bzr branch
http://gegoxaren.bato24.eu/bzr/brz/remove-bazaar
| 
1442.1.57
by Robert Collins
 check that we get the right command line from the default gpg strategy.  | 
1  | 
# Copyright (C) 2005 by Canonical Ltd
 | 
2  | 
#   Authors: Robert Collins <robert.collins@canonical.com>
 | 
|
3  | 
#
 | 
|
4  | 
# This program is free software; you can redistribute it and/or modify
 | 
|
5  | 
# it under the terms of the GNU General Public License as published by
 | 
|
6  | 
# the Free Software Foundation; either version 2 of the License, or
 | 
|
7  | 
# (at your option) any later version.
 | 
|
8  | 
#
 | 
|
9  | 
# This program is distributed in the hope that it will be useful,
 | 
|
10  | 
# but WITHOUT ANY WARRANTY; without even the implied warranty of
 | 
|
11  | 
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | 
|
12  | 
# GNU General Public License for more details.
 | 
|
13  | 
#
 | 
|
14  | 
# You should have received a copy of the GNU General Public License
 | 
|
15  | 
# along with this program; if not, write to the Free Software
 | 
|
16  | 
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 | 
|
17  | 
||
18  | 
"""GPG signing and checking logic."""
 | 
|
19  | 
||
| 
1442.1.58
by Robert Collins
 gpg signing of content  | 
20  | 
import errno  | 
| 
1912.3.1
by John Arbash Meinel
 updating gpg.py to set GPG_TTY in the environment.  | 
21  | 
import os  | 
| 
1442.1.57
by Robert Collins
 check that we get the right command line from the default gpg strategy.  | 
22  | 
import subprocess  | 
23  | 
||
| 
1912.3.2
by John Arbash Meinel
 Adding some logging, because on my machine TTY is not exported by default.  | 
24  | 
from bzrlib import (  | 
25  | 
errors,  | 
|
26  | 
trace,  | 
|
27  | 
    )
 | 
|
| 
1442.1.57
by Robert Collins
 check that we get the right command line from the default gpg strategy.  | 
28  | 
|
| 
1912.3.1
by John Arbash Meinel
 updating gpg.py to set GPG_TTY in the environment.  | 
29  | 
|
| 
1442.1.62
by Robert Collins
 Allow creation of testaments from uncommitted data, and use that to get signatures before committing revisions.  | 
30  | 
class DisabledGPGStrategy(object):  | 
31  | 
"""A GPG Strategy that makes everything fail."""  | 
|
32  | 
||
33  | 
def __init__(self, ignored):  | 
|
34  | 
"""Real strategies take a configuration."""  | 
|
35  | 
||
36  | 
def sign(self, content):  | 
|
37  | 
raise errors.SigningFailed('Signing is disabled.')  | 
|
38  | 
||
39  | 
||
| 
1442.1.59
by Robert Collins
 Add re-sign command to generate a digital signature on a single revision.  | 
40  | 
class LoopbackGPGStrategy(object):  | 
| 
1442.1.62
by Robert Collins
 Allow creation of testaments from uncommitted data, and use that to get signatures before committing revisions.  | 
41  | 
"""A GPG Strategy that acts like 'cat' - data is just passed through."""  | 
| 
1442.1.59
by Robert Collins
 Add re-sign command to generate a digital signature on a single revision.  | 
42  | 
|
43  | 
def __init__(self, ignored):  | 
|
44  | 
"""Real strategies take a configuration."""  | 
|
45  | 
||
46  | 
def sign(self, content):  | 
|
47  | 
return content  | 
|
48  | 
||
49  | 
||
| 
1912.3.1
by John Arbash Meinel
 updating gpg.py to set GPG_TTY in the environment.  | 
50  | 
def _set_gpg_tty():  | 
51  | 
tty = os.environ.get('TTY')  | 
|
52  | 
if tty is not None:  | 
|
53  | 
os.environ['GPG_TTY'] = tty  | 
|
| 
1912.3.2
by John Arbash Meinel
 Adding some logging, because on my machine TTY is not exported by default.  | 
54  | 
