#include "system.h"
#include "rpmio_internal.h"
#include <rpmlib.h>
#include <rpmmacro.h>
#include "rpmdb.h"
#include "rpmts.h"
#include "misc.h"
#include "legacy.h"
#include "rpmlead.h"
#include "signature.h"
#include "header_internal.h"
#include "debug.h"
Go to the source code of this file.
Functions | |
int | rpmLookupSignatureType (int action) |
Return type of signature needed for signing/building. | |
const char * | rpmDetectPGPVersion (pgpVersion *pgpVer) |
Return path to pgp executable of given type, or NULL when not found. | |
static rpmRC | printSize (FD_t fd, int siglen, int pad, int datalen) |
Print package size. | |
rpmRC | rpmReadSignature (FD_t fd, Header *sighp, sigType sig_type, const char **msg) |
Read (and verify header+payload size) signature header. | |
int | rpmWriteSignature (FD_t fd, Header h) |
Write signature header. | |
Header | rpmNewSignature (void) |
Return new, empty (signature) header instance. | |
Header | rpmFreeSignature (Header h) |
Destroy signature header from package. | |
static int | makePGPSignature (const char *file, byte **pkt, int_32 *pktlen, const char *passPhrase) |
Generate PGP (aka RSA/MD5) signature(s) for a header+payload file. | |
static int | makeGPGSignature (const char *file, byte **pkt, int_32 *pktlen, const char *passPhrase) |
Generate GPG (aka DSA) signature(s) for a header+payload file. | |
static int | makeHDRSignature (Header sig, const char *file, int_32 sigTag, const char *passPhrase) |
Generate header only signature(s) from a header+payload file. | |
int | rpmAddSignature (Header sig, const char *file, int_32 sigTag, const char *passPhrase) |
Generate signature(s) from a header+payload file, save in signature header. | |
static int | checkPassPhrase (const char *passPhrase, const int sigTag) |
char * | rpmGetPassPhrase (const char *prompt, const int sigTag) |
Read a pass phrase using getpass(3), confirm with gpg/pgp helper binaries. | |
static const char * | rpmSigString (rpmRC res) |
static rpmRC | verifySizeSignature (const rpmts ts, char *t) |
static rpmRC | verifyMD5Signature (const rpmts ts, char *t, DIGEST_CTX md5ctx) |
static rpmRC | verifySHA1Signature (const rpmts ts, char *t, DIGEST_CTX sha1ctx) |
Verify header immutable region SHA1 digest. | |
static unsigned char | nibble (char c) |
Convert hex to binary nibble. | |
static rpmRC | verifyPGPSignature (rpmts ts, char *t, DIGEST_CTX md5ctx) |
Verify PGP (aka RSA/MD5) signature. | |
static rpmRC | verifyGPGSignature (rpmts ts, char *t, DIGEST_CTX sha1ctx) |
Verify GPG (aka DSA) signature. | |
rpmRC | rpmVerifySignature (const rpmts ts, char *result) |
Verify a signature from a package. | |
Variables | |
char ** | environ = NULL |
static unsigned char | header_magic [8] |
Definition in file signature.c.
|
Definition at line 784 of file signature.c. References _, dosetenv(), environ, errno, PGP_5, PGP_NOTDETECTED, PGP_UNKNOWN, poptParseArgvString(), rpmDetectPGPVersion(), RPMERR_EXEC, RPMERR_SIGGEN, rpmError, rpmExpand(), rpmIsVerbose, RPMSIGTAG_DSA, RPMSIGTAG_GPG, RPMSIGTAG_PGP, RPMSIGTAG_PGP5, RPMSIGTAG_RSA, strerror(), and unsetenv(). Referenced by rpmGetPassPhrase(). |
|
Generate GPG (aka DSA) signature(s) for a header+payload file.
Definition at line 512 of file signature.c. References _, _free(), addMacro(), alloca(), delMacro(), dosetenv(), environ, errno, Fclose(), Ferror(), Fopen(), poptParseArgvString(), RPMERR_EXEC, RPMERR_SIGGEN, rpmError, rpmExpand(), RPMMESS_DEBUG, rpmMessage, stpcpy(), strerror(), timedRead, unsetenv(), and xmalloc(). Referenced by makeHDRSignature(), and rpmAddSignature(). |
|
Generate header only signature(s) from a header+payload file.
Definition at line 627 of file signature.c. References _free(), Fclose(), Ferror(), Fopen(), header_magic, HEADER_MAGIC_YES, headerAddEntry(), headerFree(), headerFreeData(), headerGetEntry(), headerIsEntry(), headerRead(), headerWrite(), makeGPGSignature(), makePGPSignature(), makeTempFile(), PGPHASHALGO_SHA1, RPM_BIN_TYPE, RPM_STRING_TYPE, RPMDIGEST_NONE, rpmDigestFinal(), rpmDigestInit(), rpmDigestUpdate(), RPMSIGTAG_DSA, RPMSIGTAG_GPG, RPMSIGTAG_MD5, RPMSIGTAG_PGP, RPMSIGTAG_PGP5, RPMSIGTAG_RSA, RPMSIGTAG_SHA1, RPMSIGTAG_SIZE, and RPMTAG_HEADERIMMUTABLE. Referenced by rpmAddSignature(). |
|
Generate PGP (aka RSA/MD5) signature(s) for a header+payload file.
