1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
|
/// Signs data using the openpgp crate and secrets in gpg-agent.
use std::io;
extern crate clap;
extern crate sequoia_openpgp as openpgp;
extern crate sequoia_ipc as ipc;
use openpgp::armor;
use openpgp::constants::DataFormat;
use openpgp::parse::Parse;
use openpgp::serialize::stream::{Message, LiteralWriter, Signer};
use ipc::gnupg::{Context, KeyPair};
fn main() {
let matches = clap::App::new("gpg-agent-sign")
.version(env!("CARGO_PKG_VERSION"))
.about("Connects to gpg-agent and creates a dummy signature.")
.arg(clap::Arg::with_name("homedir").value_name("PATH")
.long("homedir")
.help("Use this GnuPG home directory, default: $GNUPGHOME"))
.arg(clap::Arg::with_name("tpk").value_name("TPK")
.required(true)
.multiple(true)
.help("Public part of the secret keys managed by gpg-agent"))
.get_matches();
let ctx = if let Some(homedir) = matches.value_of("homedir") {
Context::with_homedir(homedir).unwrap()
} else {
Context::new().unwrap()
};
// Read the TPKs from the given files.
let tpks =
matches.values_of("tpk").expect("required").map(|f| {
openpgp::TPK::from_file(f)
.expect("Failed to read key")
}).collect::<Vec<_>>();
// Construct a KeyPair for every signing-capable (sub)key.
let mut keypairs = tpks.iter().flat_map(|tpk| tpk.keys_valid().signing_capable().filter_map(|(_, _, key)| {
KeyPair::new(&ctx, key).ok()
})).collect::<Vec<KeyPair>>();
// Well, this is awkward...
let signers = keypairs.iter_mut()
.map(|s| -> &mut dyn openpgp::crypto::Signer { s })
.collect();
// Compose a writer stack corresponding to the output format and
// packet structure we want. First, we want the output to be
// ASCII armored.
let sink = armor::Writer::new(io::stdout(), armor::Kind::Message, &[])
.expect("Failed to create an armored writer.");
// Stream an OpenPGP message.
let message = Message::new(sink);
// Now, create a signer that emits a signature.
let signer = Signer::new(message, signers, None)
.expect("Failed to create signer");
// Then, create a literal writer to wrap the data in a literal
// message packet.
let mut literal = LiteralWriter::new(signer, DataFormat::Binary, None, None)
.expect("Failed to create literal writer");
// Copy all the data.
io::copy(&mut io::stdin(), &mut literal)
.expect("Failed to sign data");
// Finally, teardown the stack to ensure all the data is written.
literal.finalize()
.expect("Failed to write data");
}
|