trace.mutter('setting GPG_TTY=%s', tty)  | 
55  | 
else:  | 
|
56  | 
        # This is not quite worthy of a warning, because some people
 | 
|
57  | 
        # don't need GPG_TTY to be set. But it is worthy of a big mark
 | 
|
58  | 
        # in ~/.bzr.log, so that people can debug it if it happens to them
 | 
|
59  | 
trace.mutter('** Env var TTY empty, cannot set GPG_TTY.'  | 
|
60  | 
' Is TTY exported?')  | 
|
| 
1912.3.1
by John Arbash Meinel
 updating gpg.py to set GPG_TTY in the environment.  | 
61  | 
|
62  | 
||
| 
1442.1.57
by Robert Collins
 check that we get the right command line from the default gpg strategy.  | 
63  | 
class GPGStrategy(object):  | 
64  | 
"""GPG Signing and checking facilities."""  | 
|
65  | 
||
66  | 
def _command_line(self):  | 
|
| 
1185.78.4
by John Arbash Meinel
 Reverting gpg changes, should not be mainline, see gpg_uses_tempfile plugin.  | 
67  | 
return [self._config.gpg_signing_command(), '--clearsign']  | 
| 
1442.1.57
by Robert Collins
 check that we get the right command line from the default gpg strategy.  | 
68  | 
|
69  | 
def __init__(self, config):  | 
|
70  | 
self._config = config  | 
|
| 
1442.1.58
by Robert Collins
 gpg signing of content  | 
71  | 
|
72  | 
def sign(self, content):  | 
|
73  | 
try:  | 
|
| 
1185.78.4
by John Arbash Meinel
 Reverting gpg changes, should not be mainline, see gpg_uses_tempfile plugin.  | 
74  | 
process = subprocess.Popen(self._command_line(),  | 
75  | 
stdin=subprocess.PIPE,  | 
|
| 
1912.3.1
by John Arbash Meinel
 updating gpg.py to set GPG_TTY in the environment.  | 
76  | 
stdout=subprocess.PIPE,  | 
77  | 
preexec_fn=_set_gpg_tty)  | 
|
| 
1442.1.58
by Robert Collins
 gpg signing of content  | 
78  | 
try:  | 
| 
1185.78.4
by John Arbash Meinel
 Reverting gpg changes, should not be mainline, see gpg_uses_tempfile plugin.  | 
79  | 
result = process.communicate(content)[0]  | 
| 
1442.1.58
by Robert Collins
 gpg signing of content  | 
80  | 
if process.returncode is None:  | 
81  | 
process.wait()  | 
|
82  | 
if process.returncode != 0:  | 
|
| 
1185.78.4
by John Arbash Meinel
 Reverting gpg changes, should not be mainline, see gpg_uses_tempfile plugin.  | 
83  | 
raise errors.SigningFailed(self._command_line())  | 
| 
1442.1.58
by Robert Collins
 gpg signing of content  | 
84  | 
return result  | 
| 
1442.1.59
by Robert Collins
 Add re-sign command to generate a digital signature on a single revision.  | 
85  | 
except OSError, e:  | 
| 
1442.1.58
by Robert Collins
 gpg signing of content  | 
86  | 
if e.errno == errno.EPIPE:  | 
| 
1185.78.4
by John Arbash Meinel
 Reverting gpg changes, should not be mainline, see gpg_uses_tempfile plugin.  | 
87  | 
raise errors.SigningFailed(self._command_line())  | 
| 
1442.1.59
by Robert Collins
 Add re-sign command to generate a digital signature on a single revision.  | 
88  | 
else:  | 
89  | 
                    raise
 | 
|
| 
1442.1.58
by Robert Collins
 gpg signing of content  | 
90  | 
except ValueError:  | 
91  | 
            # bad subprocess parameters, should never happen.
 | 
|
92  | 
            raise
 | 
|
93  | 
except OSError, e:  | 
|
94  | 
if e.errno == errno.ENOENT:  | 
|
95  | 
                # gpg is not installed
 | 
|
| 
1185.78.4
by John Arbash Meinel
 Reverting gpg changes, should not be mainline, see gpg_uses_tempfile plugin.  | 
96  | 
raise errors.SigningFailed(self._command_line())  | 
| 
1442.1.58
by Robert Collins
 gpg signing of content  | 
97  | 
else:  | 
98  | 
                raise
 |