Definition at line 377 of file signature.c. References _, addMacro(), alloca(), dosetenv(), environ, errno, PGP_5, PGP_NOTDETECTED, PGP_UNKNOWN, poptParseArgvString(), rpmDetectPGPVersion(), RPMERR_EXEC, rpmError, rpmExpand(), stpcpy(), strerror(), and unsetenv(). Referenced by makeHDRSignature(), and rpmAddSignature(). |
|
Convert hex to binary nibble.
Definition at line 1115 of file signature.c. |
|
Print package size.
Definition at line 122 of file signature.c. References _, Fileno(), RPMMESS_DEBUG, rpmMessage, RPMRC_FAIL, and RPMRC_OK. Referenced by rpmReadSignature(). |
|
Definition at line 949 of file signature.c. References RPMRC_FAIL, RPMRC_NOKEY, RPMRC_NOTFOUND, RPMRC_NOTTRUSTED, and RPMRC_OK. Referenced by verifyGPGSignature(), verifyMD5Signature(), verifyPGPSignature(), verifySHA1Signature(), and verifySizeSignature(). |
|
Verify GPG (aka DSA) signature.
Definition at line 1256 of file signature.c. References _, pgpDig_s::g, pgpDigParams_s::hash, pgpDigParams_s::hash_algo, pgpDigParams_s::hashlen, pgpDig_s::hdrsha1ctx, pgpDig_s::hm, pgpDig_s::nbytes, pgpDig_s::p, PGPHASHALGO_SHA1, pgpHexCvt(), PGPPUBKEYALGO_DSA, pgpDigParams_s::pubkey_algo, pgpDig_s::q, pgpDig_s::r, rpmDigestDup(), rpmDigestFinal(), rpmDigestUpdate(), RPMRC_FAIL, RPMRC_NOKEY, RPMRC_OK, rpmSigString(), RPMSIGTAG_DSA, RPMSIGTAG_GPG, rpmswEnter(), rpmswExit(), RPMTS_OP_DIGEST, RPMTS_OP_SIGNATURE, rpmtsDig(), rpmtsFindPubkey(), rpmtsOp(), rpmtsSig(), rpmtsSiglen(), rpmtsSignature(), rpmtsSigtag(), pgpDig_s::s, pgpDig_s::sha1, pgpDig_s::sha1len, pgpDigParams_s::signhash16, pgpDigParams_s::signid, pgpDigParams_s::sigtype, stpcpy(), and pgpDig_s::y. Referenced by rpmVerifySignature(). |
|
Definition at line 1003 of file signature.c. References _, _free(), pgpHexCvt(), rpmDigestDup(), rpmDigestFinal(), RPMRC_FAIL, RPMRC_NOKEY, RPMRC_OK, rpmSigString(), rpmswEnter(), rpmswExit(), RPMTS_OP_DIGEST, rpmtsDig(), rpmtsOp(), rpmtsSig(), rpmtsSiglen(), and stpcpy(). Referenced by rpmVerifySignature(). |
|
Verify PGP (aka RSA/MD5) signature.
Definition at line 1136 of file signature.c. References _, _free(), pgpDig_s::c, pgpDigParams_s::hash, pgpDigParams_s::hash_algo, pgpDigParams_s::hashlen, pgpDig_s::md5, pgpDig_s::md5len, pgpDig_s::nbytes, nibble(), PGPHASHALGO_MD5, pgpHexCvt(), PGPPUBKEYALGO_RSA, pgpDigParams_s::pubkey_algo, rpmDigestDup(), rpmDigestFinal(), rpmDigestUpdate(), RPMRC_FAIL, RPMRC_NOKEY, RPMRC_OK, rpmSigString(), RPMSIGTAG_PGP, rpmswEnter(), rpmswExit(), RPMTS_OP_DIGEST, RPMTS_OP_SIGNATURE, rpmtsDig(), rpmtsFindPubkey(), rpmtsOp(), rpmtsSig(), rpmtsSiglen(), rpmtsSignature(), rpmtsSigtag(), pgpDig_s::rsa_pk, pgpDig_s::rsahm, pgpDigParams_s::signhash16, pgpDigParams_s::signid, pgpDigParams_s::sigtype, stpcpy(), and xmalloc(). Referenced by rpmVerifySignature(). |
|
Verify header immutable region SHA1 digest.
Definition at line 1061 of file signature.c. References _, _free(), rpmDigestDup(), rpmDigestFinal(), RPMRC_FAIL, RPMRC_NOKEY, RPMRC_OK, rpmSigString(), rpmswEnter(), rpmswExit(), RPMTS_OP_DIGEST, rpmtsDig(), rpmtsOp(), rpmtsSig(), rpmtsSiglen(), and stpcpy(). Referenced by rpmVerifySignature(). |
|
Definition at line 966 of file signature.c. References _, pgpDig_s::nbytes, RPMRC_FAIL, RPMRC_NOKEY, RPMRC_OK, rpmSigString(), rpmtsDig(), rpmtsSig(), and stpcpy(). Referenced by rpmVerifySignature(). |
|
Definition at line 30 of file signature.c. Referenced by checkPassPhrase(), main(), makeGPGSignature(), makePGPSignature(), open_dso(), and rpmsqExecve(). |
|
Initial value: { 0x8e, 0xad, 0xe8, 0x01, 0x00, 0x00, 0x00, 0x00 } Definition at line 144 of file signature.c. |