~bzr-pqm/bzr/bzr.dev

2052.3.2 by John Arbash Meinel
Change Copyright .. by Canonical to Copyright ... Canonical
1
# Copyright (C) 2005 Canonical Ltd
1442.1.57 by Robert Collins
check that we get the right command line from the default gpg strategy.
2
#   Authors: Robert Collins <robert.collins@canonical.com>
3
#
4
# This program is free software; you can redistribute it and/or modify
5
# it under the terms of the GNU General Public License as published by
6
# the Free Software Foundation; either version 2 of the License, or
7
# (at your option) any later version.
8
#
9
# This program is distributed in the hope that it will be useful,
10
# but WITHOUT ANY WARRANTY; without even the implied warranty of
11
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
12
# GNU General Public License for more details.
13
#
14
# You should have received a copy of the GNU General Public License
15
# along with this program; if not, write to the Free Software
16
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
17
18
"""GPG signing and checking logic."""
19
1996.3.1 by John Arbash Meinel
Demandloading builtins.py drops our load time from 350ms to 291ms
20
import os
21
import sys
22
23
from bzrlib.lazy_import import lazy_import
24
lazy_import(globals(), """
1442.1.58 by Robert Collins
gpg signing of content
25
import errno
1442.1.57 by Robert Collins
check that we get the right command line from the default gpg strategy.
26
import subprocess
27
1912.3.2 by John Arbash Meinel
Adding some logging, because on my machine TTY is not exported by default.
28
from bzrlib import (
29
    errors,
30
    trace,
1551.8.11 by Aaron Bentley
Clear terminal before signing
31
    ui,
1912.3.2 by John Arbash Meinel
Adding some logging, because on my machine TTY is not exported by default.
32
    )
1996.3.1 by John Arbash Meinel
Demandloading builtins.py drops our load time from 350ms to 291ms
33
""")
1442.1.57 by Robert Collins
check that we get the right command line from the default gpg strategy.
34
1912.3.1 by John Arbash Meinel
updating gpg.py to set GPG_TTY in the environment.
35
1442.1.62 by Robert Collins
Allow creation of testaments from uncommitted data, and use that to get signatures before committing revisions.
36
class DisabledGPGStrategy(object):
37
    """A GPG Strategy that makes everything fail."""
38
39
    def __init__(self, ignored):
40
        """Real strategies take a configuration."""
41
42
    def sign(self, content):
43
        raise errors.SigningFailed('Signing is disabled.')
44
45
1442.1.59 by Robert Collins
Add re-sign command to generate a digital signature on a single revision.
46
class LoopbackGPGStrategy(object):
1442.1.62 by Robert Collins
Allow creation of testaments from uncommitted data, and use that to get signatures before committing revisions.
47
    """A GPG Strategy that acts like 'cat' - data is just passed through."""
1442.1.59 by Robert Collins
Add re-sign command to generate a digital signature on a single revision.
48
49
    def __init__(self, ignored):
50
        """Real strategies take a configuration."""
51
52
    def sign(self, content):
53
        return content
54
55
1912.3.1 by John Arbash Meinel
updating gpg.py to set GPG_TTY in the environment.
56
def _set_gpg_tty():
57
    tty = os.environ.get('TTY')
58
    if tty is not None:
59
        os.environ['GPG_TTY'] = tty
1912.3.2 by John Arbash Meinel
Adding some logging, because on my machine TTY is not exported by default.
60
        trace.mutter('setting GPG_TTY=%s', tty)
61
    else:
62
        # This is not quite worthy of a warning, because some people
63
        # don't need GPG_TTY to be set. But it is worthy of a big mark
64
        # in ~/.bzr.log, so that people can debug it if it happens to them
65
        trace.mutter('** Env var TTY empty, cannot set GPG_TTY.'
66
                     '  Is TTY exported?')
1912.3.1 by John Arbash Meinel
updating gpg.py to set GPG_TTY in the environment.
67
68
1442.1.57 by Robert Collins
check that we get the right command line from the default gpg strategy.
69
class GPGStrategy(object):
70
    """GPG Signing and checking facilities."""
71
        
72
    def _command_line(self):
1185.78.4 by John Arbash Meinel
Reverting gpg changes, should not be mainline, see gpg_uses_tempfile plugin.
73
        return [self._config.gpg_signing_command(), '--clearsign']
1442.1.57 by Robert Collins
check that we get the right command line from the default gpg strategy.
74
75
    def __init__(self, config):
76
        self._config = config
1442.1.58 by Robert Collins
gpg signing of content
77
78
    def sign(self, content):
1551.8.11 by Aaron Bentley
Clear terminal before signing
79
        ui.ui_factory.clear_term()
1963.1.8 by John Arbash Meinel
Don't use preexec_fn on win32
80
81
        preexec_fn = _set_gpg_tty
82
        if sys.platform == 'win32':
83
            # Win32 doesn't support preexec_fn, but wouldn't support TTY anyway.
84
            preexec_fn = None
1442.1.58 by Robert Collins
gpg signing of content
85
        try:
1185.78.4 by John Arbash Meinel
Reverting gpg changes, should not be mainline, see gpg_uses_tempfile plugin.
86
            process = subprocess.Popen(self._command_line(),
87
                                       stdin=subprocess.PIPE,
1912.3.1 by John Arbash Meinel
updating gpg.py to set GPG_TTY in the environment.
88
                                       stdout=subprocess.PIPE,
1963.1.8 by John Arbash Meinel
Don't use preexec_fn on win32
89
                                       preexec_fn=preexec_fn)
1442.1.58 by Robert Collins
gpg signing of content
90
            try:
1185.78.4 by John Arbash Meinel
Reverting gpg changes, should not be mainline, see gpg_uses_tempfile plugin.
91
                result = process.communicate(content)[0]
1442.1.58 by Robert Collins
gpg signing of content
92
                if process.returncode is None:
93
                    process.wait()
94
                if process.returncode != 0:
1185.78.4 by John Arbash Meinel
Reverting gpg changes, should not be mainline, see gpg_uses_tempfile plugin.
95
                    raise errors.SigningFailed(self._command_line())
1442.1.58 by Robert Collins
gpg signing of content
96
                return result
1442.1.59 by Robert Collins
Add re-sign command to generate a digital signature on a single revision.
97
            except OSError, e:
1442.1.58 by Robert Collins
gpg signing of content
98
                if e.errno == errno.EPIPE:
1185.78.4 by John Arbash Meinel
Reverting gpg changes, should not be mainline, see gpg_uses_tempfile plugin.
99
                    raise errors.SigningFailed(self._command_line())
1442.1.59 by Robert Collins
Add re-sign command to generate a digital signature on a single revision.
100
                else:
101
                    raise
1442.1.58 by Robert Collins
gpg signing of content
102
        except ValueError:
103
            # bad subprocess parameters, should never happen.
104
            raise
105
        except OSError, e:
106
            if e.errno == errno.ENOENT:
107
                # gpg is not installed
1185.78.4 by John Arbash Meinel
Reverting gpg changes, should not be mainline, see gpg_uses_tempfile plugin.
108
                raise errors.SigningFailed(self._command_line())
1442.1.58 by Robert Collins
gpg signing of content
109
            else:
110
                raise