21
21
lazy_import(globals(), """
22
22
from bzrlib import (
23
23
bzrdir as _mod_bzrdir,
26
revision as _mod_revision,
27
29
from bzrlib.commands import Command
28
30
from bzrlib.option import Option
31
from bzrlib.i18n import gettext, ngettext
31
33
class cmd_sign_my_commits(Command):
32
34
__doc__ = """Sign all commits by a given committer.
88
97
print 'Signed %d revisions' % (count,)
100
class cmd_verify_signatures(Command):
101
__doc__ = """Verify all commit signatures.
103
Verifies that all commits in the branch are signed by known GnuPG keys.
107
Option('acceptable-keys',
108
help='Comma separated list of GPG key patterns which are'
109
' acceptable for verification.',
115
takes_args = ['location?']
117
def run(self, acceptable_keys=None, revision=None, verbose=None,
119
bzrdir = _mod_bzrdir.BzrDir.open_containing(location)[0]
120
branch = bzrdir.open_branch()
121
repo = branch.repository
122
branch_config = branch.get_config()
123
gpg_strategy = gpg.GPGStrategy(branch_config)
125
gpg_strategy.set_acceptable_keys(acceptable_keys)
128
self.outf.write(string + "\n")
129
def write_verbose(string):
130
self.outf.write(" " + string + "\n")
132
#get our list of revisions
134
if revision is not None:
135
if len(revision) == 1:
136
revno, rev_id = revision[0].in_history(branch)
137
revisions.append(rev_id)
138
elif len(revision) == 2:
139
from_revno, from_revid = revision[0].in_history(branch)
140
to_revno, to_revid = revision[1].in_history(branch)
142
to_revno = branch.revno()
143
if from_revno is None or to_revno is None:
144
raise errors.BzrCommandError('Cannot verify a range of '\
145
'non-revision-history revisions')
146
for revno in range(from_revno, to_revno + 1):
147
revisions.append(branch.get_rev_id(revno))
149
#all revisions by default including merges
150
graph = repo.get_graph()
153
for rev_id, parents in graph.iter_ancestry(
154
[branch.last_revision()]):
155
if _mod_revision.is_null(rev_id):
160
revisions.append(rev_id)
162
count, result, all_verifiable =\
163
gpg_strategy.do_verifications(revisions, repo)
166
"All commits signed with verifiable keys"))
168
write(gpg_strategy.verbose_valid_message(result))
171
write(gpg_strategy.valid_commits_message(count))
173
for message in gpg_strategy.verbose_valid_message(result):
174
write_verbose(message)
175
write(gpg_strategy.unknown_key_message(count))
177
for message in gpg_strategy.verbose_missing_key_message(result):
178
write_verbose(message)
179
write(gpg_strategy.commit_not_valid_message(count))
181
for message in gpg_strategy.verbose_not_valid_message(result,
183
write_verbose(message)
184
write(gpg_strategy.commit_not_signed_message(count))
186
for message in gpg_strategy.verbose_not_signed_message(result,
188
write_verbose(message)