:group 'epg
:type 'string)
-(defconst epg-version-number "0.0.0")
+(defcustom epg-gpgsm-program "gpgsm"
+ "The `gpgsm' executable."
+ :group 'epg
+ :type 'string)
+
+(defconst epg-version-number "0.0.1")
(defvar epg-user-id nil
"GnuPG ID of your default identity.")
(?c . certify)
(?a . authentication)))
+(defvar epg-dn-type-alist
+ '(("1.2.840.113549.1.9.1" . "EMail")
+ ("2.5.4.12" . "T")
+ ("2.5.4.42" . "GN")
+ ("2.5.4.4" . "SN")
+ ("0.2.262.1.10.7.20" . "NameDistinguisher")
+ ("2.5.4.16" . "ADDR")
+ ("2.5.4.15" . "BC")
+ ("2.5.4.13" . "D")
+ ("2.5.4.17" . "PostalCode")
+ ("2.5.4.65" . "Pseudo")
+ ("2.5.4.5" . "SerialNumber")))
+
(defvar epg-prompt-alist nil)
(defun epg-make-data-from-file (file)
"Make a data object from FILE."
- (vector file nil))
+ (cons 'epg-data (vector file nil)))
(defun epg-make-data-from-string (string)
"Make a data object from STRING."
- (vector nil string))
+ (cons 'epg-data (vector nil string)))
(defun epg-data-file (data)
"Return the file of DATA."
- (aref data 0))
+ (unless (eq (car data) 'epg-data)
+ (signal 'wrong-type-argument (list 'epg-data-p data)))
+ (aref (cdr data) 0))
(defun epg-data-string (data)
"Return the string of DATA."
- (aref data 1))
+ (unless (eq (car data) 'epg-data)
+ (signal 'wrong-type-argument (list 'epg-data-p data)))
+ (aref (cdr data) 1))
(defun epg-make-context (&optional protocol armor textmode include-certs
cipher-algorithm digest-algorithm
compress-algorithm)
"Return a context object."
- (vector protocol armor textmode include-certs
- cipher-algorithm digest-algorithm compress-algorithm
- #'epg-passphrase-callback-function
- #'epg-progress-callback-function
- nil nil nil nil))
+ (cons 'epg-context
+ (vector (or protocol 'OpenPGP) armor textmode include-certs
+ cipher-algorithm digest-algorithm compress-algorithm
+ #'epg-passphrase-callback-function
+ #'epg-progress-callback-function
+ nil nil nil nil)))
(defun epg-context-protocol (context)
"Return the protocol used within CONTEXT."
- (aref context 0))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aref (cdr context) 0))
(defun epg-context-armor (context)
"Return t if the output shouled be ASCII armored in CONTEXT."
- (aref context 1))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aref (cdr context) 1))
(defun epg-context-textmode (context)
"Return t if canonical text mode should be used in CONTEXT."
- (aref context 2))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aref (cdr context) 2))
(defun epg-context-include-certs (context)
"Return how many certificates should be included in an S/MIME signed
message."
- (aref context 3))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aref (cdr context) 3))
(defun epg-context-cipher-algorithm (context)
"Return the cipher algorithm in CONTEXT."
- (aref context 4))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aref (cdr context) 4))
(defun epg-context-digest-algorithm (context)
"Return the digest algorithm in CONTEXT."
- (aref context 5))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aref (cdr context) 5))
(defun epg-context-compress-algorithm (context)
"Return the compress algorithm in CONTEXT."
- (aref context 6))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aref (cdr context) 6))
(defun epg-context-passphrase-callback (context)
"Return the function used to query passphrase."
- (aref context 7))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aref (cdr context) 7))
(defun epg-context-progress-callback (context)
"Return the function which handles progress update."
- (aref context 8))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aref (cdr context) 8))
(defun epg-context-signers (context)
"Return the list of key-id for singning."
- (aref context 9))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aref (cdr context) 9))
(defun epg-context-process (context)
"Return the process object of `epg-gpg-program'.
This function is for internal use only."
- (aref context 10))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aref (cdr context) 10))
(defun epg-context-output-file (context)
"Return the output file of `epg-gpg-program'.
This function is for internal use only."
- (aref context 11))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aref (cdr context) 11))
(defun epg-context-result (context)
"Return the result of the previous cryptographic operation."
- (aref context 12))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aref (cdr context) 12))
(defun epg-context-set-protocol (context protocol)
"Set the protocol used within CONTEXT."
- (aset context 0 protocol))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aset (cdr context) 0 protocol))
(defun epg-context-set-armor (context armor)
"Specify if the output shouled be ASCII armored in CONTEXT."
- (aset context 1 armor))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aset (cdr context) 1 armor))
(defun epg-context-set-textmode (context textmode)
"Specify if canonical text mode should be used in CONTEXT."
- (aset context 2 textmode))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aset (cdr context) 2 textmode))
(defun epg-context-set-include-certs (context include-certs)
"Set how many certificates should be included in an S/MIME signed message."
- (aset context 3 include-certs))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aset (cdr context) 3 include-certs))
(defun epg-context-set-cipher-algorithm (context cipher-algorithm)
"Set the cipher algorithm in CONTEXT."
- (aset context 4 cipher-algorithm))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aset (cdr context) 4 cipher-algorithm))
(defun epg-context-set-digest-algorithm (context digest-algorithm)
"Set the digest algorithm in CONTEXT."
- (aset context 5 digest-algorithm))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aset (cdr context) 5 digest-algorithm))
(defun epg-context-set-compress-algorithm (context compress-algorithm)
"Set the compress algorithm in CONTEXT."
