1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
|
/// Notarizes OpenPGP messages using the openpgp crate, Sequoia's
/// low-level API.
use std::env;
use std::io;
extern crate sequoia_openpgp as openpgp;
use openpgp::{
armor,
Packet,
constants::DataFormat,
parse::PacketParserResult,
serialize::Serialize,
};
use openpgp::serialize::stream::{Message, LiteralWriter, Signer};
fn main() {
let args: Vec<String> = env::args().collect();
if args.len() < 2 {
panic!("A simple notarizing filter.\n\n\
Usage: {} <secret-keyfile> [<secret-keyfile>...] \
<input >output\n", args[0]);
}
// Read the transferable secret keys from the given files.
let tsks: Vec<openpgp::TPK> = args[1..].iter().map(|f| {
openpgp::TPK::from_reader(
// Use an openpgp::Reader so that we accept both armored
// and plain PGP data.
openpgp::Reader::from_file(f)
.expect("Failed to open file"))
.expect("Failed to read key")
}).collect();
// Compose a writer stack corresponding to the output format and
// packet structure we want. First, we want the output to be
// ASCII armored.
let sink = armor::Writer::new(io::stdout(), armor::Kind::Message, &[])
.expect("Failed to create an armored writer.");
// Stream an OpenPGP message.
let message = Message::new(sink);
// Now, create a signer that emits a detached signature.
let mut signer = Signer::new(
message, &tsks.iter().collect::<Vec<&openpgp::TPK>>())
.expect("Failed to create signer");
// Create a parser for the message to be notarized.
let mut input = io::stdin();
let mut ppr
= openpgp::parse::PacketParser::from_reader(
openpgp::Reader::from_reader(&mut input)
.expect("Failed to build reader"))
.expect("Failed to build parser");
while let PacketParserResult::Some(mut pp) = ppr {
if ! pp.possible_message() {
panic!("Malformed OpenPGP message");
}
match pp.packet {
Packet::PKESK(_) | Packet::SKESK(_) =>
panic!("Encrypted messages are not supported"),
Packet::OnePassSig(ref ops) =>
ops.serialize(&mut signer).expect("Failed to serialize"),
Packet::Literal(_) => {
// Then, create a literal writer to wrap the data in a
// literal message packet.
let mut literal =
LiteralWriter::new(signer, DataFormat::Binary, None, None)
.expect("Failed to create literal writer");
// Copy all the data.
io::copy(&mut pp, &mut literal)
.expect("Failed to sign data");
signer = literal.finalize_one()
.expect("Failed to sign data")
.unwrap();
},
Packet::Signature(ref sig) =>
sig.serialize(&mut signer).expect("Failed to serialize"),
_ => (),
}
ppr = pp.recurse().expect("Failed to recurse").1;
}
if let PacketParserResult::EOF(eof) = ppr {
if ! eof.is_message() {
panic!("Malformed OpenPGP message")
}
} else {
unreachable!()
}
// Finally, teardown the stack to ensure all the data is written.
signer.finalize()
.expect("Failed to write data");
}
|
