lib/rpmchecksig.c File Reference

Verify the signature of a package. More...

#include "system.h"
#include <rpmio_internal.h>
#include <poptIO.h>
#include <rpmbc.h>
#include <rpmhkp.h>
#include <rpmtag.h>
#include <rpmtypes.h>
#include <rpmevr.h>
#include <rpmdb.h>
#include <rpmtxn.h>
#include <rpmxar.h>
#include <pkgio.h>
#include "signature.h"
#include <rpmts.h>
#include "rpmgi.h"
#include <rpmversion.h>
#include <rpmcli.h>
#include "debug.h"

Include dependency graph for rpmchecksig.c:

Go to the source code of this file.

Defines
#define	_RPMHKP_INTERNAL
#define	_RPMEVR_INTERNAL
#define	_RPMDB_INTERNAL
#define	_RPMTS_INTERNAL
Functions
static int	manageFile (FD_t *fdp, const char **fnp, int flags, int rc)
static int	copyFile (FD_t *sfdp, const char **sfnp, FD_t *tfdp, const char **tfnp)
	Copy header+payload, calculating digest(s) on the fly.
static int	getSignid (Header sigh, rpmSigTag sigtag, unsigned char *signid)
	Retrieve signer fingerprint from an OpenPGP signature tag.
static int	rpmReSign (rpmts ts, QVA_t qva, const char **argv)
	Create/modify elements in signature header.
rpmRC	rpmcliImportPubkey (const rpmts ts, const unsigned char *pkt, ssize_t pktlen)
	Import public key packet(s).
static int	rpmcliImportPubkeys (const rpmts ts, QVA_t qva, const char **argv)
	Import public key(s).
static rpmRC	readFile (FD_t fd, const char *fn)
int	rpmVerifySignatures (QVA_t qva, rpmts ts, void *_fd, const char *fn)
	Check package and header signatures.
int	rpmcliSign (rpmts ts, QVA_t qva, const char **argv)
	Create/Modify/Check elements from signature header.
Variables
int	_print_pkts = 0

---

Detailed Description

Verify the signature of a package.

Definition in file rpmchecksig.c.

---

Define Documentation

#define _RPMDB_INTERNAL

Definition at line 19 of file rpmchecksig.c.

#define _RPMEVR_INTERNAL

Definition at line 17 of file rpmchecksig.c.

#define _RPMHKP_INTERNAL

Definition at line 12 of file rpmchecksig.c.

#define _RPMTS_INTERNAL

Definition at line 26 of file rpmchecksig.c.

---

Function Documentation

static int copyFile	(	FD_t *	sfdp,
		const char **	sfnp,
		FD_t *	tfdp,
		const char **	tfnp
	)		[static]

Copy header+payload, calculating digest(s) on the fly.

Definition at line 105 of file rpmchecksig.c.

References _, Fflush(), Fread(), Fstrerror(), Fwrite(), manageFile(), rpmlog(), and RPMLOG_ERR.

Referenced by rpmReSign().

static int getSignid	(	Header	sigh,
		rpmSigTag	sigtag,
		unsigned char *	signid
	)		[static]

Retrieve signer fingerprint from an OpenPGP signature tag.

Parameters:

sigh	signature header
sigtag	signature tag

Return values:

signid

signer fingerprint

Returns:

0 on success

Definition at line 154 of file rpmchecksig.c.

References _free(), alloca(), _HE_s::c, headerGet(), _HE_s::p, pgpDigFree(), pgpDigNew(), pgpPktLen(), rpmDataType_u::ptr, RPMVSF_DEFAULT, and _HE_s::tag.

Referenced by rpmReSign().

static int manageFile	(	FD_t *	fdp,
		const char **	fnp,
		int	flags,
		int	rc
	)		[static]

Definition at line 46 of file rpmchecksig.c.

References _, Fclose(), fdFree(), fdLink(), Ferror(), Fopen(), Fstrerror(), rpmlog(), RPMLOG_ERR, and rpmTempFile().

Referenced by copyFile(), and rpmReSign().

static rpmRC readFile	(	FD_t	fd,
		const char *	fn
	)		[static]

Todo:

If the GPG key was known available, the md5 digest could be skipped.

Definition at line 915 of file rpmchecksig.c.

References _, _free(), alloca(), rpmDataType_u::argv, _HE_s::c, fdGetDig(), fdGetXAR(), fdStealDigest(), Ferror(), Fread(), Fstrerror(), headerFree(), headerGet(), headerGetMagic(), headerIsEntry(), headerSizeof(), _HE_s::p, pgpArmorUnwrap(), PGPHASHALGO_SHA1, rpmDataType_u::ptr, RPM_STRING_ARRAY_TYPE, RPMDIGEST_NONE, rpmDigestInit(), rpmDigestUpdate(), rpmiobAppend(), rpmiobFree(), rpmiobNew(), rpmlog(), RPMLOG_ERR, rpmpkgRead(), RPMRC_FAIL, RPMRC_NOTFOUND, RPMRC_OK, RPMTAG_HEADERIMMUTABLE, rpmxarNext(), rpmxarPull(), _HE_s::t, and _HE_s::tag.

Referenced by rpmVerifySignatures().

int rpmVerifySignatures	(	QVA_t	qva,
		rpmts	ts,
		void *	_fd,
		const char *	fn
	)

Check package and header signatures.

Parameters:

qva	parsed query/verify options
ts	transaction set
_fd	package file handle
fn	package file name

Returns:

0 on success, 1 on failure

Definition at line 1025 of file rpmchecksig.c.

References _, _free(), alloca(), _HE_s::c, fdInitDigest(), fdSetDig(), headerFini(), headerFree(), headerGet(), headerInit(), headerIsEntry(), headerNext(), _HE_s::p, pgpDigClean(), pgpGetSignature(), PGPHASHALGO_MD5, pgpPktLen(), pgpSetSig(), rpmDataType_u::ptr, rpmQVKArguments_s::qva_flags, readFile(), rpmIsVerbose, rpmlog(), RPMLOG_ERR, RPMLOG_NOTICE, rpmpkgRead(), RPMRC_OK, RPMSIGTAG_DSA, RPMSIGTAG_MD5, RPMSIGTAG_RSA, RPMSIGTAG_SHA1, RPMSIGTAG_SIZE, rpmtsCleanDig(), rpmtsDig(), rpmVerifySignature(), stpcpy(), _HE_s::t, _HE_s::tag, VERIFY_DIGEST, and VERIFY_SIGNATURE.

Referenced by rpmcliSign().

---

Variable Documentation

int _print_pkts = 0

Definition at line 42 of file rpmchecksig.c.