- (aset context 6 compress-algorithm))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aset (cdr context) 6 compress-algorithm))
(defun epg-context-set-passphrase-callback (context
passphrase-callback)
"Set the function used to query passphrase."
- (aset context 7 passphrase-callback))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aset (cdr context) 7 passphrase-callback))
(defun epg-context-set-progress-callback (context progress-callback)
"Set the function which handles progress update."
- (aset context 8 progress-callback))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aset (cdr context) 8 progress-callback))
(defun epg-context-set-signers (context signers)
"Set the list of key-id for singning."
- (aset context 9 signers))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aset (cdr context) 9 signers))
(defun epg-context-set-process (context process)
"Set the process object of `epg-gpg-program'.
This function is for internal use only."
- (aset context 10 process))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aset (cdr context) 10 process))
(defun epg-context-set-output-file (context output-file)
"Set the output file of `epg-gpg-program'.
This function is for internal use only."
- (aset context 11 output-file))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aset (cdr context) 11 output-file))
(defun epg-context-set-result (context result)
"Set the result of the previous cryptographic operation."
- (aset context 12 result))
+ (unless (eq (car context) 'epg-context)
+ (signal 'wrong-type-argument (list 'epg-context-p context)))
+ (aset (cdr context) 12 result))
-(defun epg-make-signature (status key-id user-id)
+(defun epg-make-signature (status &optional key-id)
"Return a signature object."
- (vector status key-id user-id nil nil))
+ (cons 'epg-signature (vector status key-id nil nil nil nil nil nil)))
(defun epg-signature-status (signature)
"Return the status code of SIGNATURE."
- (aref signature 0))
+ (unless (eq (car signature) 'epg-signature)
+ (signal 'wrong-type-argument (list 'epg-signature-p signature)))
+ (aref (cdr signature) 0))
(defun epg-signature-key-id (signature)
"Return the key-id of SIGNATURE."
- (aref signature 1))
+ (unless (eq (car signature) 'epg-signature)
+ (signal 'wrong-type-argument (list 'epg-signature-p signature)))
+ (aref (cdr signature) 1))
-(defun epg-signature-user-id (signature)
- "Return the user-id of SIGNATURE."
- (aref signature 2))
-
(defun epg-signature-validity (signature)
"Return the validity of SIGNATURE."
- (aref signature 3))
+ (unless (eq (car signature) 'epg-signature)
+ (signal 'wrong-type-argument (list 'epg-signature-p signature)))
+ (aref (cdr signature) 2))
(defun epg-signature-fingerprint (signature)
"Return the fingerprint of SIGNATURE."
- (aref signature 4))
+ (unless (eq (car signature) 'epg-signature)
+ (signal 'wrong-type-argument (list 'epg-signature-p signature)))
+ (aref (cdr signature) 3))
+
+(defun epg-signature-creation-time (signature)
+ "Return the creation time of SIGNATURE."
+ (unless (eq (car signature) 'epg-signature)
+ (signal 'wrong-type-argument (list 'epg-signature-p signature)))
+ (aref (cdr signature) 4))
+
+(defun epg-signature-expiration-time (signature)
+ "Return the expiration time of SIGNATURE."
+ (unless (eq (car signature) 'epg-signature)
+ (signal 'wrong-type-argument (list 'epg-signature-p signature)))
+ (aref (cdr signature) 5))
+
+(defun epg-signature-pubkey-algorithm (signature)
+ "Return the public key algorithm of SIGNATURE."
+ (unless (eq (car signature) 'epg-signature)
+ (signal 'wrong-type-argument (list 'epg-signature-p signature)))
+ (aref (cdr signature) 6))
+
+(defun epg-signature-digest-algorithm (signature)
+ "Return the digest algorithm of SIGNATURE."
+ (unless (eq (car signature) 'epg-signature)
+ (signal 'wrong-type-argument (list 'epg-signature-p signature)))
+ (aref (cdr signature) 7))
(defun epg-signature-set-status (signature status)
"Set the status code of SIGNATURE."
- (aset signature 0 status))
+ (unless (eq (car signature) 'epg-signature)
+ (signal 'wrong-type-argument (list 'epg-signature-p signature)))
+ (aset (cdr signature) 0 status))
(defun epg-signature-set-key-id (signature key-id)
"Set the key-id of SIGNATURE."
- (aset signature 1 key-id))
+ (unless (eq (car signature) 'epg-signature)
+ (signal 'wrong-type-argument (list 'epg-signature-p signature)))
+ (aset (cdr signature) 1 key-id))
-(defun epg-signature-set-user-id (signature user-id)
- "Set the user-id of SIGNATURE."
- (aset signature 2 user-id))
-
(defun epg-signature-set-validity (signature validity)
"Set the validity of SIGNATURE."
- (aset signature 3 validity))
+ (unless (eq (car signature) 'epg-signature)
+ (signal 'wrong-type-argument (list 'epg-signature-p signature)))
+ (aset (cdr signature) 2 validity))
(defun epg-signature-set-fingerprint (signature fingerprint)
"Set the fingerprint of SIGNATURE."
- (aset signature 4 fingerprint))
+ (unless (eq (car signature) 'epg-signature)
+ (signal 'wrong-type-argument (list 'epg-signature-p signature)))
+ (aset (cdr signature) 3 fingerprint))
+
+(defun epg-signature-set-creation-time (signature creation-time)
+ "Set the creation time of SIGNATURE."
