From 1ddc1dd61b45b41801c1d1c364cd6789314cb8f3 Mon Sep 17 00:00:00 2001
From: Justus Winter <justus@sequoia-pgp.org>
Date: Tue, 19 Nov 2019 15:50:23 +0100
Subject: openpgp: Use the builder pattern for stream::Signer.

  - See #375.
---
 tool/src/commands/mod.rs  | 14 ++++++++------
 tool/src/commands/sign.rs | 38 +++++++++++++++++++-------------------
 2 files changed, 27 insertions(+), 25 deletions(-)

(limited to 'tool/src')

diff --git a/tool/src/commands/mod.rs b/tool/src/commands/mod.rs
index 21521e90..f651756b 100644
--- a/tool/src/commands/mod.rs
+++ b/tool/src/commands/mod.rs
@@ -148,12 +148,14 @@ pub fn encrypt(mapping: &mut store::Mapping,
 
     // Optionally sign message.
     if ! signers.is_empty() {
-        sink = Signer::with_intended_recipients(
-            sink,
-            signers.iter_mut().map(|s| -> &mut dyn crypto::Signer<_> { s })
-                .collect(),
-            &recipients,
-            None)?;
+        let mut signer = Signer::new(sink, signers.pop().unwrap());
+        for s in signers {
+            signer = signer.add_signer(s);
+        }
+        for r in recipients {
+            signer = signer.add_intended_recipient(r);
+        }
+        sink = signer.build()?;
     }
 
     let mut literal_writer = LiteralWriter::new(sink, None, None, None)
diff --git a/tool/src/commands/sign.rs b/tool/src/commands/sign.rs
index 1b2c98b3..51b098b7 100644
--- a/tool/src/commands/sign.rs
+++ b/tool/src/commands/sign.rs
@@ -6,7 +6,6 @@ use tempfile::NamedTempFile;
 
 extern crate sequoia_openpgp as openpgp;
 use crate::openpgp::armor;
-use crate::openpgp::crypto;
 use crate::openpgp::{Packet, Result};
 use crate::openpgp::packet::Signature;
 use crate::openpgp::parse::{
@@ -82,9 +81,9 @@ fn sign_data(input: &mut dyn io::Read, output_path: Option<&str>,
     };
 
     let mut keypairs = super::get_signing_keys(&secrets)?;
-    let signers = keypairs.iter_mut()
-        .map(|s| -> &mut dyn crypto::Signer<_> { s })
-        .collect();
+    if keypairs.is_empty() {
+        return Err(failure::format_err!("No signing keys found"));
+    }
 
     // When extending a detached signature, prepend any existing
     // signatures first.
@@ -95,11 +94,14 @@ fn sign_data(input: &mut dyn io::Read, output_path: Option<&str>,
     // Stream an OpenPGP message.
     let sink = Message::new(output);
 
-    let signer = if detached {
-        Signer::detached(sink, signers, None)
-    } else {
-        Signer::new(sink, signers, None)
-    }.context("Failed to create signer")?;
+    let mut signer = Signer::new(sink, keypairs.pop().unwrap());
+    for s in keypairs {
+        signer = signer.add_signer(s);
+    }
+    if detached {
+        signer = signer.detached();
+    }
+    let signer = signer.build().context("Failed to create signer")?;
 
     let mut writer = if detached {
         // Detached signatures do not need a literal data packet, just
@@ -140,13 +142,9 @@ fn sign_message(input: &mut dyn io::Read, output_path: Option<&str>,
     };
 
     let mut keypairs = super::get_signing_keys(&secrets)?;
-    // We need to create the signers here, so that we can take() them
-    // once in the parsing loop.  We cannot create the references in
-    // the loop, because the borrow checker does not understand that
-    // it happens only once.
-    let mut signers = Some(keypairs.iter_mut()
-                           .map(|s| -> &mut dyn crypto::Signer<_> { s })
-                           .collect::<Vec<&mut dyn crypto::Signer<_>>>());
+    if keypairs.is_empty() {
+        return Err(failure::format_err!("No signing keys found"));
+    }
 
     let mut sink = Message::new(output);
 
@@ -212,9 +210,11 @@ fn sign_message(input: &mut dyn io::Read, output_path: Option<&str>,
             State::AfterFirstSigGroup => {
                 // After the first signature group, we push the signer
                 // onto the writer stack.
-                let signers = signers.take().expect("only happens once");
-                sink = Signer::new(sink, signers, None)
-                    .context("Failed to create signer")?;
+                let mut signer = Signer::new(sink, keypairs.pop().unwrap());
+                for s in keypairs.drain(..) {
+                    signer = signer.add_signer(s);
+                }
+                sink = signer.build().context("Failed to create signer")?;
                 state = State::Signing { signature_count: 0, };
             },
 
-- 
cgit v1.2.3