lib

signature.c File Reference

#include "system.h"
#include "rpmio_internal.h"
#include <rpmlib.h>
#include <rpmmacro.h>
#include "rpmdb.h"
#include "rpmts.h"
#include "misc.h"
#include "legacy.h"
#include "rpmlead.h"
#include "signature.h"
#include "header_internal.h"
#include "debug.h"

Go to the source code of this file.

Functions

int rpmLookupSignatureType (int action)

Return type of signature needed for signing/building.

const char * rpmDetectPGPVersion (pgpVersion *pgpVer)

Return path to pgp executable of given type, or NULL when not found.

static rpmRC printSize (FD_t fd, int siglen, int pad, int datalen)

Print package size.

rpmRC rpmReadSignature (FD_t fd, Header *sighp, sigType sig_type, const char **msg)

Read (and verify header+payload size) signature header.

int rpmWriteSignature (FD_t fd, Header h)

Write signature header.

Header rpmNewSignature (void)

Return new, empty (signature) header instance.

Header rpmFreeSignature (Header h)

Destroy signature header from package.

static int makePGPSignature (const char *file, byte **pkt, int_32 *pktlen, const char *passPhrase)

Generate PGP (aka RSA/MD5) signature(s) for a header+payload file.

static int makeGPGSignature (const char *file, byte **pkt, int_32 *pktlen, const char *passPhrase)

Generate GPG (aka DSA) signature(s) for a header+payload file.

static int makeHDRSignature (Header sig, const char *file, int_32 sigTag, const char *passPhrase)

Generate header only signature(s) from a header+payload file.

int rpmAddSignature (Header sig, const char *file, int_32 sigTag, const char *passPhrase)

Generate signature(s) from a header+payload file, save in signature header.

static int checkPassPhrase (const char *passPhrase, const int sigTag)

char * rpmGetPassPhrase (const char *prompt, const int sigTag)

Read a pass phrase using getpass(3), confirm with gpg/pgp helper binaries.

static const char * rpmSigString (rpmRC res)

static rpmRC verifySizeSignature (const rpmts ts, char *t)

static rpmRC verifyMD5Signature (const rpmts ts, char *t, DIGEST_CTX md5ctx)

static rpmRC verifySHA1Signature (const rpmts ts, char *t, DIGEST_CTX sha1ctx)

Verify header immutable region SHA1 digest.

static unsigned char nibble (char c)

Convert hex to binary nibble.

static rpmRC verifyPGPSignature (rpmts ts, char *t, DIGEST_CTX md5ctx)

Verify PGP (aka RSA/MD5) signature.

static rpmRC verifyGPGSignature (rpmts ts, char *t, DIGEST_CTX sha1ctx)

Verify GPG (aka DSA) signature.

rpmRC rpmVerifySignature (const rpmts ts, char *result)

Verify a signature from a package.

Variables

char ** environ = NULL

static unsigned char header_magic [8]

Detailed Description

Definition in file signature.c.

Function Documentation

static int checkPassPhrase ( const char * passPhrase,

const int sigTag

) [static]

Definition at line 784 of file signature.c.
References _, dosetenv(), environ, errno, PGP_5, PGP_NOTDETECTED, PGP_UNKNOWN, poptParseArgvString(), rpmDetectPGPVersion(), RPMERR_EXEC, RPMERR_SIGGEN, rpmError, rpmExpand(), rpmIsVerbose, RPMSIGTAG_DSA, RPMSIGTAG_GPG, RPMSIGTAG_PGP, RPMSIGTAG_PGP5, RPMSIGTAG_RSA, strerror(), and unsetenv().
Referenced by rpmGetPassPhrase().

static int makeGPGSignature ( const char * file,

byte ** pkt,

int_32 * pktlen,

const char * passPhrase

) [static]

Generate GPG (aka DSA) signature(s) for a header+payload file.