+ (unless (eq (car signature) 'epg-signature)
+ (signal 'wrong-type-argument (list 'epg-signature-p signature)))
+ (aset (cdr signature) 4 creation-time))
+
+(defun epg-signature-set-expiration-time (signature expiration-time)
+ "Set the expiration time of SIGNATURE."
+ (unless (eq (car signature) 'epg-signature)
+ (signal 'wrong-type-argument (list 'epg-signature-p signature)))
+ (aset (cdr signature) 5 expiration-time))
+
+(defun epg-signature-set-pubkey-algorithm (signature pubkey-algorithm)
+ "Set the public key algorithm of SIGNATURE."
+ (unless (eq (car signature) 'epg-signature)
+ (signal 'wrong-type-argument (list 'epg-signature-p signature)))
+ (aset (cdr signature) 6 pubkey-algorithm))
+
+(defun epg-signature-set-digest-algorithm (signature digest-algorithm)
+ "Set the digest algorithm of SIGNATURE."
+ (unless (eq (car signature) 'epg-signature)
+ (signal 'wrong-type-argument (list 'epg-signature-p signature)))
+ (aset (cdr signature) 7 digest-algorithm))
(defun epg-make-key (owner-trust)
"Return a key object."
- (vector owner-trust nil nil))
+ (cons 'epg-key (vector owner-trust nil nil)))
(defun epg-key-owner-trust (key)
"Return the owner trust of KEY."
- (aref key 0))
+ (unless (eq (car key) 'epg-key)
+ (signal 'wrong-type-argument (list 'epg-key-p key)))
+ (aref (cdr key) 0))
(defun epg-key-sub-key-list (key)
"Return the sub key list of KEY."
- (aref key 1))
+ (unless (eq (car key) 'epg-key)
+ (signal 'wrong-type-argument (list 'epg-key-p key)))
+ (aref (cdr key) 1))
(defun epg-key-user-id-list (key)
"Return the user ID list of KEY."
- (aref key 2))
+ (unless (eq (car key) 'epg-key)
+ (signal 'wrong-type-argument (list 'epg-key-p key)))
+ (aref (cdr key) 2))
(defun epg-key-set-sub-key-list (key sub-key-list)
"Set the sub key list of KEY."
- (aset key 1 sub-key-list))
+ (unless (eq (car key) 'epg-key)
+ (signal 'wrong-type-argument (list 'epg-key-p key)))
+ (aset (cdr key) 1 sub-key-list))
(defun epg-key-set-user-id-list (key user-id-list)
"Set the user ID list of KEY."
- (aset key 2 user-id-list))
+ (unless (eq (car key) 'epg-key)
+ (signal 'wrong-type-argument (list 'epg-key-p key)))
+ (aset (cdr key) 2 user-id-list))
(defun epg-make-sub-key (validity capability secret algorithm length id
creation-time expiration-time)
"Return a sub key object."
- (vector validity capability secret algorithm length id creation-time
- expiration-time nil))
+ (cons 'epg-sub-key
+ (vector validity capability secret algorithm length id creation-time
+ expiration-time nil)))
(defun epg-sub-key-validity (sub-key)
"Return the validity of SUB-KEY."
- (aref sub-key 0))
+ (unless (eq (car sub-key) 'epg-sub-key)
+ (signal 'wrong-type-argument (list 'epg-sub-key-p sub-key)))
+ (aref (cdr sub-key) 0))
(defun epg-sub-key-capability (sub-key)
"Return the capability of SUB-KEY."
- (aref sub-key 1))
+ (unless (eq (car sub-key) 'epg-sub-key)
+ (signal 'wrong-type-argument (list 'epg-sub-key-p sub-key)))
+ (aref (cdr sub-key) 1))
(defun epg-sub-key-secret (sub-key)
"Return non-nil if SUB-KEY is a secret key."
- (aref sub-key 2))
+ (unless (eq (car sub-key) 'epg-sub-key)
+ (signal 'wrong-type-argument (list 'epg-sub-key-p sub-key)))
+ (aref (cdr sub-key) 2))
(defun epg-sub-key-algorithm (sub-key)
"Return the algorithm of SUB-KEY."
- (aref sub-key 3))
+ (unless (eq (car sub-key) 'epg-sub-key)
+ (signal 'wrong-type-argument (list 'epg-sub-key-p sub-key)))
+ (aref (cdr sub-key) 3))
(defun epg-sub-key-length (sub-key)
"Return the length of SUB-KEY."
- (aref sub-key 4))
+ (unless (eq (car sub-key) 'epg-sub-key)
+ (signal 'wrong-type-argument (list 'epg-sub-key-p sub-key)))
+ (aref (cdr sub-key) 4))
(defun epg-sub-key-id (sub-key)
"Return the ID of SUB-KEY."
- (aref sub-key 5))
+ (unless (eq (car sub-key) 'epg-sub-key)
+ (signal 'wrong-type-argument (list 'epg-sub-key-p sub-key)))
+ (aref (cdr sub-key) 5))
(defun epg-sub-key-creation-time (sub-key)
"Return the creation time of SUB-KEY."
- (aref sub-key 6))
+ (unless (eq (car sub-key) 'epg-sub-key)
+ (signal 'wrong-type-argument (list 'epg-sub-key-p sub-key)))
+ (aref (cdr sub-key) 6))
(defun epg-sub-key-expiration-time (sub-key)
"Return the expiration time of SUB-KEY."
