1991-signed-tag
|
||||||
|
'
|
||||||
|
|
||||||
|
test_expect_success GPG \
|
||||||
|
'list tag with rfc1991 signature without --rfc1991' '
|
||||||
|
echo "rfc1991-signed-tag RFC1991 signed tag" >expect &&
|
||||||
|
git tag -l -n1 rfc1991-signed-tag >actual &&
|
||||||
|
test_cmp expect actual &&
|
||||||
|
git tag -l -n2 rfc1991-signed-tag >actual &&
|
||||||
|
test_cmp expect actual &&
|
||||||
|
git tag -l -n999 rfc1991-signed-tag >actual &&
|
||||||
|
test_cmp expect actual
|
||||||
|
'
|
||||||
|
|
||||||
|
test_expect_success GPG \
|
||||||
|
'reediting a signed tag body omits signature' '
|
||||||
|
echo "RFC1991 signed tag" >expect &&
|
||||||
|
GIT_EDITOR=./fakeeditor git tag -f -s rfc1991-signed-tag $commit &&
|
||||||
|
test_cmp expect actual
|
||||||
|
'
|
||||||
|
|
||||||
# try to sign with bad user.signingkey
|
# try to sign with bad user.signingkey
|
||||||
git config user.signingkey BobTheMouse
|
git config user.signingkey BobTheMouse
|
||||||
test_expect_success GPG \
|
test_expect_success GPG \
|
||||||
|
15
tag.c
15
tag.c
@ -4,6 +4,9 @@
|
|||||||
#include "tree.h"
|
#include "tree.h"
|
||||||
#include "blob.h"
|
#include "blob.h"
|
||||||
|
|
||||||
|
#define PGP_SIGNATURE "-----BEGIN PGP SIGNATURE-----"
|
||||||
|
#define PGP_MESSAGE "-----BEGIN PGP MESSAGE-----"
|
||||||
|
|
||||||
const char *tag_type = "tag";
|
const char *tag_type = "tag";
|
||||||
|
|
||||||
struct object *deref_tag(struct object *o, const char *warn, int warnlen)
|
struct object *deref_tag(struct object *o, const char *warn, int warnlen)
|
||||||
@ -133,3 +136,15 @@ int parse_tag(struct tag *item)
|
|||||||
free(data);
|
free(data);
|
||||||
return ret;
|
return ret;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
size_t parse_signature(const char *buf, unsigned long size)
|
||||||
|
{
|
||||||
|
char *eol;
|
||||||
|
size_t len = 0;
|
||||||
|
while (len < size && prefixcmp(buf + len, PGP_SIGNATURE) &&
|
||||||
|
prefixcmp(buf + len, PGP_MESSAGE)) {
|
||||||
|
eol = memchr(buf + len, '\n', size - len);
|
||||||
|
len += eol ? eol - (buf + len) + 1 : size - len;
|
||||||
|
}
|
||||||
|
return len;
|
||||||
|
}
|
||||||
|
1
tag.h
1
tag.h
@ -16,5 +16,6 @@ extern struct tag *lookup_tag(const unsigned char *sha1);
|
|||||||
extern int parse_tag_buffer(struct tag *item, void *data, unsigned long size);
|
extern int parse_tag_buffer(struct tag *item, void *data, unsigned long size);
|
||||||
extern int parse_tag(struct tag *item);
|
extern int parse_tag(struct tag *item);
|
||||||
extern struct object *deref_tag(struct object *, const char *, int);
|
extern struct object *deref_tag(struct object *, const char *, int);
|
||||||
|
extern size_t parse_signature(const char *buf, unsigned long size);
|
||||||
|
|
||||||
#endif /* TAG_H */
|
#endif /* TAG_H */
|
||||||
|
Loading…
Reference in New Issue
Block a user