mirror of
git://git.gnupg.org/gnupg.git
synced 2025-07-02 22:46:30 +02:00
kbx: Add support for 32 byte fingerprints.
* common/userids.c (classify_user_id): Support 32 byte fingerprints. * kbx/keybox-search-desc.h (KEYDB_SEARCH_MODE_FPR32): New. (struct keydb_search_desc): Add field fprlen. * kbx/keybox-defs.h (struct _keybox_openpgp_key_info): Add field version and increase size of fpr to 32. * kbx/keybox-blob.c: Define new version 2 for PGP and X509 blobs. (struct keyboxblob_key): Add field fprlen and increase size of fpr. (pgp_create_key_part_single): Allow larger fingerprints. (create_blob_header): Implement blob version 2 and add arg want_fpr32. (_keybox_create_openpgp_blob): Detect the need for blob version 2. * kbx/keybox-search.c (blob_get_first_keyid): Support 32 byte fingerprints. (blob_cmp_fpr): Ditto. (blob_cmp_fpr_part): Ditto. (has_fingerprint): Add arg fprlen and pass on. (keybox_search): Support KEYDB_SEARCH_MODE_FPR32 and adjust for changed has_fingerprint. * kbx/keybox-openpgp.c (parse_key): Support version 5 keys. * kbx/keybox-dump.c (_keybox_dump_blob): Support blob version 2. * g10/delkey.c (do_delete_key): Support KEYDB_SEARCH_MODE_FPR32. * g10/export.c (exact_subkey_match_p): Ditto. * g10/gpg.c (main): Ditto. * g10/getkey.c (get_pubkey_byfprint): Adjust for changed KEYDB_SEARCH_MODE_FPR. * g10/keydb.c (keydb_search_desc_dump): Support KEYDB_SEARCH_MODE_FPR32 and adjust for changed KEYDB_SEARCH_MODE_FPR. (keydb_search): Add new arg fprlen and change all callers. * g10/keyedit.c (find_by_primary_fpr): Ditto. * g10/keyid.c (keystr_from_desc): Ditto. * g10/keyring.c (keyring_search): Ditto. * g10/keyserver.c (print_keyrec): Ditto. (parse_keyrec): Ditto. (keyserver_export): Ditto. (keyserver_retrieval_screener): Ditto. (keyserver_import): Ditto. (keyserver_import_fprint): Ditto. (keyidlist): Ditto. (keyserver_get_chunk): Ditto. * g10/keydb.c (keydb_search): Add new arg fprlen and change all callers. * sm/keydb.c (keydb_search_fpr): Adjust for changed KEYDB_SEARCH_MODE_FPR. -- This prepares the support for OpenPGP v5 keys. The new version 2 blob format is needed for the longer fingerprints and we also use this opportunity to prepare for storing the keygrip in the blob for faster lookup by keygrip. Right now this is not yet functional. Signed-off-by: Werner Koch <wk@gnupg.org>
This commit is contained in:
parent
a21ca3a1ef
commit
f40e9d6a52
19 changed files with 440 additions and 130 deletions
|
@ -71,7 +71,8 @@ do_delete_key (ctrl_t ctrl, const char *username, int secret, int force,
|
|||
err = classify_user_id (username, &desc, 1);
|
||||
exactmatch = (desc.mode == KEYDB_SEARCH_MODE_FPR
|
||||
|| desc.mode == KEYDB_SEARCH_MODE_FPR16
|
||||
|| desc.mode == KEYDB_SEARCH_MODE_FPR20);
|
||||
|| desc.mode == KEYDB_SEARCH_MODE_FPR20
|
