/brz/remove-bazaar

# Copyright (C) 2006, 2007, 2009, 2010, 2011 Canonical Ltd

#

# This program is free software; you can redistribute it and/or modify

# it under the terms of the GNU General Public License as published by

# the Free Software Foundation; either version 2 of the License, or

# (at your option) any later version.

#

# This program is distributed in the hope that it will be useful,

# but WITHOUT ANY WARRANTY; without even the implied warranty of

# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

# GNU General Public License for more details.

#

# You should have received a copy of the GNU General Public License

# along with this program; if not, write to the Free Software

# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA

"""Command which looks for unsigned commits by the current user, and signs them.

"""

from bzrlib.lazy_import import lazy_import

lazy_import(globals(), """

from bzrlib import (

    bzrdir as _mod_bzrdir,

    errors,

    gpg,

    revision as _mod_revision,

    )

""")

from bzrlib.commands import Command

from bzrlib.option import Option

from bzrlib.trace import note

from bzrlib.i18n import gettext, ngettext

class cmd_sign_my_commits(Command):

    __doc__ = """Sign all commits by a given committer.

    If location is not specified the local tree is used.

    If committer is not specified the default committer is used.

    This does not sign commits that already have signatures.

    """

    # Note that this signs everything on the branch's ancestry

    # (both mainline and merged), but not other revisions that may be in the

    # repository

    takes_options = [

            Option('dry-run',

                   help='Don\'t actually sign anything, just print'

                        ' the revisions that would be signed.'),

            ]

    takes_args = ['location?', 'committer?']

    def run(self, location=None, committer=None, dry_run=False):

        if location is None:

            bzrdir = _mod_bzrdir.BzrDir.open_containing('.')[0]

        else:

            # Passed in locations should be exact

            bzrdir = _mod_bzrdir.BzrDir.open(location)

        branch = bzrdir.open_branch()

        repo = branch.repository

        branch_config = branch.get_config()

        if committer is None:

            committer = branch_config.username()

        gpg_strategy = gpg.GPGStrategy(branch_config)

        count = 0

        repo.lock_write()

        try:

            graph = repo.get_graph()

            repo.start_write_group()

            try:

                for rev_id, parents in graph.iter_ancestry(

                        [branch.last_revision()]):

                    if _mod_revision.is_null(rev_id):

                        continue

                    if parents is None:

                        # Ignore ghosts

                        continue

                    if repo.has_signature_for_revision_id(rev_id):

                        continue

                    rev = repo.get_revision(rev_id)

                    if rev.committer != committer:

                        continue

                    # We have a revision without a signature who has a

                    # matching committer, start signing

                    print rev_id

                    count += 1

                    if not dry_run:

                        repo.sign_revision(rev_id, gpg_strategy)

            except:

                repo.abort_write_group()

                raise

            else:

                repo.commit_write_group()

        finally:

            repo.unlock()

        print 'Signed %d revisions' % (count,)

class cmd_verify_signatures(Command):

    __doc__ = """Verify all commit signatures.

    Verifies that all commits in the branch are signed by known GnuPG keys.

    """

    takes_options = [

            Option('acceptable-keys',

                   help='Comma separated list of GPG key patterns which are'

                        ' acceptable for verification.',

                   short_name='k',

                   type=str,),

            'revision', 

            'verbose',

            'directory',

          ]

    def run(self, acceptable_keys=None, revision=None, verbose=None,

                                                            directory=u'.'):

        bzrdir = _mod_bzrdir.BzrDir.open_containing(directory)[0]

        branch = bzrdir.open_branch()

        repo = branch.repository

        branch_config = branch.get_config()

        gpg_strategy = gpg.GPGStrategy(branch_config)

        acceptable_keys_config = branch_config.acceptable_keys()

        try:

            acceptable_keys_config = str(acceptable_keys_config)

        except UnicodeEncodeError:

            raise errors.BzrCommandError('Only ASCII permitted in option names')

        if acceptable_keys_config is not None:

            gpg_strategy.set_acceptable_keys(acceptable_keys_config)

        if acceptable_keys is not None: #command line overrides config

            gpg_strategy.set_acceptable_keys(acceptable_keys)

        count = {gpg.SIGNATURE_VALID: 0,

                 gpg.SIGNATURE_KEY_MISSING: 0,

                 gpg.SIGNATURE_NOT_VALID: 0,

                 gpg.SIGNATURE_NOT_SIGNED: 0}

        result = []

        revisions = []

        if revision is not None:

            if len(revision) == 1:

                revno, rev_id = revision[0].in_history(branch)

                revisions.append(rev_id)

            elif len(revision) == 2:

                from_revno, from_revid = revision[0].in_history(branch)

                to_revno, to_revid = revision[1].in_history(branch)

                if to_revid is None:

                    to_revno = branch.revno()

                if from_revno is None or to_revno is None:

                    raise errors.BzrCommandError('Cannot verify a range of '\

                                               'non-revision-history revisions')

                for revno in range(from_revno, to_revno + 1):

                    revisions.append(branch.get_rev_id(revno))

        else:

            #all revisions by default including merges

            graph = repo.get_graph()

            revisions = []

            repo.lock_read()

            for rev_id, parents in graph.iter_ancestry(

                    [branch.last_revision()]):

                if _mod_revision.is_null(rev_id):

                    continue

                if parents is None:

                    # Ignore ghosts

                    continue

                revisions.append(rev_id)

            repo.unlock()

        for rev_id in revisions:

            verification_result, uid = repo.verify_revision(rev_id,gpg_strategy)

            result.append([rev_id, verification_result, uid])

            count[verification_result] += 1

        if count[gpg.SIGNATURE_VALID] > 0 and \

           count[gpg.SIGNATURE_KEY_MISSING] == 0 and \

           count[gpg.SIGNATURE_NOT_VALID] == 0 and \

           count[gpg.SIGNATURE_NOT_SIGNED] == 0:

               note(gettext("All commits signed with verifiable keys"))

               if verbose:

                   self._print_verbose_valid_message(result)

               return 0

        else:

            note(gettext("{0} commits with valid signatures").format(

                                        count[gpg.SIGNATURE_VALID]))

            if verbose:

               self._print_verbose_valid_message(result)

            #TODO verbose for the other types too

            note(ngettext("{0} commit with unknown key",

                          "{0} commits with unknown keys",

                          count[gpg.SIGNATURE_KEY_MISSING]).format(

                                        count[gpg.SIGNATURE_KEY_MISSING]))

            if verbose:

               self._print_verbose_missing_key_message(result)

            note(ngettext("{0} commit not valid",

                          "{0} commits not valid",

                          count[gpg.SIGNATURE_NOT_VALID]).format(

                                        count[gpg.SIGNATURE_NOT_VALID]))

            if verbose:

               self._print_verbose_not_valid(result, repo)

            note(ngettext("{0} commit not signed",

                          "{0} commits not signed",

                          count[gpg.SIGNATURE_NOT_SIGNED]).format(

                                        count[gpg.SIGNATURE_NOT_SIGNED]))

            if verbose:

               self._print_verbose_not_signed(result, repo)

            return 1

    def _print_verbose_not_valid(self, result, repo):

        """takes a verify result and prints out not signed commit info"""

        signers = {}

        for rev_id, validity, empty in result:

            if validity == gpg.SIGNATURE_NOT_VALID:

                revision = repo.get_revision(rev_id)

                authors = ', '.join(revision.get_apparent_authors())

                signers.setdefault(authors, 0)

                signers[authors] += 1

        for authors, number in signers.items():

            note(gettext(ngettext("  {0} commit by author {1}", 

                                "  {0} commits by author {1}",

                            number)).format(number, authors))

    def _print_verbose_not_signed(self, result, repo):

        """takes a verify result and prints out not signed commit info"""

        signers = {}

        for rev_id, validity, empty in result:

            if validity == gpg.SIGNATURE_KEY_MISSING:

                revision = repo.get_revision(rev_id)

                authors = ', '.join(revision.get_apparent_authors())

                signers.setdefault(authors, 0)

                signers[authors] += 1

        for authors, number in signers.items():

            note(gettext(ngettext("  {0} commit by author {1}", 

                                "  {0} commits by author {1}",

                            number)).format(number, authors))

    def _print_verbose_missing_key_message(self, result):

        """takes a verify result and prints out missing key info"""

        signers = {}

        for rev_id, validity, fingerprint in result:

            if validity == gpg.SIGNATURE_KEY_MISSING:

                signers.setdefault(fingerprint, 0)

                signers[fingerprint] += 1

        for fingerprint, number in signers.items():

            note(gettext(ngettext("  Unknown key {0} signed {1} commit", 

                                "  Unknown key {0} signed {1} commits",

                            number)).format(fingerprint, number))

    def _print_verbose_valid_message(self, result):

        """takes a verify result and prints out number of signed commits"""

        signers = {}

        for rev_id, validity, uid in result:

            if validity == gpg.SIGNATURE_VALID:

                signers.setdefault(uid, 0)

                signers[uid] += 1

        for uid, number in signers.items():

            note(gettext(ngettext("  {0} signed {1} commit", 

                                "  {0} signed {1} commits",

                            number)).format(uid, number))