- (aref sub-key 7))
+ (unless (eq (car sub-key) 'epg-sub-key)
+ (signal 'wrong-type-argument (list 'epg-sub-key-p sub-key)))
+ (aref (cdr sub-key) 7))
(defun epg-sub-key-fingerprint (sub-key)
"Return the fingerprint of SUB-KEY."
- (aref sub-key 8))
+ (unless (eq (car sub-key) 'epg-sub-key)
+ (signal 'wrong-type-argument (list 'epg-sub-key-p sub-key)))
+ (aref (cdr sub-key) 8))
(defun epg-sub-key-set-fingerprint (sub-key fingerprint)
"Set the fingerprint of SUB-KEY.
This function is for internal use only."
- (aset sub-key 8 fingerprint))
+ (unless (eq (car sub-key) 'epg-sub-key)
+ (signal 'wrong-type-argument (list 'epg-sub-key-p sub-key)))
+ (aset (cdr sub-key) 8 fingerprint))
-(defun epg-make-user-id (validity name)
+(defun epg-make-user-id (validity string)
"Return a user ID object."
- (vector validity name nil))
+ (cons 'epg-user-id (vector validity string nil)))
(defun epg-user-id-validity (user-id)
"Return the validity of USER-ID."
- (aref user-id 0))
+ (unless (eq (car user-id) 'epg-user-id)
+ (signal 'wrong-type-argument (list 'epg-user-id-p user-id)))
+ (aref (cdr user-id) 0))
-(defun epg-user-id-name (user-id)
+(defun epg-user-id-string (user-id)
"Return the name of USER-ID."
- (aref user-id 1))
+ (unless (eq (car user-id) 'epg-user-id)
+ (signal 'wrong-type-argument (list 'epg-user-id-p user-id)))
+ (aref (cdr user-id) 1))
(defun epg-user-id-signature-list (user-id)
"Return the signature list of USER-ID."
- (aref user-id 2))
+ (unless (eq (car user-id) 'epg-user-id)
+ (signal 'wrong-type-argument (list 'epg-user-id-p user-id)))
+ (aref (cdr user-id) 2))
(defun epg-user-id-set-signature-list (user-id signature-list)
"Set the signature list of USER-ID."
- (aset user-id 2 signature-list))
+ (unless (eq (car user-id) 'epg-user-id)
+ (signal 'wrong-type-argument (list 'epg-user-id-p user-id)))
+ (aset (cdr user-id) 2 signature-list))
(defun epg-context-result-for (context name)
+ "Return the result of CONTEXT associated with NAME."
(cdr (assq name (epg-context-result context))))
(defun epg-context-set-result-for (context name value)
+ "Set the result of CONTEXT associated with NAME to VALUE."
(let* ((result (epg-context-result context))
(entry (assq name result)))
(if entry
(epg-context-set-result context (cons (cons name value) result)))))
(defun epg-signature-to-string (signature)
- (format "%s signature from %s %s%s"
- (capitalize (symbol-name (epg-signature-status signature)))
- (epg-signature-key-id signature)
- (epg-signature-user-id signature)
- (if (epg-signature-validity signature)
- (format " (trust %s)"
- (epg-signature-validity signature))
- "")))
+ "Convert SIGNATURE to a human readable string."
+ (let ((user-id (cdr (assoc (epg-signature-key-id signature)
+ epg-user-id-alist))))
+ (concat
+ (cond ((eq (epg-signature-status signature) 'good)
+ "Good signature from ")
+ ((eq (epg-signature-status signature) 'bad)
+ "Bad signature from ")
+ ((eq (epg-signature-status signature) 'expired)
+ "Expired signature from ")
+ ((eq (epg-signature-status signature) 'expired-key)
+ "Signature made by expired key ")
+ ((eq (epg-signature-status signature) 'revoked-key)
+ "Signature made by revoked key ")
+ ((eq (epg-signature-status signature) 'no-pubkey)
+ "No public key for "))
+ (epg-signature-key-id signature)
+ " "
+ (if user-id
+ (concat (if (stringp user-id)
+ user-id
+ (epg-decode-dn user-id))
+ " ")
+ "")
+ (if (epg-signature-validity signature)
+ (format "(trust %s)" (epg-signature-validity signature))
+ ""))))
(defun epg-verify-result-to-string (verify-result)
+ "Convert VERIFY-RESULT to a human readable string."
(mapconcat #'epg-signature-to-string verify-result "\n"))
(defun epg-start (context args)
"Start `epg-gpg-program' in a subprocess with given ARGS."
(let* ((args (append (list "--no-tty"
"--status-fd" "1"
- "--command-fd" "0"
"--yes")
+ (unless (eq (epg-context-protocol context) 'CMS)
+ (list "--command-fd" "0"))
(if (epg-context-armor context) '("--armor"))
(if (epg-context-textmode context) '("--textmode"))
(if (epg-context-output-file context)
(setq epg-debug-buffer (generate-new-buffer " *epg-debug*")))
(set-buffer epg-debug-buffer)
(goto-char (point-max))
- (insert (format "%s %s\n" epg-gpg-program
+ (insert (format "%s %s\n"
+ (if (eq (epg-context-protocol context) 'CMS)
+ epg-gpgsm-program
+ epg-gpg-program)
(mapconcat #'identity args " ")))))
(with-current-buffer buffer
(make-local-variable 'epg-read-point)
(progn
(set-default-file-modes 448)
(setq process
- (apply #'start-process "epg" buffer epg-gpg-program args)))
+ (apply #'start-process "epg" buffer
+ (if (eq (epg-context-protocol context) 'CMS)
+ epg-gpgsm-program
+ epg-gpg-program)
+ args)))
(set-default-file-modes orig-mode))
(set-process-filter process #'epg-process-filter)
(epg-context-set-process context process)))
(setq epg-read-point (point)))))
(defun epg-read-output (context)
+ "Read the output file CONTEXT and return the content as a string."