||||
|| desc.mode == KEYDB_SEARCH_MODE_FPR32);
|
||||
if (!err)
|
||||
err = keydb_search (hd, &desc, 1, NULL);
|
||||
if (err)
|
||||
|
|
16
g10/export.c
16
g10/export.c
|
@ -453,8 +453,9 @@ exact_subkey_match_p (KEYDB_SEARCH_DESC *desc, KBNODE node)
|
|||
|
||||
case KEYDB_SEARCH_MODE_FPR16:
|
||||
case KEYDB_SEARCH_MODE_FPR20:
|
||||
case KEYDB_SEARCH_MODE_FPR32:
|
||||
case KEYDB_SEARCH_MODE_FPR:
|
||||
fingerprint_from_pk (node->pkt->pkt.public_key, fpr,&fprlen);
|
||||
fingerprint_from_pk (node->pkt->pkt.public_key, fpr, &fprlen);
|
||||
break;
|
||||
|
||||
default:
|
||||
|
@ -474,13 +475,22 @@ exact_subkey_match_p (KEYDB_SEARCH_DESC *desc, KBNODE node)
|
|||
break;
|
||||
|
||||
case KEYDB_SEARCH_MODE_FPR16:
|
||||
if (!memcmp (desc->u.fpr, fpr, 16))
|
||||
if (fprlen == 16 && !memcmp (desc->u.fpr, fpr, 16))
|
||||
result = 1;
|
||||
break;
|
||||
|
||||
case KEYDB_SEARCH_MODE_FPR20:
|
||||
if (fprlen == 20 && !memcmp (desc->u.fpr, fpr, 20))
|
||||
result = 1;
|
||||
break;
|
||||
|
||||
case KEYDB_SEARCH_MODE_FPR32:
|
||||
if (fprlen == 32 && !memcmp (desc->u.fpr, fpr, 32))
|
||||
result = 1;
|
||||
break;
|
||||
|
||||
case KEYDB_SEARCH_MODE_FPR:
|
||||
if (!memcmp (desc->u.fpr, fpr, 20))
|
||||
if (fprlen == desc->fprlen && !memcmp (desc->u.fpr, fpr, desc->fprlen))
|
||||
result = 1;
|
||||
break;
|
||||
|
||||
|
|
11
g10/getkey.c
11
g10/getkey.c
|
@ -899,6 +899,7 @@ key_byname (ctrl_t ctrl, GETKEY_CTX *retctx, strlist_t namelist,
|
|||
&& ctx->items[n].mode != KEYDB_SEARCH_MODE_LONG_KID
|
||||
&& ctx->items[n].mode != KEYDB_SEARCH_MODE_FPR16
|
||||
&& ctx->items[n].mode != KEYDB_SEARCH_MODE_FPR20
|
||||
&& ctx->items[n].mode != KEYDB_SEARCH_MODE_FPR32
|
||||
&& ctx->items[n].mode != KEYDB_SEARCH_MODE_FPR)
|
||||
{
|
||||
ctx->items[n].skipfnc = skip_unusable;
|
||||
|
@ -1654,7 +1655,7 @@ get_pubkey_byfprint (ctrl_t ctrl, PKT_public_key *pk, kbnode_t *r_keyblock,
|
|||
if (r_keyblock)
|
||||
*r_keyblock = NULL;
|
||||
|
||||
if (fprint_len == 20 || fprint_len == 16)
|
||||
if (fprint_len == 32 || fprint_len == 20 || fprint_len == 16)
|
||||
{
|
||||
struct getkey_ctx_s ctx;
|
||||
KBNODE kb = NULL;
|
||||
|
@ -1670,9 +1671,9 @@ get_pubkey_byfprint (ctrl_t ctrl, PKT_public_key *pk, kbnode_t *r_keyblock,
|
|||
return gpg_error_from_syserror ();
|
||||
|
||||
ctx.nitems = 1;
|
||||
ctx.items[0].mode = fprint_len == 16 ? KEYDB_SEARCH_MODE_FPR16
|
||||
: KEYDB_SEARCH_MODE_FPR20;
|
||||
ctx.items[0].mode = KEYDB_SEARCH_MODE_FPR;
|
||||
memcpy (ctx.items[0].u.fpr, fprint, fprint_len);
|
||||
ctx.items[0].fprlen = fprint_len;
|
||||
if (pk)
|
||||
ctx.req_usage = pk->req_usage;
|
||||
rc = lookup (ctrl, &ctx, 0, &kb, &found_key);
|
||||
|
@ -1745,8 +1746,6 @@ get_keyblock_byfprint_fast (kbnode_t *r_keyblock, KEYDB_HANDLE *r_hd,
|
|||
|
||||
