mirror of
git://git.gnupg.org/gnupg.git
synced 2025-06-30 22:27:56 +02:00
ec332d58ef
* kbx/keybox-defs.h (struct keybox_handle): Add field for_openpgp. * kbx/keybox-file.c (_keybox_write_header_blob): Set openpgp header flag. * kbx/keybox-blob.c (_keybox_update_header_blob): Add arg for_openpgp and set header flag. * kbx/keybox-init.c (keybox_new): Rename to do_keybox_new, make static and add arg for_openpgp. (keybox_new_openpgp, keybox_new_x509): New. Use them instead of the former keybox_new. * kbx/keybox-update.c (blob_filecopy): Add arg for_openpgp and set the openpgp header flags. * g10/keydb.c (rt_from_file): New. Factored out and extended from keydb_add_resource. (keydb_add_resource): Switch to the kbx file if it has the openpgp flag set. * kbx/keybox-dump.c (dump_header_blob): Print header flags. -- The problem was reported by dkg on gnupg-devel (2014-10-07): I just discovered a new problem, though, which will affect people on systems that have gpg and gpg2 coinstalled: 0) create a new keyring with gpg2, and use it exclusively with gpg2 for a while. 1) somehow (accidentally?) use gpg (1.4.x) again -- this creates ~/.gnupg/pubring.gpg 2) future runs of gpg2 now only look at pubring.gpg and ignore pubring.kbx -- the keys you had accumulated in the keybox are no longer listed in the output of gpg2 --list-keys Note that gpgsm has always used pubring.kbx and thus this file might already be there but without gpg ever inserted a key. The new flag in the KBX header gives us an indication whether a KBX file has ever been written by gpg >= 2.1. If that is the case we will use it instead of the default pubring.gpg. Signed-off-by: Werner Koch <wk@gnupg.org>
130 lines
4.1 KiB
C
130 lines
4.1 KiB
C
/* keybox.h - Keybox operations
|
|
* Copyright (C) 2001, 2003, 2012 Free Software Foundation, Inc.
|
|
*
|
|
* This file is part of GnuPG.
|
|
*
|
|
* GnuPG is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* GnuPG is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#ifndef KEYBOX_H
|
|
#define KEYBOX_H 1
|
|
#ifdef __cplusplus
|
|
extern "C" {
|
|
#if 0
|
|
}
|
|
#endif
|
|
#endif
|
|
|
|
#include "../common/iobuf.h"
|
|
#include "keybox-search-desc.h"
|
|
|
|
#define KEYBOX_WITH_X509 1
|
|
|
|
|
|
#ifdef KEYBOX_WITH_X509
|
|
# include <ksba.h>
|
|
#endif
|
|
|
|
typedef struct keybox_handle *KEYBOX_HANDLE;
|
|
|
|
|
|
typedef enum
|
|
{
|
|
KEYBOX_FLAG_BLOB, /* The blob flags. */
|
|
KEYBOX_FLAG_VALIDITY, /* The validity of the entire key. */
|
|
KEYBOX_FLAG_OWNERTRUST, /* The assigned ownertrust. */
|
|
KEYBOX_FLAG_KEY, /* The key flags; requires a key index. */
|
|
KEYBOX_FLAG_UID, /* The user ID flags; requires an uid index. */
|
|
KEYBOX_FLAG_UID_VALIDITY,/* The validity of a specific uid, requires
|
|
an uid index. */
|
|
KEYBOX_FLAG_CREATED_AT, /* The date the block was created. */
|
|
KEYBOX_FLAG_SIG_INFO, /* The signature info block. */
|
|
} keybox_flag_t;
|
|
|
|
/* Flag values used with KEYBOX_FLAG_BLOB. */
|
|
#define KEYBOX_FLAG_BLOB_SECRET 1
|
|
#define KEYBOX_FLAG_BLOB_EPHEMERAL 2
|
|
|
|
|
|
|
|
/*-- keybox-init.c --*/
|
|
void *keybox_register_file (const char *fname, int secret);
|
|
int keybox_is_writable (void *token);
|
|
|
|
KEYBOX_HANDLE keybox_new_openpgp (void *token, int secret);
|
|
KEYBOX_HANDLE keybox_new_x509 (void *token, int secret);
|
|
void keybox_release (KEYBOX_HANDLE hd);
|
|
void keybox_push_found_state (KEYBOX_HANDLE hd);
|
|
void keybox_pop_found_state (KEYBOX_HANDLE hd);
|
|
const char *keybox_get_resource_name (KEYBOX_HANDLE hd);
|
|
int keybox_set_ephemeral (KEYBOX_HANDLE hd, int yes);
|
|
|
|
int keybox_lock (KEYBOX_HANDLE hd, int yes);
|
|
|
|
/*-- keybox-file.c --*/
|
|
/* Fixme: This function does not belong here: Provide a better
|
|
interface to create a new keybox file. */
|
|
int _keybox_write_header_blob (FILE *fp, int openpgp_flag);
|
|
|
|
/*-- keybox-search.c --*/
|
|
gpg_error_t keybox_get_keyblock (KEYBOX_HANDLE hd, iobuf_t *r_iobuf,
|
|
int *r_uid_no, int *r_pk_no, u32 **sigstatus);
|
|
#ifdef KEYBOX_WITH_X509
|
|
int keybox_get_cert (KEYBOX_HANDLE hd, ksba_cert_t *ret_cert);
|
|
#endif /*KEYBOX_WITH_X509*/
|
|
int keybox_get_flags (KEYBOX_HANDLE hd, int what, int idx, unsigned int *value);
|
|
|
|
int keybox_search_reset (KEYBOX_HANDLE hd);
|
|
int keybox_search (KEYBOX_HANDLE hd, KEYBOX_SEARCH_DESC *desc, size_t ndesc,
|
|
size_t *r_descindex);
|
|
|
|
|
|
/*-- keybox-update.c --*/
|
|
gpg_error_t keybox_insert_keyblock (KEYBOX_HANDLE hd,
|
|
const void *image, size_t imagelen,
|
|
u32 *sigstatus);
|
|
gpg_error_t keybox_update_keyblock (KEYBOX_HANDLE hd,
|
|
const void *image, size_t imagelen);
|
|
|
|
#ifdef KEYBOX_WITH_X509
|
|
int keybox_insert_cert (KEYBOX_HANDLE hd, ksba_cert_t cert,
|
|
unsigned char *sha1_digest);
|
|
int keybox_update_cert (KEYBOX_HANDLE hd, ksba_cert_t cert,
|
|
unsigned char *sha1_digest);
|
|
#endif /*KEYBOX_WITH_X509*/
|
|
int keybox_set_flags (KEYBOX_HANDLE hd, int what, int idx, unsigned int value);
|
|
|
|
int keybox_delete (KEYBOX_HANDLE hd);
|
|
int keybox_compress (KEYBOX_HANDLE hd);
|
|
|
|
|
|
/*-- --*/
|
|
|
|
#if 0
|
|
int keybox_locate_writable (KEYBOX_HANDLE hd);
|
|
int keybox_rebuild_cache (void *);
|
|
#endif
|
|
|
|
|
|
/*-- keybox-util.c --*/
|
|
void keybox_set_malloc_hooks ( void *(*new_alloc_func)(size_t n),
|
|
void *(*new_realloc_func)(void *p, size_t n),
|
|
void (*new_free_func)(void*) );
|
|
|
|
|
|
#ifdef __cplusplus
|
|
}
|
|
#endif
|
|
#endif /*KEYBOX_H*/
|