(with-temp-buffer
(if (fboundp 'set-buffer-multibyte)
(set-buffer-multibyte nil))
(buffer-string)))))
(defun epg-wait-for-status (context status-list)
+ "Wait until one of elements in STATUS-LIST arrives."
(with-current-buffer (process-buffer (epg-context-process context))
(setq epg-pending-status-list status-list)
(while (and (eq (process-status (epg-context-process context)) 'run)
epg-pending-status-list)
- (accept-process-output (epg-context-process context) 1))))
+ (accept-process-output (epg-context-process context) 0 1))))
(defun epg-wait-for-completion (context)
+ "Wait until the `epg-gpg-program' process completes."
(while (eq (process-status (epg-context-process context)) 'run)
- ;; We can't use accept-process-output instead of sit-for here
- ;; because it may cause an interrupt during the sentinel execution.
- (sit-for 0.1)))
+ (accept-process-output (epg-context-process context) 0 1)))
(defun epg-flush (context)
+ "Flush the input to the `epg-gpg-program' process."
(if (eq (process-status (epg-context-process context)) 'run)
(process-send-eof (epg-context-process context))))
(defun epg-reset (context)
+ "Reset the CONTEXT."
(if (and (epg-context-process context)
(buffer-live-p (process-buffer (epg-context-process context))))
(kill-buffer (process-buffer (epg-context-process context))))
(epg-context-set-process context nil))
(defun epg-delete-output-file (context)
+ "Delete the output file of CONTEXT."
(if (and (epg-context-output-file context)
(file-exists-p (epg-context-output-file context)))
(delete-file (epg-context-output-file context))))
(car (epg-context-passphrase-callback
epg-context))
(epg-context-passphrase-callback epg-context))
+ epg-context
epg-key-id
(if (consp (epg-context-passphrase-callback
epg-context))
(epg-context-result-for epg-context 'error)))
(delete-process process)))))
-(defun epg-status-GOODSIG (process string)
+(defun epg-signature-status-internal (status string)
(if (string-match "\\`\\([^ ]+\\) \\(.*\\)" string)
- (epg-context-set-result-for
- epg-context
- 'verify
- (cons (epg-make-signature 'good
- (match-string 1 string)
- (match-string 2 string))
- (epg-context-result-for epg-context 'verify)))))
+ (let* ((key-id (match-string 1 string))
+ (user-id (match-string 2 string))
+ (entry (assoc key-id epg-user-id-alist)))
+ (epg-context-set-result-for
+ epg-context
+ 'verify
+ (cons (epg-make-signature status key-id)
+ (epg-context-result-for epg-context 'verify)))
+ (if (eq (epg-context-protocol epg-context) 'CMS)
+ (condition-case nil
+ (setq user-id (epg-dn-from-string user-id))
+ (error)))
+ (if entry
+ (setcdr entry user-id)
+ (setq epg-user-id-alist
+ (cons (cons key-id user-id) epg-user-id-alist))))
+ (epg-context-set-result-for
+ epg-context
+ 'verify
+ (cons (epg-make-signature status)
+ (epg-context-result-for epg-context 'verify)))))
+
+(defun epg-status-GOODSIG (process string)
+ (epg-signature-status-internal 'good string))
(defun epg-status-EXPSIG (process string)
- (if (string-match "\\`\\([^ ]+\\) \\(.*\\)" string)
- (epg-context-set-result-for
- epg-context
- 'verify
- (cons (epg-make-signature 'expired
- (match-string 1 string)
- (match-string 2 string))
- (epg-context-result-for epg-context 'verify)))))
+ (epg-signature-status-internal 'expired string))
(defun epg-status-EXPKEYSIG (process string)
- (if (string-match "\\`\\([^ ]+\\) \\(.*\\)" string)
- (epg-context-set-result-for
- epg-context
- 'verify
- (cons (epg-make-signature 'expired-key
- (match-string 1 string)
- (match-string 2 string))
- (epg-context-result-for epg-context 'verify)))))
+ (epg-signature-status-internal 'expired-key string))
(defun epg-status-REVKEYSIG (process string)
- (if (string-match "\\`\\([^ ]+\\) \\(.*\\)" string)
- (epg-context-set-result-for
- epg-context
- 'verify
- (cons (epg-make-signature 'revoked-key
- (match-string 1 string)
- (match-string 2 string))
- (epg-context-result-for epg-context 'verify)))))
+ (epg-signature-status-internal 'revoked-key string))
(defun epg-status-BADSIG (process string)
- (if (string-match "\\`\\([^ ]+\\) \\(.*\\)" string)
- (epg-context-set-result-for
- epg-context
- 'verify
- (cons (epg-make-signature 'bad
- (match-string 1 string)
- (match-string 2 string))
- (epg-context-result-for epg-context 'verify)))))
+ (epg-signature-status-internal 'bad string))
+
+(defun epg-status-NO_PUBKEY (process string)
+ (epg-context-set-result-for
+ epg-context
+ 'verify
+ (cons (epg-make-signature 'no-pubkey string)