for (i = 0; i < MAX_FINGERPRINT_LEN && i < fprint_len; i++)
|
||||
fprbuf[i] = fprint[i];
|
||||
while (i < MAX_FINGERPRINT_LEN)
|
||||
fprbuf[i++] = 0;
|
||||
|
||||
hd = keydb_new ();
|
||||
if (!hd)
|
||||
|
@ -1770,7 +1769,7 @@ get_keyblock_byfprint_fast (kbnode_t *r_keyblock, KEYDB_HANDLE *r_hd,
|
|||
if (r_hd)
|
||||
*r_hd = hd;
|
||||
|
||||
err = keydb_search_fpr (hd, fprbuf);
|
||||
err = keydb_search_fpr (hd, fprbuf, fprint_len);
|
||||
if (gpg_err_code (err) == GPG_ERR_NOT_FOUND)
|
||||
{
|
||||
if (!r_hd)
|
||||
|
|
|
@ -5077,6 +5077,7 @@ main (int argc, char **argv)
|
|||
|| desc.mode == KEYDB_SEARCH_MODE_LONG_KID
|
||||
|| desc.mode == KEYDB_SEARCH_MODE_FPR16
|
||||
|| desc.mode == KEYDB_SEARCH_MODE_FPR20
|
||||
|| desc.mode == KEYDB_SEARCH_MODE_FPR32
|
||||
|| desc.mode == KEYDB_SEARCH_MODE_FPR
|
||||
|| desc.mode == KEYDB_SEARCH_MODE_KEYGRIP))
|
||||
{
|
||||
|
|
|
@ -2957,9 +2957,7 @@ import_revoke_cert (ctrl_t ctrl, kbnode_t node, unsigned int options,
|
|||
size_t an;
|
||||
|
||||
fingerprint_from_pk (pk, afp, &an);
|
||||
while (an < MAX_FINGERPRINT_LEN)
|
||||
afp[an++] = 0;
|
||||
rc = keydb_search_fpr (hd, afp);
|
||||
rc = keydb_search_fpr (hd, afp, an);
|
||||
}
|
||||
if (rc)
|
||||
{
|
||||
|
|
46
g10/keydb.c
46
g10/keydb.c
|
@ -81,6 +81,7 @@ enum keyblock_cache_states {
|
|||
struct keyblock_cache {
|
||||
enum keyblock_cache_states state;
|
||||
byte fpr[MAX_FINGERPRINT_LEN];
|
||||
byte fprlen;
|
||||
iobuf_t iobuf; /* Image of the keyblock. */
|
||||
int pk_no;
|
||||
int uid_no;
|
||||
|
@ -566,8 +567,12 @@ keydb_search_desc_dump (struct keydb_search_desc *desc)
|
|||
bin2hex (desc->u.fpr, 20, fpr);
|
||||
return xasprintf ("FPR20: '%s'",
|
||||
format_hexfingerprint (fpr, b, sizeof (b)));
|
||||
case KEYDB_SEARCH_MODE_FPR:
|
||||
case KEYDB_SEARCH_MODE_FPR32:
|
||||
bin2hex (desc->u.fpr, 20, fpr);
|
||||
return xasprintf ("FPR32: '%s'",
|
||||
format_hexfingerprint (fpr, b, sizeof (b)));
|
||||
case KEYDB_SEARCH_MODE_FPR:
|
||||
bin2hex (desc->u.fpr, desc->fprlen, fpr);
|
||||
return xasprintf ("FPR: '%s'",
|
||||
format_hexfingerprint (fpr, b, sizeof (b)));
|
||||
case KEYDB_SEARCH_MODE_ISSUER:
|
||||
|
@ -1531,6 +1536,8 @@ keydb_update_keyblock (ctrl_t ctrl, KEYDB_HANDLE hd, kbnode_t kb)
|
|||
fingerprint_from_pk (pk, desc.u.fpr, &len);
|
||||
if (len == 20)
|
||||
desc.mode = KEYDB_SEARCH_MODE_FPR20;
|
||||
else if (len == 32)
|
||||
desc.mode = KEYDB_SEARCH_MODE_FPR32;
|
||||
else
|
||||
log_bug ("%s: Unsupported key length: %zu\n", __func__, len);
|
||||
|
||||
|
@ -1862,6 +1869,7 @@ keydb_search (KEYDB_HANDLE hd, KEYDB_SEARCH_DESC *desc,
|
|||
int was_reset = hd->is_reset;
|
||||
/* If an entry is already in the cache, then don't add it again. */
|
||||
int already_in_cache = 0;
|
||||
int fprlen;
|
||||
|