Parameters:

file header+payload file name

Return values:

pkt signature packet(s)

pktlen signature packet(s) length

Parameters:

passPhrase private key pass phrase

Returns:
0 on success, 1 on failure

Definition at line 512 of file signature.c.
References _, _free(), addMacro(), alloca(), delMacro(), dosetenv(), environ, errno, Fclose(), Ferror(), Fopen(), poptParseArgvString(), RPMERR_EXEC, RPMERR_SIGGEN, rpmError, rpmExpand(), RPMMESS_DEBUG, rpmMessage, stpcpy(), strerror(), timedRead, unsetenv(), and xmalloc().
Referenced by makeHDRSignature(), and rpmAddSignature().

static int makeHDRSignature ( Header sig,

const char * file,

int_32 sigTag,

const char * passPhrase

) [static]

Generate header only signature(s) from a header+payload file.

Parameters:

sig signature header

file header+payload file name

sigTag type of signature(s) to add

passPhrase private key pass phrase

Returns:
0 on success, -1 on failure

Definition at line 627 of file signature.c.
References _free(), Fclose(), Ferror(), Fopen(), header_magic, HEADER_MAGIC_YES, headerAddEntry(), headerFree(), headerFreeData(), headerGetEntry(), headerIsEntry(), headerRead(), headerWrite(), makeGPGSignature(), makePGPSignature(), makeTempFile(), PGPHASHALGO_SHA1, RPM_BIN_TYPE, RPM_STRING_TYPE, RPMDIGEST_NONE, rpmDigestFinal(), rpmDigestInit(), rpmDigestUpdate(), RPMSIGTAG_DSA, RPMSIGTAG_GPG, RPMSIGTAG_MD5, RPMSIGTAG_PGP, RPMSIGTAG_PGP5, RPMSIGTAG_RSA, RPMSIGTAG_SHA1, RPMSIGTAG_SIZE, and RPMTAG_HEADERIMMUTABLE.
Referenced by rpmAddSignature().

static int makePGPSignature ( const char * file,

byte ** pkt,

int_32 * pktlen,

const char * passPhrase

) [static]

Generate PGP (aka RSA/MD5) signature(s) for a header+payload file.

Parameters:

file header+payload file name

Return values:

pkt signature packet(s)

pktlen signature packet(s) length

Parameters:

passPhrase private key pass phrase

Returns:
0 on success, 1 on failure

Definition at line 377 of file signature.c.
References _, addMacro(), alloca(), dosetenv(), environ, errno, PGP_5, PGP_NOTDETECTED, PGP_UNKNOWN, poptParseArgvString(), rpmDetectPGPVersion(), RPMERR_EXEC, rpmError, rpmExpand(), stpcpy(), strerror(), and unsetenv().
Referenced by makeHDRSignature(), and rpmAddSignature().

static unsigned char nibble ( char c ) [inline, static]

Convert hex to binary nibble.

Parameters:

c hex character

Returns:
binary nibble

Definition at line 1115 of file signature.c.

static rpmRC printSize ( FD_t fd,

int siglen,

int pad,

int datalen

) [inline, static]

Print package size.

Todo:
rpmio: use fdSize rather than fstat(2) to get file size.
Parameters:

fd package file handle

siglen signature header size

pad signature padding

datalen length of header+payload

Returns:
rpmRC return code

Definition at line 122 of file signature.c.
References _, Fileno(), RPMMESS_DEBUG, rpmMessage, RPMRC_FAIL, and RPMRC_OK.
Referenced by rpmReadSignature().

static const char* rpmSigString ( rpmRC res ) [static]

Definition at line 949 of file signature.c.
References RPMRC_FAIL, RPMRC_NOKEY, RPMRC_NOTFOUND, RPMRC_NOTTRUSTED, and RPMRC_OK.
Referenced by verifyGPGSignature(), verifyMD5Signature(), verifyPGPSignature(), verifySHA1Signature(), and verifySizeSignature().

static rpmRC verifyGPGSignature ( rpmts ts,

char * t,

DIGEST_CTX sha1ctx

) [static]

Verify GPG (aka DSA) signature.