+ (epg-context-result-for epg-context 'verify))))
+
+(defun epg-status-ERRSIG (process string)
+ (let ((signatures (car (epg-context-result-for epg-context 'verify))))
+ (unless signatures
+ (setq signatures (list (epg-make-signature 'error)))
+ (epg-context-set-result-for epg-context 'verify signatures))
+ (when (and (not (eq (epg-signature-status (car signatures)) 'good))
+ (string-match "\\`\\([^ ]+\\) \\([0-9]+\\) \\([0-9]+\\) \
+\\([0-9A-Fa-f][0-9A-Fa-f]\\) \\([^ ]+\\) \\([0-9]+\\)"
+ string))
+ (epg-signature-set-key-id
+ (car signatures)
+ (match-string 1 string))
+ (epg-signature-set-pubkey-algorithm
+ (car signatures)
+ (string-to-number (match-string 2 string)))
+ (epg-signature-set-digest-algorithm
+ (car signatures)
+ (string-to-number (match-string 3 string)))
+; (epg-signature-set-class
+; (car signatures)
+; (string-to-number (match-string 4 string) 16))
+ (epg-signature-set-creation-time
+ (car signatures)
+ (match-string 5 string)))))
(defun epg-status-VALIDSIG (process string)
(let ((signature (car (epg-context-result-for epg-context 'verify))))
- (if (and signature
- (eq (epg-signature-status signature) 'good)
- (string-match "\\`\\([^ ]+\\) " string))
- (epg-signature-set-fingerprint signature (match-string 1 string)))))
+ (when (and signature
+ (eq (epg-signature-status signature) 'good)
+ (string-match "\\`\\([^ ]+\\) [^ ]+ \\([^ ]+\\) \\([^ ]+\\) \
+\\([0-9]+\\) [^ ]+ \\([0-9]+\\) \\([0-9]+\\) \\([0-9A-Fa-f][0-9A-Fa-f]\\) \
+\\(.*\\)"
+ string))
+ (epg-signature-set-fingerprint
+ signature
+ (match-string 1 string))
+ (epg-signature-set-creation-time
+ signature
+ (match-string 2 string))
+ (epg-signature-set-expiration-time
+ signature
+ (match-string 3 string))
+; (epg-signature-set-version
+; signature
+; (string-to-number (match-string 4 string)))
+ (epg-signature-set-pubkey-algorithm
+ signature
+ (string-to-number (match-string 5 string)))
+ (epg-signature-set-digest-algorithm
+ signature
+ (string-to-number (match-string 6 string)))
+; (epg-signature-set-class
+; signature
+; (string-to-number (match-string 7 string) 16))
+ )))
(defun epg-status-TRUST_UNDEFINED (process string)
(let ((signature (car (epg-context-result-for epg-context 'verify))))
(funcall (if (consp (epg-context-progress-callback epg-context))
(car (epg-context-progress-callback epg-context))
(epg-context-progress-callback epg-context))
+ epg-context
(match-string 1 string)
(match-string 2 string)
(string-to-number (match-string 3 string))
(cons 'fingerprint (substring string (match-end 0))))
(epg-context-result-for epg-context 'sign)))))
-(defun epg-passphrase-callback-function (key-id handback)
+(defun epg-passphrase-callback-function (context key-id handback)
(read-passwd
(if (eq key-id 'SYM)
"Passphrase for symmetric encryption: "
(format "Passphrase for %s %s: " key-id (cdr entry))
(format "Passphrase for %s: " key-id)))))))
-(defun epg-progress-callback-function (what char current total handback)
+(defun epg-progress-callback-function (context what char current total
+ handback)
(message "%s: %d%%/%d%%" what current total))
(defun epg-configuration ()
config))))
config))
-(defun epg-list-keys-1 (name mode)
+(defun epg-list-keys-1 (context name mode)
(let ((args (append (list "--with-colons" "--no-greeting" "--batch"
- "--fixed-list-mode" "--with-fingerprint"
"--with-fingerprint"
- (if mode "--list-secret-keys" "--list-keys"))
+ "--with-fingerprint"
+ (if (or (eq mode t) (eq mode 'secret))
+ "--list-secret-keys"
+ (if mode
+ "--list-sigs"
+ "--list-keys")))
+ (unless (eq (epg-context-protocol context) 'CMS)
+ '("--fixed-list-mode"))
(if name (list name))))
keys string field index)
(with-temp-buffer
- (apply #'call-process epg-gpg-program nil (list t nil) nil args)
+ (apply #'call-process
+ (if (eq (epg-context-protocol context) 'CMS)
+ epg-gpgsm-program
+ epg-gpg-program)
+ nil (list t nil) nil args)
(goto-char (point-min))
(while (re-search-forward "^[a-z][a-z][a-z]:.*" nil t)
(setq keys (cons (make-vector 15 nil) keys)
(aref line 5)
(aref line 6)))
-(defun epg-list-keys (&optional name mode)
- (let ((lines (epg-list-keys-1 name mode))
- keys)
+(defun epg-list-keys (context &optional name mode)
+ "Return a list of epg-key objects matched with NAME.
+If MODE is nil, only public keyring should be searched.
+If MODE is t or 'secret, only secret keyring should be searched.
+Otherwise, only public keyring should be searched and the key
+signatures should be included."