||||
if (descindex)
|
||||
*descindex = 0; /* Make sure it is always set on return. */
|
||||
|
@ -1902,12 +1910,21 @@ keydb_search (KEYDB_HANDLE hd, KEYDB_SEARCH_DESC *desc,
|
|||
/* NB: If one of the exact search modes below is used in a loop to
|
||||
walk over all keys (with the same fingerprint) the caching must
|
||||
have been disabled for the handle. */
|
||||
if (desc[0].mode == KEYDB_SEARCH_MODE_FPR20)
|
||||
fprlen = 20;
|
||||
else if (desc[0].mode == KEYDB_SEARCH_MODE_FPR32)
|
||||
fprlen = 32;
|
||||
else if (desc[0].mode == KEYDB_SEARCH_MODE_FPR)
|
||||
fprlen = desc[0].fprlen;
|
||||
else
|
||||
fprlen = 0;
|
||||
|
||||
if (!hd->no_caching
|
||||
&& ndesc == 1
|
||||
&& (desc[0].mode == KEYDB_SEARCH_MODE_FPR20
|
||||
|| desc[0].mode == KEYDB_SEARCH_MODE_FPR)
|
||||
&& hd->keyblock_cache.state == KEYBLOCK_CACHE_FILLED
|
||||
&& !memcmp (hd->keyblock_cache.fpr, desc[0].u.fpr, 20)
|
||||
&& fprlen
|
||||
&& hd->keyblock_cache.state == KEYBLOCK_CACHE_FILLED
|
||||
&& hd->keyblock_cache.fprlen == fprlen
|
||||
&& !memcmp (hd->keyblock_cache.fpr, desc[0].u.fpr, fprlen)
|
||||
/* Make sure the current file position occurs before the cached
|
||||
result to avoid an infinite loop. */
|
||||
&& (hd->current < hd->keyblock_cache.resource
|
||||
|
@ -1922,8 +1939,7 @@ keydb_search (KEYDB_HANDLE hd, KEYDB_SEARCH_DESC *desc,
|
|||
hd->current = hd->keyblock_cache.resource;
|
||||
/* HD->KEYBLOCK_CACHE.OFFSET is the last byte in the record.
|
||||
Seek just beyond that. */
|
||||
keybox_seek (hd->active[hd->current].u.kb,
|
||||
hd->keyblock_cache.offset + 1);
|
||||
keybox_seek (hd->active[hd->current].u.kb, hd->keyblock_cache.offset + 1);
|
||||
keydb_stats.found_cached++;
|
||||
return 0;
|
||||
}
|
||||
|
@ -1986,8 +2002,8 @@ keydb_search (KEYDB_HANDLE hd, KEYDB_SEARCH_DESC *desc,
|
|||
keyblock_cache_clear (hd);
|
||||
if (!hd->no_caching
|
||||
&& !rc
|
||||
&& ndesc == 1 && (desc[0].mode == KEYDB_SEARCH_MODE_FPR20
|
||||
|| desc[0].mode == KEYDB_SEARCH_MODE_FPR)
|
||||
&& ndesc == 1
|
||||
&& fprlen
|
||||
&& hd->active[hd->current].type == KEYDB_RESOURCE_TYPE_KEYBOX)
|
||||
{
|
||||
hd->keyblock_cache.state = KEYBLOCK_CACHE_PREPARED;
|
||||
|
@ -1997,11 +2013,14 @@ keydb_search (KEYDB_HANDLE hd, KEYDB_SEARCH_DESC *desc,
|
|||
within the record. */
|
||||
hd->keyblock_cache.offset
|
||||
= keybox_offset (hd->active[hd->current].u.kb) - 1;
|
||||
memcpy (hd->keyblock_cache.fpr, desc[0].u.fpr, 20);
|
||||
memcpy (hd->keyblock_cache.fpr, desc[0].u.fpr, fprlen);
|
||||
hd->keyblock_cache.fprlen = fprlen;
|
||||
}
|
||||
|
||||
if (gpg_err_code (rc) == GPG_ERR_NOT_FOUND
|
||||
&& ndesc == 1 && desc[0].mode == KEYDB_SEARCH_MODE_LONG_KID && was_reset
|
||||
&& ndesc == 1
|
||||
&& desc[0].mode == KEYDB_SEARCH_MODE_LONG_KID
|
||||
&& was_reset
|