Parameters:

ts transaction set

Return values:

t verbose success/failure text

Parameters:

sha1ctx

Returns:
RPMRC_OK on success

Definition at line 1256 of file signature.c.
References _, pgpDig_s::g, pgpDigParams_s::hash, pgpDigParams_s::hash_algo, pgpDigParams_s::hashlen, pgpDig_s::hdrsha1ctx, pgpDig_s::hm, pgpDig_s::nbytes, pgpDig_s::p, PGPHASHALGO_SHA1, pgpHexCvt(), PGPPUBKEYALGO_DSA, pgpDigParams_s::pubkey_algo, pgpDig_s::q, pgpDig_s::r, rpmDigestDup(), rpmDigestFinal(), rpmDigestUpdate(), RPMRC_FAIL, RPMRC_NOKEY, RPMRC_OK, rpmSigString(), RPMSIGTAG_DSA, RPMSIGTAG_GPG, rpmswEnter(), rpmswExit(), RPMTS_OP_DIGEST, RPMTS_OP_SIGNATURE, rpmtsDig(), rpmtsFindPubkey(), rpmtsOp(), rpmtsSig(), rpmtsSiglen(), rpmtsSignature(), rpmtsSigtag(), pgpDig_s::s, pgpDig_s::sha1, pgpDig_s::sha1len, pgpDigParams_s::signhash16, pgpDigParams_s::signid, pgpDigParams_s::sigtype, stpcpy(), and pgpDig_s::y.
Referenced by rpmVerifySignature().

static rpmRC verifyMD5Signature ( const rpmts ts,

char * t,

DIGEST_CTX md5ctx

) [static]

Definition at line 1003 of file signature.c.
References _, _free(), pgpHexCvt(), rpmDigestDup(), rpmDigestFinal(), RPMRC_FAIL, RPMRC_NOKEY, RPMRC_OK, rpmSigString(), rpmswEnter(), rpmswExit(), RPMTS_OP_DIGEST, rpmtsDig(), rpmtsOp(), rpmtsSig(), rpmtsSiglen(), and stpcpy().
Referenced by rpmVerifySignature().

static rpmRC verifyPGPSignature ( rpmts ts,

char * t,

DIGEST_CTX md5ctx

) [static]

Verify PGP (aka RSA/MD5) signature.

Parameters:

ts transaction set

Return values:

t verbose success/failure text

Parameters:

md5ctx

Returns:
RPMRC_OK on success

Definition at line 1136 of file signature.c.
References _, _free(), pgpDig_s::c, pgpDigParams_s::hash, pgpDigParams_s::hash_algo, pgpDigParams_s::hashlen, pgpDig_s::md5, pgpDig_s::md5len, pgpDig_s::nbytes, nibble(), PGPHASHALGO_MD5, pgpHexCvt(), PGPPUBKEYALGO_RSA, pgpDigParams_s::pubkey_algo, rpmDigestDup(), rpmDigestFinal(), rpmDigestUpdate(), RPMRC_FAIL, RPMRC_NOKEY, RPMRC_OK, rpmSigString(), RPMSIGTAG_PGP, rpmswEnter(), rpmswExit(), RPMTS_OP_DIGEST, RPMTS_OP_SIGNATURE, rpmtsDig(), rpmtsFindPubkey(), rpmtsOp(), rpmtsSig(), rpmtsSiglen(), rpmtsSignature(), rpmtsSigtag(), pgpDig_s::rsa_pk, pgpDig_s::rsahm, pgpDigParams_s::signhash16, pgpDigParams_s::signid, pgpDigParams_s::sigtype, stpcpy(), and xmalloc().
Referenced by rpmVerifySignature().

static rpmRC verifySHA1Signature ( const rpmts ts,

char * t,

DIGEST_CTX sha1ctx

) [static]

Verify header immutable region SHA1 digest.