+ (let ((lines (epg-list-keys-1 context name mode))
+ keys cert key-id user-id-string entry)
(while lines
(cond
- ((member (aref (car lines) 0) '("pub" "sec"))
+ ((member (aref (car lines) 0) '("pub" "sec" "crt" "crs"))
(when (car keys)
(epg-key-set-sub-key-list
(car keys)
(nreverse (epg-key-sub-key-list (car keys))))
(epg-key-set-user-id-list
(car keys)
- (nreverse (epg-key-user-id-list (car keys)))))
- (setq keys (cons (epg-make-key
+ (nreverse (epg-key-user-id-list (car keys))))
+ (setq key-id
+ (epg-sub-key-id (car (epg-key-sub-key-list (car keys))))
+ user-id-string
+ (epg-user-id-string (car (epg-key-user-id-list (car keys))))
+ entry (assoc key-id epg-user-id-alist))
+ (if entry
+ (setcdr entry user-id-string)
+ (setq epg-user-id-alist (cons (cons key-id user-id-string)
+ epg-user-id-alist))))
+ (setq cert (member (aref (car lines) 0) '("crt" "crs"))
+ keys (cons (epg-make-key
(if (aref (car lines) 8)
(cdr (assq (string-to-char (aref (car lines) 8))
epg-key-validity-alist))))
(if (aref (car lines) 1)
(cdr (assq (string-to-char (aref (car lines) 1))
epg-key-validity-alist)))
- (aref (car lines) 9))
+ (if cert
+ (condition-case nil
+ (epg-dn-from-string (aref (car lines) 9))
+ (error (aref (car lines) 9)))
+ (aref (car lines) 9)))
(epg-key-user-id-list (car keys)))))
((equal (aref (car lines) 0) "fpr")
(epg-sub-key-set-fingerprint (car (epg-key-sub-key-list (car keys)))
(aref (car lines) 9))))
(setq lines (cdr lines)))
+ (when (car keys)
+ (epg-key-set-sub-key-list
+ (car keys)
+ (nreverse (epg-key-sub-key-list (car keys))))
+ (epg-key-set-user-id-list
+ (car keys)
+ (nreverse (epg-key-user-id-list (car keys)))))
(nreverse keys)))
(if (fboundp 'make-temp-file)
(delete-directory tempdir))))))
;;;###autoload
+(defun epg-cancel (context)
+ (if (eq (process-status (epg-context-process context)) 'run)
+ (delete-process (epg-context-process context))))
+
+;;;###autoload
(defun epg-start-decrypt (context cipher)
"Initiate a decrypt operation on CIPHER.
CIPHER is a data object.
(error "Not a file"))
(epg-context-set-result context nil)
(epg-start context (list "--decrypt" (epg-data-file cipher)))
- (epg-wait-for-status context '("BEGIN_DECRYPTION")))
+ ;; `gpgsm' does not read passphrase from stdin, so waiting is not needed.
+ (unless (eq (epg-context-protocol context) 'CMS)
+ (epg-wait-for-status context '("BEGIN_DECRYPTION"))))
;;;###autoload
(defun epg-decrypt-file (context cipher plain)
(coding-system-for-write 'binary))
(unwind-protect
(progn
- (write-region cipher nil input-file)
+ (write-region cipher nil input-file nil 'quiet)
(epg-context-set-output-file context
(epg-make-temp-file "epg-output"))
(epg-start-decrypt context (epg-make-data-from-file input-file))
(epg-start-verify context
(epg-make-data-from-file signature)))
(epg-wait-for-completion context)
+; (if (epg-context-result-for context 'error)
+; (error "Verify failed: %S"
+; (epg-context-result-for context 'error)))
(unless plain
(epg-read-output context)))
(unless plain
(if signed-text
(progn
(setq input-file (epg-make-temp-file "epg-signature"))
- (write-region signature nil input-file)
+ (write-region signature nil input-file nil 'quiet)
(epg-start-verify context
(epg-make-data-from-file input-file)
(epg-make-data-from-string signed-text)))
(epg-start-verify context (epg-make-data-from-string signature)))
(epg-flush context)
(epg-wait-for-completion context)
+; (if (epg-context-result-for context 'error)
+; (error "Verify failed: %S"
+; (epg-context-result-for context 'error)))
(epg-read-output context))
(epg-delete-output-file context)
(if (and input-file
(epg-context-signers context)))
(if (epg-data-file plain)
(list (epg-data-file plain)))))
- (epg-wait-for-status context '("BEGIN_SIGNING"))
+ ;; `gpgsm' does not read passphrase from stdin, so waiting is not needed.
+ (unless (eq (epg-context-protocol context) 'CMS)
+ (epg-wait-for-status context '("BEGIN_SIGNING")))
(if (and (epg-data-string plain)
(eq (process-status (epg-context-process context)) 'run))
(process-send-string (epg-context-process context)
(epg-make-temp-file "epg-output")))
(epg-start-sign context (epg-make-data-from-file plain) mode)
(epg-wait-for-completion context)
- (if (epg-context-result-for context 'error)
- (error "Sign failed: %S"
- (epg-context-result-for context 'error)))
+ (if (epg-context-result-for context 'sign)
+ (if (epg-context-result-for context 'error)
+ (message "Sign warning: %S"
+ (epg-context-result-for context 'error)))
+ (if (epg-context-result-for context 'error)
+ (error "Sign failed: %S"
+ (epg-context-result-for context 'error))
+ (error "Sign failed")))
(unless signature
(epg-read-output context)))
(unless signature
(epg-start-sign context (epg-make-data-from-string plain) mode)
(epg-flush context)
(epg-wait-for-completion context)
- (if (epg-context-result-for context 'error)
- (error "Sign failed: %S"
- (epg-context-result-for context 'error)))
+ (unless (epg-context-result-for context 'sign)
+ (if (epg-context-result-for context 'error)
+ (error "Sign failed: %S"
+ (epg-context-result-for context 'error))
+ (error "Sign failed")))
(epg-read-output context))
(epg-delete-output-file context)
(epg-reset context)))
recipients))
(if (epg-data-file plain)
(list (epg-data-file plain)))))
- (if sign
- (epg-wait-for-status context '("BEGIN_SIGNING"))
- (epg-wait-for-status context '("BEGIN_ENCRYPTION")))
+ ;; `gpgsm' does not read passphrase from stdin, so waiting is not needed.