||||
&& !already_in_cache)
|
||||
kid_not_found_insert (desc[0].u.kid);
|
||||
|
||||
|
@ -2078,12 +2097,13 @@ keydb_search_kid (KEYDB_HANDLE hd, u32 *kid)
|
|||
* off. If you want to search the whole database, then you need to
|
||||
* first call keydb_search_reset(). */
|
||||
gpg_error_t
|
||||
keydb_search_fpr (KEYDB_HANDLE hd, const byte *fpr)
|
||||
keydb_search_fpr (KEYDB_HANDLE hd, const byte *fpr, size_t fprlen)
|
||||
{
|
||||
KEYDB_SEARCH_DESC desc;
|
||||
|
||||
memset (&desc, 0, sizeof desc);
|
||||
desc.mode = KEYDB_SEARCH_MODE_FPR;
|
||||
memcpy (desc.u.fpr, fpr, MAX_FINGERPRINT_LEN);
|
||||
memcpy (desc.u.fpr, fpr, fprlen);
|
||||
desc.fprlen = fprlen;
|
||||
return keydb_search (hd, &desc, 1, NULL);
|
||||
}
|
||||
|
|
|
@ -244,9 +244,9 @@ gpg_error_t keydb_search_next (KEYDB_HANDLE hd);
|
|||
key id. */
|
||||
gpg_error_t keydb_search_kid (KEYDB_HANDLE hd, u32 *kid);
|
||||
|
||||
/* This is a convenience function for searching for keys with a long
|
||||
(20 byte) fingerprint. */
|
||||
gpg_error_t keydb_search_fpr (KEYDB_HANDLE hd, const byte *fpr);
|
||||
/* This is a convenience function for searching for keys by
|
||||
* fingerprint. */
|
||||
gpg_error_t keydb_search_fpr (KEYDB_HANDLE hd, const byte *fpr, size_t fprlen);
|
||||
|
||||
|
||||
/*-- pkclist.c --*/
|
||||
|
|
|
@ -2566,7 +2566,8 @@ find_by_primary_fpr (ctrl_t ctrl, const char *fpr,
|
|||
if (classify_user_id (fpr, &desc, 1)
|
||||
|| !(desc.mode == KEYDB_SEARCH_MODE_FPR
|
||||
|| desc.mode == KEYDB_SEARCH_MODE_FPR16
|
||||
|| desc.mode == KEYDB_SEARCH_MODE_FPR20))
|
||||
|| desc.mode == KEYDB_SEARCH_MODE_FPR20
|
||||
|| desc.mode == KEYDB_SEARCH_MODE_FPR32))
|
||||
{
|
||||
log_error (_("\"%s\" is not a fingerprint\n"), fpr);
|
||||
err = gpg_error (GPG_ERR_INV_NAME);
|
||||
|
@ -2591,10 +2592,16 @@ find_by_primary_fpr (ctrl_t ctrl, const char *fpr,
|
|||
&& !desc.u.fpr[18]
|
||||
&& !desc.u.fpr[19])
|
||||
;
|
||||
else if (fprlen == 20 && (desc.mode == KEYDB_SEARCH_MODE_FPR20
|
||||
|| desc.mode == KEYDB_SEARCH_MODE_FPR)
|
||||
else if (fprlen == 20 && desc.mode == KEYDB_SEARCH_MODE_FPR20
|
||||
&& !memcmp (fprbin, desc.u.fpr, 20))
|
||||
;
|
||||
else if (fprlen == 32 && desc.mode == KEYDB_SEARCH_MODE_FPR32
|
||||
&& !memcmp (fprbin, desc.u.fpr, 32))
|
||||
;
|
||||
else if (desc.mode == KEYDB_SEARCH_MODE_FPR
|
||||
&& fprlen == desc.fprlen
|
||||
&& !memcmp (fprbin, desc.u.fpr, fprlen))
|
||||
;
|
||||
else
|
||||
{
|
||||
log_error (_("\"%s\" is not the primary fingerprint\n"), fpr);
|
||||
|
@ -2918,7 +2925,8 @@ keyedit_quick_set_expire (ctrl_t ctrl, const char *fpr, const char *expirestr,
|
|||
/* Parse the fingerprint. */
|
||||
if (classify_user_id (subkeyfprs[idx], &desc, 1)
|
||||
|| !(desc.mode == KEYDB_SEARCH_MODE_FPR
|
||||
|| desc.mode == KEYDB_SEARCH_MODE_FPR20))