Parameters:

ts transaction set

Return values:

t verbose success/failure text

Parameters:

sha1ctx

Returns:
RPMRC_OK on success

Definition at line 1061 of file signature.c.
References _, _free(), rpmDigestDup(), rpmDigestFinal(), RPMRC_FAIL, RPMRC_NOKEY, RPMRC_OK, rpmSigString(), rpmswEnter(), rpmswExit(), RPMTS_OP_DIGEST, rpmtsDig(), rpmtsOp(), rpmtsSig(), rpmtsSiglen(), and stpcpy().
Referenced by rpmVerifySignature().

static rpmRC verifySizeSignature ( const rpmts ts,

char * t

) [static]

Definition at line 966 of file signature.c.
References _, pgpDig_s::nbytes, RPMRC_FAIL, RPMRC_NOKEY, RPMRC_OK, rpmSigString(), rpmtsDig(), rpmtsSig(), and stpcpy().
Referenced by rpmVerifySignature().

Variable Documentation

char** environ = NULL

Definition at line 30 of file signature.c.
Referenced by checkPassPhrase(), main(), makeGPGSignature(), makePGPSignature(), open_dso(), and rpmsqExecve().

unsigned char header_magic[8] [static]

Initial value:
{ 0x8e, 0xad, 0xe8, 0x01, 0x00, 0x00, 0x00, 0x00 }

Definition at line 144 of file signature.c.

Generated on Fri Feb 24 08:33:43 2006 for rpm by

1.4.5


Functions
int	rpmLookupSignatureType (int action)
	Return type of signature needed for signing/building.
const char *	rpmDetectPGPVersion (pgpVersion *pgpVer)
	Return path to pgp executable of given type, or NULL when not found.
static rpmRC	printSize (FD_t fd, int siglen, int pad, int datalen)
	Print package size.
rpmRC	rpmReadSignature (FD_t fd, Header sighp, sigType sig_type, const char *msg)
	Read (and verify header+payload size) signature header.
int	rpmWriteSignature (FD_t fd, Header h)
	Write signature header.
Header	rpmNewSignature (void)
	Return new, empty (signature) header instance.
Header	rpmFreeSignature (Header h)
	Destroy signature header from package.
static int	makePGPSignature (const char file, byte pkt, int_32 pktlen, const char *passPhrase)
	Generate PGP (aka RSA/MD5) signature(s) for a header+payload file.
static int	makeGPGSignature (const char file, byte pkt, int_32 pktlen, const char *passPhrase)
	Generate GPG (aka DSA) signature(s) for a header+payload file.
static int	makeHDRSignature (Header sig, const char file, int_32 sigTag, const char passPhrase)
	Generate header only signature(s) from a header+payload file.
int	rpmAddSignature (Header sig, const char file, int_32 sigTag, const char passPhrase)
	Generate signature(s) from a header+payload file, save in signature header.
static int	checkPassPhrase (const char *passPhrase, const int sigTag)
char *	rpmGetPassPhrase (const char *prompt, const int sigTag)
	Read a pass phrase using getpass(3), confirm with gpg/pgp helper binaries.
static const char *	rpmSigString (rpmRC res)
static rpmRC	verifySizeSignature (const rpmts ts, char *t)
static rpmRC	verifyMD5Signature (const rpmts ts, char *t, DIGEST_CTX md5ctx)
static rpmRC	verifySHA1Signature (const rpmts ts, char *t, DIGEST_CTX sha1ctx)
	Verify header immutable region SHA1 digest.
static unsigned char	nibble (char c)
	Convert hex to binary nibble.
static rpmRC	verifyPGPSignature (rpmts ts, char *t, DIGEST_CTX md5ctx)
	Verify PGP (aka RSA/MD5) signature.
static rpmRC	verifyGPGSignature (rpmts ts, char *t, DIGEST_CTX sha1ctx)
	Verify GPG (aka DSA) signature.
rpmRC	rpmVerifySignature (const rpmts ts, char *result)
	Verify a signature from a package.
Variables
char **	environ = NULL
static unsigned char	header_magic [8]