+ (unless (eq (epg-context-protocol context) 'CMS)
+ (if sign
+ (epg-wait-for-status context '("BEGIN_SIGNING"))
+ (epg-wait-for-status context '("BEGIN_ENCRYPTION"))))
(if (and (epg-data-string plain)
(eq (process-status (epg-context-process context)) 'run))
(process-send-string (epg-context-process context)
(epg-start-encrypt context (epg-make-data-from-file plain)
recipients sign always-trust)
(epg-wait-for-completion context)
+ (if (and sign
+ (not (epg-context-result-for context 'sign)))
+ (if (epg-context-result-for context 'error)
+ (error "Sign failed: %S"
+ (epg-context-result-for context 'error))
+ (error "Sign failed")))
(if (epg-context-result-for context 'error)
(error "Encrypt failed: %S"
(epg-context-result-for context 'error)))
recipients sign always-trust)
(epg-flush context)
(epg-wait-for-completion context)
+ (if (and sign
+ (not (epg-context-result-for context 'sign)))
+ (if (epg-context-result-for context 'error)
+ (error "Sign failed: %S"
+ (epg-context-result-for context 'error))
+ (error "Sign failed")))
(if (epg-context-result-for context 'error)
(error "Encrypt failed: %S"
(epg-context-result-for context 'error)))
(epg-context-result-for context 'error))))
(epg-reset context)))
+(defun epg-decode-hexstring (string)
+ (let ((index 0))
+ (while (eq index (string-match "[0-9A-Fa-f][0-9A-Fa-f]" string index))
+ (setq string (replace-match "\\x\\&" t nil string)
+ index (+ index 4)))
+ (car (read-from-string (concat "\"" string "\"")))))
+
+(defun epg-decode-quotedstring (string)
+ (let ((index 0))
+ (while (string-match "\\\\\\(\\([,=+<>#;\\\"]\\)\\|\
+\\([0-9A-Fa-f][0-9A-Fa-f]\\)\\|\\(.\\)\\)"
+ string index)
+ (if (match-beginning 2)
+ (setq string (replace-match "\\2" t nil string)
+ index (1+ index))
+ (if (match-beginning 3)
+ (setq string (replace-match "\\x\\3" t nil string)
+ index (+ index 4))
+ (setq string (replace-match "\\\\\\\\\\4" t nil string)
+ index (+ index 3)))))
+ (car (read-from-string (concat "\"" string "\"")))))
+
+(defun epg-dn-from-string (string)
+ "Parse STRING as LADPv3 Distinguished Names (RFC2253).
+The return value is an alist mapping from types to values."
+ (let ((index 0)
+ (length (length string))
+ alist type value group)
+ (while (< index length)
+ (if (eq index (string-match "[ \t\n\r]*" string index))
+ (setq index (match-end 0)))
+ (if (eq index (string-match
+ "\\([0-9]+\\(\\.[0-9]+\\)*\\)\[ \t\n\r]*=[ \t\n\r]*"
+ string index))
+ (setq type (match-string 1 string)
+ index (match-end 0))
+ (if (eq index (string-match "\\([0-9A-Za-z]+\\)[ \t\n\r]*=[ \t\n\r]*"
+ string index))
+ (setq type (match-string 1 string)
+ index (match-end 0))))
+ (unless type
+ (error "Invalid type"))
+ (if (eq index (string-match
+ "\\([^,=+<>#;\\\"]\\|\\\\.\\)+"
+ string index))
+ (setq index (match-end 0)
+ value (epg-decode-quotedstring (match-string 0 string)))
+ (if (eq index (string-match "#\\([0-9A-Fa-f]+\\)" string index))
+ (setq index (match-end 0)
+ value (epg-decode-hexstring (match-string 1 string)))
+ (if (eq index (string-match "\"\\([^\\\"]\\|\\\\.\\)*\""
+ string index))
+ (setq index (match-end 0)
+ value (epg-decode-quotedstring (match-string 0 string))))))
+ (if group
+ (if (stringp (car (car alist)))
+ (setcar alist (list (cons type value) (car alist)))
+ (setcar alist (cons (cons type value) (car alist))))
+ (if (consp (car (car alist)))
+ (setcar alist (nreverse (car alist))))
+ (setq alist (cons (cons type value) alist)
+ type nil
+ value nil))
+ (if (eq index (string-match "[ \t\n\r]*\\([,;+]\\)" string index))
+ (setq index (match-end 0)
+ group (eq (aref string (match-beginning 1)) ?+))))
+ (nreverse alist)))
+
+(defun epg-decode-dn (alist)
+ "Convert ALIST returned by `epg-dn-from-string' to a human readable form.
+Type names are resolved using `epg-dn-type-alist'."
+ (mapconcat
+ (lambda (rdn)
+ (if (stringp (car rdn))
+ (let ((entry (assoc (car rdn) epg-dn-type-alist)))
+ (if entry
+ (format "%s=%s" (cdr entry) (cdr rdn))
+ (format "%s=%s" (car rdn) (cdr rdn))))
+ (concat "(" (epg-decode-dn rdn) ")")))
+ alist
+ ", "))
+
(provide 'epg)
;;; epg.el ends here
projects / elisp / epg.git / blobdiff