|
||||
|| desc.mode == KEYDB_SEARCH_MODE_FPR20
|
||||
|| desc.mode == KEYDB_SEARCH_MODE_FPR32))
|
||||
{
|
||||
log_error (_("\"%s\" is not a proper fingerprint\n"),
|
||||
subkeyfprs[idx] );
|
||||
|
|
26
g10/keyid.c
26
g10/keyid.c
|
@ -481,6 +481,32 @@ keystr_from_desc(KEYDB_SEARCH_DESC *desc)
|
|||
return keystr(keyid);
|
||||
}
|
||||
|
||||
case KEYDB_SEARCH_MODE_FPR32:
|
||||
{
|
||||
u32 keyid[2];
|
||||
|
||||
keyid[0] = buf32_to_u32 (desc->u.fpr);
|
||||
keyid[1] = buf32_to_u32 (desc->u.fpr+4);
|
||||
return keystr(keyid);
|
||||
}
|
||||
|
||||
case KEYDB_SEARCH_MODE_FPR:
|
||||
{
|
||||
u32 keyid[2];
|
||||
|
||||
if (desc->fprlen == 32)
|
||||
{
|
||||
keyid[0] = buf32_to_u32 (desc->u.fpr);
|
||||
keyid[1] = buf32_to_u32 (desc->u.fpr+4);
|
||||
}
|
||||
else
|
||||
{
|
||||
keyid[0] = buf32_to_u32 (desc->u.fpr+12);
|
||||
keyid[1] = buf32_to_u32 (desc->u.fpr+16);
|
||||
}
|
||||
return keystr(keyid);
|
||||
}
|
||||
|
||||
case KEYDB_SEARCH_MODE_FPR16:
|
||||
return "?v3 fpr?";
|
||||
|
||||
|
|
|
@ -997,6 +997,7 @@ keyring_search (KEYRING_HANDLE hd, KEYDB_SEARCH_DESC *desc,
|
|||
break;
|
||||
case KEYDB_SEARCH_MODE_FPR16:
|
||||
case KEYDB_SEARCH_MODE_FPR20:
|
||||
case KEYDB_SEARCH_MODE_FPR32:
|
||||
case KEYDB_SEARCH_MODE_FPR:
|
||||
need_fpr = 1;
|
||||
break;
|
||||
|
@ -1134,11 +1135,12 @@ keyring_search (KEYRING_HANDLE hd, KEYDB_SEARCH_DESC *desc,
|
|||
pk = pkt.pkt.public_key;
|
||||
++pk_no;
|
||||
|
||||
if (need_fpr) {
|
||||
fingerprint_from_pk (pk, afp, &an);
|
||||
while (an < 20) /* fill up to 20 bytes */
|
||||
afp[an++] = 0;
|
||||
}
|
||||
if (need_fpr)
|
||||
{
|
||||
fingerprint_from_pk (pk, afp, &an);
|
||||
while (an < 32) /* fill up to 32 bytes */
|
||||
afp[an++] = 0;
|
||||
}
|
||||
if (need_keyid)
|
||||
keyid_from_pk (pk, aki);
|
||||
|
||||
|
@ -1185,10 +1187,18 @@ keyring_search (KEYRING_HANDLE hd, KEYDB_SEARCH_DESC *desc,
|
|||
goto found;
|
||||
break;
|
||||
case KEYDB_SEARCH_MODE_FPR20:
|
||||
case KEYDB_SEARCH_MODE_FPR:
|
||||
if (pk && !memcmp (desc[n].u.fpr, afp, 20))
|
||||
goto found;
|
||||
break;
|
||||
case KEYDB_SEARCH_MODE_FPR32:
|
||||
if (pk && !memcmp (desc[n].u.fpr, afp, 32))
|
||||
goto found;
|
||||
break;
|
||||
case KEYDB_SEARCH_MODE_FPR:
|
||||
if (pk && desc[n].fprlen >= 16 && desc[n].fprlen <= 32
|
||||
&& !memcmp (desc[n].u.fpr, afp, desc[n].fprlen))
|
||||
goto found;
|
||||
break;
|
||||
case KEYDB_SEARCH_MODE_FIRST:
|
||||
if (pk)
|
||||
goto found;
|
||||
|
|
|
@ -527,6 +527,25 @@ print_keyrec (ctrl_t ctrl, int number,struct keyrec *keyrec)
|
|||
}
|
||||
break;
|
||||
|
||||
/* If we get a modern fingerprint, we have the most
|
||||
flexibility. */
|
||||
case KEYDB_SEARCH_MODE_FPR32:
|
||||
{
|
||||
u32 kid[2];
|
||||
keyid_from_fingerprint (ctrl, keyrec->desc.u.fpr, 32, kid);
