mirror of
git://git.gnupg.org/gnupg.git
synced 2024-12-23 10:29:58 +01:00
62fb86c658
* configure.ac: Add option --disable-trust-models (NO_TRUST_MODELS): New ac_define and am_conditional. * g10/Makefile.am (trust_source): New. (gpg2_SOURCES): Factor some files out to above. Add trust.c. * g10/gpg.c [NO_TRUST_MODELS]: Disable options --export-ownertrust, --import-ownertrust, --update-trustdb, --check-trustdb, --fix-trustdb, --list-trustdb, --trustdb-name, --auto-check-trustdb, --no-auto-check-trustdb, and --force-ownertrust. (parse_trust_model) [NO_TRUST_MODELS]: Do not build. (main) [NO_TRUST_MODELS]: Set trust_model to always and exclude all trustdb related option code. * g10/keyedit.c (cmds) [NO_TRUST_MODELS]: Remove menu items "trust", "enable", and "disable". * g10/keylist.c (public_key_list) [NO_TRUST_MODELS]: Do not print "tru" record. * g10/trust.c: New. * g10/trustdb.c (struct key_item): Move to trustdb.h. (register_trusted_keyid): Rename to tdb_register_trusted_keyid. (register_trusted_key): Rename to tdb_register_trusted_key. (trust_letter, uid_trust_string_fixed, trust_value_to_string) (string_to_trust_value, get_ownertrust_with_min, get_ownertrust_info) (get_ownertrust_string, get_validity_info, get_validity_string) (clean_sigs_from_uid, clean_uid_from_key, clean_key): Move to trust.c. (mark_usable_uid_certs): Move to trust.c and make global. (is_in_klist): Move as inline to trustdb.h. (trustdb_check_or_update): Rename to tdb_check_or_update (revalidation_mark): Rename to tdb_revalidation_mark. (get_ownertrust): Rename to tdb_get_ownertrust. (get_min_ownertrust): Rename to tdb_get_min_ownertrust. (update_ownertrust): Rename to tdb_update_ownertrust. (clear_ownertrusts): Rename to tdb_clear_ownertrusts. (cache_disabled_value): Rename to tdb_cache_disabled_value. (check_trustdb_stale): Rename to tdb_check_trustdb_stale. (get_validity): Rename to tdb_get_validity_core, add arg MAIN_PK and factor some code out to ... * trust.c (get_validity): ...new. (check_or_update_trustdb): New wrapper. (revalidation_mark): New wrapper. (get_ownertrust): New wrapper. (get_ownertrust_with_min): New wrapper. (update_ownertrust): New wrapper. (clear_ownertrusts): New wrapper. (cache_disabled_value): New wrapper. (check_trustdb_stale): New wrapper. * tests/openpgp/defs.inc (opt_always): New. Use in all tests instead of --always-trust.
152 lines
5.0 KiB
C
152 lines
5.0 KiB
C
/* trustdb.h - Trust database
|
|
* Copyright (C) 1998, 1999, 2000, 2001, 2002, 2003, 2004,
|
|
* 2005, 2012 Free Software Foundation, Inc.
|
|
*
|
|
* This file is part of GnuPG.
|
|
*
|
|
* GnuPG is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* GnuPG is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#ifndef G10_TRUSTDB_H
|
|
#define G10_TRUSTDB_H
|
|
|
|
/* Trust values must be sorted in ascending order */
|
|
#define TRUST_MASK 15
|
|
#define TRUST_UNKNOWN 0 /* o: not yet calculated/assigned */
|
|
#define TRUST_EXPIRED 1 /* e: calculation may be invalid */
|
|
#define TRUST_UNDEFINED 2 /* q: not enough information for calculation */
|
|
#define TRUST_NEVER 3 /* n: never trust this pubkey */
|
|
#define TRUST_MARGINAL 4 /* m: marginally trusted */
|
|
#define TRUST_FULLY 5 /* f: fully trusted */
|
|
#define TRUST_ULTIMATE 6 /* u: ultimately trusted */
|
|
/* trust values not covered by the mask */
|
|
#define TRUST_FLAG_REVOKED 32 /* r: revoked */
|
|
#define TRUST_FLAG_SUB_REVOKED 64 /* r: revoked but for subkeys */
|
|
#define TRUST_FLAG_DISABLED 128 /* d: key/uid disabled */
|
|
#define TRUST_FLAG_PENDING_CHECK 256 /* a check-trustdb is pending */
|
|
|
|
#define NAMEHASH_LEN 20
|
|
|
|
|
|
/*
|
|
* A structure to store key identification as well as some stuff needed
|
|
* for validation
|
|
*/
|
|
struct key_item {
|
|
struct key_item *next;
|
|
unsigned int ownertrust,min_ownertrust;
|
|
byte trust_depth;
|
|
byte trust_value;
|
|
char *trust_regexp;
|
|
u32 kid[2];
|
|
};
|
|
|
|
|
|
/*
|
|
* Check whether the signature SIG is in the klist K.
|
|
*/
|
|
static inline struct key_item *
|
|
is_in_klist (struct key_item *k, PKT_signature *sig)
|
|
{
|
|
for (; k; k = k->next)
|
|
{
|
|
if (k->kid[0] == sig->keyid[0] && k->kid[1] == sig->keyid[1])
|
|
return k;
|
|
}
|
|
return NULL;
|
|
}
|
|
|
|
|
|
|
|
/*-- trust.c --*/
|
|
int cache_disabled_value (PKT_public_key *pk);
|
|
void register_trusted_keyid (u32 *keyid);
|
|
void register_trusted_key (const char *string);
|
|
|
|
const char *trust_value_to_string (unsigned int value);
|
|
int string_to_trust_value (const char *str);
|
|
const char *uid_trust_string_fixed (PKT_public_key *key, PKT_user_id *uid);
|
|
|
|
unsigned int get_ownertrust (PKT_public_key *pk);
|
|
void update_ownertrust (PKT_public_key *pk, unsigned int new_trust);
|
|
int clear_ownertrusts (PKT_public_key *pk);
|
|
|
|
void revalidation_mark (void);
|
|
void check_trustdb_stale (void);
|
|
void check_or_update_trustdb (void);
|
|
|
|
unsigned int get_validity (PKT_public_key *pk, PKT_user_id *uid);
|
|
int get_validity_info (PKT_public_key *pk, PKT_user_id *uid);
|
|
const char *get_validity_string (PKT_public_key *pk, PKT_user_id *uid);
|
|
|
|
void mark_usable_uid_certs (kbnode_t keyblock, kbnode_t uidnode,
|
|
u32 *main_kid, struct key_item *klist,
|
|
u32 curtime, u32 *next_expire);
|
|
|
|
void clean_one_uid (kbnode_t keyblock, kbnode_t uidnode,
|
|
int noisy, int self_only,
|
|
int *uids_cleaned, int *sigs_cleaned);
|
|
void clean_key (kbnode_t keyblock, int noisy, int self_only,
|
|
int *uids_cleaned,int *sigs_cleaned);
|
|
|
|
|
|
|
|
/*-- trustdb.c --*/
|
|
void tdb_register_trusted_keyid (u32 *keyid);
|
|
void tdb_register_trusted_key (const char *string);
|
|
void check_trustdb (void);
|
|
void update_trustdb (void);
|
|
int setup_trustdb( int level, const char *dbname );
|
|
void how_to_fix_the_trustdb (void);
|
|
void init_trustdb( void );
|
|
void tdb_check_trustdb_stale (void);
|
|
void sync_trustdb( void );
|
|
|
|
void tdb_revalidation_mark (void);
|
|
int trustdb_pending_check(void);
|
|
void tdb_check_or_update (void);
|
|
|
|
int tdb_cache_disabled_value (PKT_public_key *pk);
|
|
|
|
unsigned int tdb_get_validity_core (PKT_public_key *pk, PKT_user_id *uid,
|
|
PKT_public_key *main_pk);
|
|
|
|
void list_trust_path( const char *username );
|
|
int enum_cert_paths( void **context, ulong *lid,
|
|
unsigned *ownertrust, unsigned *validity );
|
|
void enum_cert_paths_print( void **context, FILE *fp,
|
|
int refresh, ulong selected_lid );
|
|
|
|
void read_trust_options(byte *trust_model,ulong *created,ulong *nextcheck,
|
|
byte *marginals,byte *completes,byte *cert_depth,
|
|
byte *min_cert_level);
|
|
|
|
unsigned int tdb_get_ownertrust (PKT_public_key *pk);
|
|
unsigned int tdb_get_min_ownertrust (PKT_public_key *pk);
|
|
int get_ownertrust_info (PKT_public_key *pk);
|
|
const char *get_ownertrust_string (PKT_public_key *pk);
|
|
|
|
void tdb_update_ownertrust (PKT_public_key *pk, unsigned int new_trust);
|
|
int tdb_clear_ownertrusts (PKT_public_key *pk);
|
|
|
|
/*-- tdbdump.c --*/
|
|
void list_trustdb(const char *username);
|
|
void export_ownertrust(void);
|
|
void import_ownertrust(const char *fname);
|
|
|
|
/*-- pkclist.c --*/
|
|
int edit_ownertrust (PKT_public_key *pk, int mode );
|
|
|
|
#endif /*G10_TRUSTDB_H*/
|