|
||||
es_printf("key %s",keystr(kid));
|
||||
}
|
||||
break;
|
||||
|
||||
case KEYDB_SEARCH_MODE_FPR:
|
||||
{
|
||||
u32 kid[2];
|
||||
keyid_from_fingerprint (ctrl, keyrec->desc.u.fpr, keyrec->desc.fprlen,
|
||||
kid);
|
||||
es_printf("key %s",keystr(kid));
|
||||
}
|
||||
break;
|
||||
|
||||
default:
|
||||
BUG();
|
||||
break;
|
||||
|
@ -614,7 +633,9 @@ parse_keyrec(char *keystring)
|
|||
if (err || (work->desc.mode != KEYDB_SEARCH_MODE_SHORT_KID
|
||||
&& work->desc.mode != KEYDB_SEARCH_MODE_LONG_KID
|
||||
&& work->desc.mode != KEYDB_SEARCH_MODE_FPR16
|
||||
&& work->desc.mode != KEYDB_SEARCH_MODE_FPR20))
|
||||
&& work->desc.mode != KEYDB_SEARCH_MODE_FPR20
|
||||
&& work->desc.mode != KEYDB_SEARCH_MODE_FPR32
|
||||
&& work->desc.mode != KEYDB_SEARCH_MODE_FPR))
|
||||
{
|
||||
work->desc.mode=KEYDB_SEARCH_MODE_NONE;
|
||||
return ret;
|
||||
|
@ -996,7 +1017,9 @@ keyserver_export (ctrl_t ctrl, strlist_t users)
|
|||
if (err || (desc.mode != KEYDB_SEARCH_MODE_SHORT_KID
|
||||
&& desc.mode != KEYDB_SEARCH_MODE_LONG_KID
|
||||
&& desc.mode != KEYDB_SEARCH_MODE_FPR16
|
||||
&& desc.mode != KEYDB_SEARCH_MODE_FPR20))
|
||||
&& desc.mode != KEYDB_SEARCH_MODE_FPR20
|
||||
&& desc.mode != KEYDB_SEARCH_MODE_FPR32
|
||||
&& desc.mode != KEYDB_SEARCH_MODE_FPR))
|
||||
{
|
||||
log_error(_("\"%s\" not a key ID: skipping\n"),users->d);
|
||||
continue;
|
||||
|
@ -1070,6 +1093,16 @@ keyserver_retrieval_screener (kbnode_t keyblock, void *opaque)
|
|||
if (fpr_len == 20 && !memcmp (fpr, desc[n].u.fpr, 20))
|
||||
return 0;
|
||||
}
|
||||
else if (desc[n].mode == KEYDB_SEARCH_MODE_FPR32)
|
||||
{
|
||||
if (fpr_len == 32 && !memcmp (fpr, desc[n].u.fpr, 32))
|
||||
return 0;
|
||||
}
|
||||
else if (desc[n].mode == KEYDB_SEARCH_MODE_FPR)
|
||||
{
|
||||
if (fpr_len == desc[n].fprlen && !memcmp (fpr, desc[n].u.fpr, 32))
|
||||
return 0;
|
||||
}
|
||||
else if (desc[n].mode == KEYDB_SEARCH_MODE_FPR16)
|
||||
{
|
||||
if (fpr_len == 16 && !memcmp (fpr, desc[n].u.fpr, 16))
|
||||
|
@ -1111,7 +1144,9 @@ keyserver_import (ctrl_t ctrl, strlist_t users)
|
|||
if (err || (desc[count].mode != KEYDB_SEARCH_MODE_SHORT_KID
|
||||
&& desc[count].mode != KEYDB_SEARCH_MODE_LONG_KID
|
||||
&& desc[count].mode != KEYDB_SEARCH_MODE_FPR16
|
||||
&& desc[count].mode != KEYDB_SEARCH_MODE_FPR20))
|
||||
&& desc[count].mode != KEYDB_SEARCH_MODE_FPR20
|
||||
&& desc[count].mode != KEYDB_SEARCH_MODE_FPR32
|
||||
&& desc[count].mode != KEYDB_SEARCH_MODE_FPR))
|
||||
{
|
||||
log_error (_("\"%s\" not a key ID: skipping\n"), users->d);
|
||||
continue;
|
||||
|
@ -1171,10 +1206,13 @@ keyserver_import_fprint (ctrl_t ctrl, const byte *fprint,size_t fprint_len,
|
|||
desc.mode=KEYDB_SEARCH_MODE_FPR16;
|
||||
else if(fprint_len==20)
|
||||
desc.mode=KEYDB_SEARCH_MODE_FPR20;
|
||||
else if(fprint_len==32)
|
||||
desc.mode=KEYDB_SEARCH_MODE_FPR32;
|
||||
else
|
||||
return -1;
|
||||
|
||||
memcpy(desc.u.fpr,fprint,fprint_len);
|
||||
desc.fprlen = fprint_len;
|
||||
|
||||
/* TODO: Warn here if the fingerprint we got doesn't match the one
|
||||
we asked for? */
|
||||
|
@ -1291,20 +1329,23 @@ keyidlist (ctrl_t ctrl, strlist_t users, KEYDB_SEARCH_DESC **klist,
|
|||
This is because it's easy to calculate any sort of keyid
|
||||
from a v4 fingerprint, but not a v3 fingerprint. */
|
||||
|
||||
if(node->pkt->pkt.public_key->version<4)
|
||||
if (node->pkt->pkt.public_key->version < 4)
|
||||
{
|
||||
(*klist)[*count].mode=KEYDB_SEARCH_MODE_LONG_KID;
|
||||
keyid_from_pk(node->pkt->pkt.public_key,
|
||||
(*klist)[*count].u.kid);
|
||||
}
|
||||
else
|
||||
{
|
||||
{
|
||||
size_t dummy;
|
||||
|
||||
(*klist)[*count].mode=KEYDB_SEARCH_MODE_FPR20;
|
||||
fingerprint_from_pk(node->pkt->pkt.public_key,
|
||||
(*klist)[*count].u.fpr,&dummy);
|
||||
}
|
||||
if (node->pkt->pkt.public_key->version == 4)
|
||||
(*klist)[*count].mode = KEYDB_SEARCH_MODE_FPR20;
|
||||
else
|
||||
(*klist)[*count].mode = KEYDB_SEARCH_MODE_FPR32;
|
||||
fingerprint_from_pk (node->pkt->pkt.public_key,
|
||||
(*klist)[*count].u.fpr,&dummy);
|
||||
}
|
||||
|
||||
/* This is a little hackish, using the skipfncvalue as a
|
||||
void* pointer to the keyserver spec, but we don't need
|
||||
|
@ -1621,9 +1662,10 @@ keyserver_get_chunk (ctrl_t ctrl, KEYDB_SEARCH_DESC *desc, int ndesc,
|
|||
int quiet = 0;
|
||||
|
||||
if (desc[idx].mode == KEYDB_SEARCH_MODE_FPR20
|
||||
|| desc[idx].mode == KEYDB_SEARCH_MODE_FPR32
|
||||
|| desc[idx].mode == KEYDB_SEARCH_MODE_FPR16)
|
||||
{
|
||||
n = 1+2+2*20;
|
||||
n = 1+2+2*32;
|
||||
if (idx && linelen + n > MAX_KS_GET_LINELEN)
|
||||
break; /* Declare end of this chunk. */
|
||||
linelen += n;
|
||||
|
@ -1635,10 +1677,12 @@ keyserver_get_chunk (ctrl_t ctrl, KEYDB_SEARCH_DESC *desc, int ndesc,
|
|||
{
|
||||
strcpy (pattern[npat], "0x");
|
||||
bin2hex (desc[idx].u.fpr,
|
||||
desc[idx].mode == KEYDB_SEARCH_MODE_FPR32? 32 :
|
||||
desc[idx].mode == KEYDB_SEARCH_MODE_FPR20? 20 : 16,
|
||||
pattern[npat]+2);
|
||||
npat++;
|
||||
if (desc[idx].mode == KEYDB_SEARCH_MODE_FPR20)
|
||||
if (desc[idx].mode == KEYDB_SEARCH_MODE_FPR20
|
||||
|| desc[idx].mode == KEYDB_SEARCH_MODE_FPR32)
|
||||
npat_fpr++;
|
||||
}
|
||||
}
|
||||
|
@ -1717,7 +1761,7 @@ keyserver_get_chunk (ctrl_t ctrl, KEYDB_SEARCH_DESC *desc, int ndesc,
|
|||
}
|
||||
}
|
||||
|
||||
/* Remember now many of search items were considered. Note that
|
||||
/* Remember how many of the search items were considered. Note that
|
||||
this is different from NPAT. */
|
||||
*r_ndesc_used = idx;
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue