3
���\j� � @ s d dl mZmZmZ d dlZd dlZd dlZd dlZddlm Z ddl
m Z m Z ddlm
Z
ddlm
Z
ddlmZ [[[G d d
� d
e�ZG d d � d e�ZG d
d� de�Zdd� Zdd� Zdd� Zdd� Zdd� Zd%dd�Ze� dd � Zd d � Zd&d d �Zd!d"� Z d#d$� Z dS )'� )�absolute_import�print_function�unicode_literalsN� )�gpgme)�
errorcheck�
GPGMEError)� constants)�errors)�utilc s� e Zd ZdZdd� Z� fdd�Zdd� Zdd � Zd
d � Ze d d
� �Z
e dd� �Z dd� Z e
� Zddd�Zejd�Zdd� Z� fdd�Z� ZS ) � GpgmeWrapperz>Base wrapper class
Not to be instantiated directly.
c C s d | _ || _d S )N)�_callback_excinfo�wrapped)�selfr � r � /usr/lib64/python3.6/core.py�__init__3 s zGpgmeWrapper.__init__c s dj tt| �j� | j�S )Nz <{}/{!r}>)�format�superr �__repr__r )r )� __class__r r r 7 s zGpgmeWrapper.__repr__c sP dj t� jj�g}� fdd�� jD �}|r@|jdj dj|��� dj dj|��S )Nz{}.{}c s g | ]}t � |�r|�qS r )�getattr)�.0�f)r r r �
<listcomp>= s z(GpgmeWrapper.__str__.<locals>.<listcomp>z({})� z<{}>)r �__name__r �_boolean_properties�append�join)r Zacc�flagsr )r r �__str__; s
zGpgmeWrapper.__str__c C s t t| j��S )N)�hash�reprr )r r r r �__hash__C s zGpgmeWrapper.__hash__c C s$ |d kr dS t | j�t |j�kS d S )NF)r# r )r �otherr r r �__eq__F s zGpgmeWrapper.__eq__c C s
t � �dS )z]The name of the c type wrapped by this class
Must be set by child classes.
N)�NotImplementedError)r r r r �_ctypeL s zGpgmeWrapper._ctypec C s
t � �dS )zgThe common prefix of c functions wrapped by this class
Must be set by child classes.
N)r' )r r r r �_cprefixU s zGpgmeWrapper._cprefixc C s
t � �dS )z�Must be implemented by child classes.
This function must return a trueish value for all c functions
returning gpgme_error_t.N)r' )r �namer r r � _errorcheck^ s zGpgmeWrapper._errorcheckFNc s� t tdj| j|��� t tdj| j|���� fdd�}�fdd�}t||dj|�d�}t| j||� |rv|| t|�� n|| �S d S ) Nz{}get_{}z{}set_{}c s t � | j��S )N)�boolr )�slf)�get_funcr r �getl s z1GpgmeWrapper.__wrap_boolean_property.<locals>.getc s � | j t|�� d S )N)r r, )r- �value)�set_funcr r �set_o s z2GpgmeWrapper.__wrap_boolean_property.<locals>.set_z{} flag)�doc)r r r r) �property�setattrr r, )r �keyZdo_setr0 r/ r2 �pr )r. r1 r Z__wrap_boolean_propertyh s z$GpgmeWrapper.__wrap_boolean_propertyz$gpgme_([^(]*)\(([^,]*), (.*\) -> .*)c s� |d dks�j dkrdS |�jkr.�j|�S �j | �tt����j��r\��fdd�� n �fdd�� �jjdt�d��}|� _t �j
|� � � �fd d
�}||_|S ) z7On-the-fly generation of wrapper methods and propertiesr �_Nc s* � | j f|�� }| jr tj| � t|��S )N)r r
r � gpg_raise_callback_exceptionr )r- �args�result)�funcr* r r � _funcwrap� s
z+GpgmeWrapper.__getattr__.<locals>._funcwrapc s$ � | j f|�� }| jr tj| � |S )N)r r
r r9 )r- r: r; )r< r r r= � s
z\2.\1(\3�__doc__c s � �f| �� S )Nr )r: )r= r r r �wrapper� s z)GpgmeWrapper.__getattr__.<locals>.wrapper) r) r �$_GpgmeWrapper__wrap_boolean_propertyr r r+ �_munge_docstring�subr> r5 r )r r6 r3 r? r )r= r< r* r r � __getattr__| s
zGpgmeWrapper.__getattr__c s0 || j kr| j|d|� ntt| �j||� dS )z#On-the-fly generation of propertiesTN)r r@ r r � __setattr__)r r6 r0 )r r r rD � s
zGpgmeWrapper.__setattr__)FN)r �
__module__� __qualname__r> r r r! r$ r& r4 r( r) r+ �setr r@ �re�compilerA rC rD �
__classcell__r r )r r r , s
(r c s< e Zd ZdZdddg ejejddf� fdd� Zdd� Zdd � Z g d
ddddddd
f d d �Z
dgd
d�Z dej fdd�Z
ddg fdd�Zdd� Zdhdd�Zdidd�Zdjdd�Zddejjjdfdd �Zdkd d �Zdld d!�Zd"d#� Zd$d%� Zdmd&d'�Zd(d)� Zdnd*d+�Z dod,d-�Z e d.d/� �Z e j d0d/� �Z e d1d2� �Z!e!j d3d2� �Z!e d4d5� �Z"e"j d6d5� �Z"e d7d8� �Z#e#j d9d8� �Z#d:Z$d;Z%d<d=� Z&d>d?d@hZ'dAdB� Z(dCdD� Z)dEdF� Z*dGdH� Z+dIdJ� Z,dpdKdL�Z-dMdN� Z.dOdP� Z/dqdQdR�Z0dSdT� Z1drdUdV�Z2dWdX� Z3dsdYdZ�Z4d[d\� Z5e d]d^� �Z6d_d`� Z7dtdadb�Z8dcdd� Z9dedf� Z:� Z;S )u�Contexta Context for cryptographic operations
All cryptographic operations in GPGME are performed within a
context, which contains the internal state of the operation as
well as configuration parameters. By using several contexts you
can run several cryptographic operations in parallel, with
different configuration.
Access to a context must be synchronized.
FNc
sz |r d| _ n0tj� } ttj| �� tj| �}tj| � d| _ tt| �j |� || _
|| _ || _ || _
|| _|| _|| _dS )a Construct a context object
Keyword arguments:
armor -- enable ASCII armoring (default False)
textmode -- enable canonical text mode (default False)
offline -- do not contact external key sources (default False)
signers -- list of keys used for signing (default [])
pinentry_mode -- pinentry mode (default PINENTRY_MODE_DEFAULT)
protocol -- protocol to use (default PROTOCOL_OpenPGP)
home_dir -- state directory (default is the engine default)
FTN)�ownr Znew_gpgme_ctx_t_pr � gpgme_newZgpgme_ctx_t_p_valueZdelete_gpgme_ctx_t_pr rK r �armor�textmode�offline�signers�
pinentry_mode�protocol�home_dir)
r rN rO rP rQ rR rS r rT �tmp)r r r r � s
zContext.__init__c C s& |s |dkrdS |j dtj� |j� S )zxRead helper
Helper function to retrieve the results of an operation, or
None if SINK is given.
Nr )�seek�os�SEEK_SET�read)r �sink�datar r r �__read__� s zContext.__read__c C s
dj | �S )Nz�Context(armor={0.armor}, textmode={0.textmode}, offline={0.offline}, signers={0.signers}, pinentry_mode={0.pinentry_mode}, protocol={0.protocol}, home_dir={0.home_dir}))r )r r r r r � s zContext.__repr__Tc s� |r|nt � } d} | |tj O } | | tj O } | |tj O } | | tj O } | |
tj O } � dk r�| j}
t| dd�}tj | _d� fdd� }| j
|� z�y*|r�| j || || � n| j || || � W n� t
jk
�r| } z�| j� }|r�| j� nd}| j|| �||f}|j� t
jk�r.|j�r.t
j|j|j|d��|j� t
jk�rb| j� }|j�rbt
j|j|j|d��||_|�W Y dd}~X nX W d� dk �r�|
| _|�r�| j
|dd� � X | j� }|j �s�t�|�r�| j� nd}| �s�|j �s�t�| j|| �||fS ) a% Encrypt data
Encrypt the given plaintext for the given recipients. If the
list of recipients is empty, the data is encrypted
symmetrically with a passphrase.
The passphrase can be given as parameter, using a callback
registered at the context, or out-of-band via pinentry.
Keyword arguments:
recipients -- list of keys to encrypt to
sign -- sign plaintext (default True)
sink -- write result to sink instead of returning it
passphrase -- for symmetric encryption
always_trust -- always trust the keys (default False)
add_encrypt_to -- encrypt to configured additional keys (default False)
prepare -- (ui) prepare for encryption (default False)
expect_sign -- (ui) prepare for signing (default False)
compress -- compress plaintext (default True)
Returns:
ciphertext -- the encrypted data (or None if sink is given)
result -- additional information about the encryption
sign_result -- additional information about the signature(s)
Raises:
InvalidRecipients -- if encryption using a particular key failed
InvalidSigners -- if signing using a particular key failed
GPGMEError -- as signaled by the underlying library
r N�_passphrase_cbc s � S )Nr )�hint�desc�prev_bad�hook)�
passphraser r �
passphrase_cb( s z&Context.encrypt.<locals>.passphrase_cb)�error�resultsr )N) �Datar ZENCRYPT_ALWAYS_TRUSTZENCRYPT_NO_ENCRYPT_TOZENCRYPT_PREPAREZENCRYPT_EXPECT_SIGNZENCRYPT_NO_COMPRESSrR r �PINENTRY_MODE_LOOPBACK�set_passphrase_cbZop_encrypt_signZ
op_encryptr
r Zop_encrypt_result�op_sign_resultr\ �getcodeZUNUSABLE_PUBKEYZinvalid_recipientsZInvalidRecipientsrd �UNUSABLE_SECKEY�invalid_signers�InvalidSignersre �AssertionError)r � plaintextZ
recipients�signrZ rb Z always_trustZadd_encrypt_toZprepareZ expect_sign�compress�
ciphertextr �old_pinentry_mode�old_passphrase_cbrc �er; Z
sig_resultre r )rb r �encrypt� sZ *
zContext.encryptc s< d}d}|r|nt � }� dk rP| j}t| dd�} tj| _d� fdd� }
| j|
� z�yVt|t�rd|}n$|dkr�tj dt
d� d}n|}d}|r�| j ||� n | j ||� W nX t
jk
�r } z8| j� } |r�| j� }
nd}
| j||�| |
f| _| �W Y dd} ~ X nX W d� dk �r.|| _| �r.| j| d d� � X | j� } |�rH| j� }
nd}
| j||�| |
f}| j�rvt
j| j|d
��|�r8ttd d � |
j��|
_|dk �r8g }x�|D ]x}d}x\|jD ]R}xB|
jD ]8}|jtj@ d
k�rܐq�|j�r�|j |j k�r�d}P �q�W |�r�P �q�W |�s�|j |� �q�W |�r8t
j |
||d
��|S )a� Decrypt data
Decrypt the given ciphertext and verify any signatures. If
VERIFY is an iterable of keys, the ciphertext must be signed
by all those keys, otherwise a MissingSignatures error is
raised. Note: if VERIFY is an empty iterable, that is treated
the same as passing verify=True (that is, verify signatures
and return data about any valid signatures found, but no
signatures are required and no MissingSignatures error will be
raised).
If the ciphertext is symmetrically encrypted using a
passphrase, that passphrase can be given as parameter, using a
callback registered at the context, or out-of-band via
pinentry.
Keyword arguments:
sink -- write result to sink instead of returning it
passphrase -- for symmetric decryption
verify -- check signatures (boolean or iterable of keys,
see above) (default True)
Returns:
plaintext -- the decrypted data (or None if sink is given)
result -- additional information about the decryption
verify_result -- additional information about the valid
signature(s) found
Raises:
UnsupportedAlgorithm -- if an unsupported algorithm was used
MissingSignatures -- if expected signatures are missing or bad
GPGMEError -- as signaled by the underlying library
FNr] c s � S )Nr )r^ r_ r` ra )rb r r rc � s z&Context.decrypt.<locals>.passphrase_cbzTctx.decrypt called with verify=None, should be bool or iterable (treating as False).)�categoryTr )re c S s | j tjkS )N)�statusr
�NO_ERROR)�sr r r �<lambda>� s z!Context.decrypt.<locals>.<lambda>r )N) rf rR r r rg rh �
isinstancer, �warnings�warn�DeprecationWarningZop_decrypt_verifyZ
op_decryptr
r Zop_decrypt_result�op_verify_resultr\ re Zunsupported_algorithmZUnsupportedAlgorithm�list�filter�
signatures�subkeys�summary� SIGSUM_VALID�can_sign�fprr �MissingSignatures)r rr rZ rb �verifyZdo_sig_verificationZ
required_keysro rs rt rc ru r; Z
verify_resultre �missingr6 �ok�subkey�sigr )rb r �decryptT s| #
zContext.decryptc C s� |r|nt � }y| j|||� W nr tjk
r� } zT| j||�| j� f}|j� tjkrx|d jrxtj |d j|j
|d��||_ |�W Y dd}~X nX | j� }|j s�t �| j||�|fS )a Sign data
Sign the given data with either the configured default local
key, or the 'signers' keys of this context.
Keyword arguments:
mode -- signature mode (default: normal, see below)
sink -- write result to sink instead of returning it
Returns:
either
signed_data -- encoded data and signature (normal mode)
signature -- only the signature data (detached mode)
cleartext -- data and signature as text (cleartext mode)
(or None if sink is given)
result -- additional information about the signature(s)
Raises:
InvalidSigners -- if signing using a particular key failed
GPGMEError -- as signaled by the underlying library
r )rd re N)
rf Zop_signr
r r\ ri rj rk rl rm rd re rn )r r[ rZ �modeZ
signeddataru re r; r r r rp � s
z Context.signc
C sT |r
d}n|r|nt � }y&|r.| j||d� n| j|d|� W n> tjk
r| } z | j||�| j� f|_|�W Y dd}~X nX | j||�| j� f}tdd� |d jD ��r�tj |d |d��t
� }xr|D ]j} d}
xR| j D ]H} x<|d jD ].} | j t
j@ dkr�q�| jr�| j| jkr�d}
P q�W |
r�P q�W |
s�|j| � q�W |�rPtj|d ||d��|S ) a� Verify signatures
Verify signatures over data. If VERIFY is an iterable of
keys, the ciphertext must be signed by all those keys,
otherwise an error is raised.
Keyword arguments:
signature -- detached signature data
sink -- write result to sink instead of returning it
Returns:
data -- the plain data
(or None if sink is given, or we verified a detached signature)
result -- additional information about the signature(s)
Raises:
BadSignatures -- if a bad signature is encountered
MissingSignatures -- if expected signatures are missing or bad
GPGMEError -- as signaled by the underlying library
Nc s s | ]}|j tjkV qd S )N)rx r
ry )r rz r r r � <genexpr> s z!Context.verify.<locals>.<genexpr>r )re Fr T)rf Z op_verifyr
r r\ r� re �anyr� Z
BadSignaturesr� r� r� r r� r� r� r r� )
r Z signed_dataZ signaturerZ r� r[ ru re r� r6 r� r� r� r r r r� � s>
zContext.verifyc C s� y.| j |� | j� }|jdkr&tj}ntj}W n� tk
r� } zl|tjkrd|j dkr\tj
}q�tj }nB|t kr�t
|d�dkr�tj}n$|t kr�t
|d�dkr�tj }ntj}W Y dd}~X nX |tjkr�|}n|}|S )a� Import data
Imports the given data into the Context.
Returns:
-- an object describing the results of imported or updated
keys
Raises:
TypeError -- Very rarely.
GPGMEError -- as signaled by the underlying library:
Import status errors, when they occur, will usually
be of NODATA. NO_PUBKEY indicates something
managed to run the function without any
arguments, while an argument of None triggers
the first NODATA of errors.GPGME in the
exception.
r zNo data�decodeT�encodeN)Z op_importZop_import_resultZ
consideredr ZSTATUS_IMPORT_PROBLEMZSTATUS_KEY_CONSIDERED� Exceptionr
r Zcode_strZ
STATUS_NODATAZSTATUS_FILE_ERROR� TypeError�hasattrZSTATUS_NO_PUBKEYZ STATUS_ERROR)r r[ r; rx ru Z
import_resultr r r �
key_import3 s(
zContext.key_importc C st t � }d}y(| j|||� |jdtj� |j� }W n& tk
rX } z
|}W Y dd}~X nX t|�dkrl|}nd}|S )aQ Export keys.
Exports public keys matching the pattern specified. If no
pattern is specified then exports all available keys.
Keyword arguments:
pattern -- return keys matching pattern (default: all keys)
Returns:
-- A key block containing one or more OpenPGP keys in
either ASCII armoured or binary format as determined
by the Context(). If there are no matching keys it
returns None.
Raises:
GPGMEError -- as signaled by the underlying library.
r N)rf � op_exportrV rW rX rY r �len)r �patternr[ r� � pk_resultru r; r r r �
key_exportb s zContext.key_exportc C sv t � }tj}y(| j|||� |jdtj� |j� }W n& tk
rZ } z
|}W Y dd}~X nX t |�dkrn|}nd}|S )ay Export keys.
Exports public keys matching the pattern specified in a
minimised format. If no pattern is specified then exports all
available keys.
Keyword arguments:
pattern -- return keys matching pattern (default: all keys)
Returns:
-- A key block containing one or more minimised OpenPGP
keys in either ASCII armoured or binary format as
determined by the Context(). If there are no matching
keys it returns None.
Raises:
GPGMEError -- as signaled by the underlying library.
r N)
rf r ZGPGME_EXPORT_MODE_MINIMALr� rV rW rX rY r r� )r r� r[ r� r� ru r; r r r �key_export_minimal� s zContext.key_export_minimalc C sv t � }tj}y(| j|||� |jdtj� |j� }W n& tk
rZ } z
|}W Y dd}~X nX t |�dkrn|}nd}|S )a� Export secret keys.
Exports secret keys matching the pattern specified. If no
pattern is specified then exports or attempts to export all
available secret keys.
IMPORTANT: Each secret key to be exported will prompt for its
passphrase via an invocation of pinentry and gpg-agent. If the
passphrase is not entered or does not match then no data will be
exported. This is the same result as when specifying a pattern
that is not matched by the available keys.
Keyword arguments:
pattern -- return keys matching pattern (default: all keys)
Returns:
-- On success a key block containing one or more OpenPGP
secret keys in either ASCII armoured or binary format
as determined by the Context().
-- On failure while not raising an exception, returns None.
Raises:
GPGMEError -- as signaled by the underlying library.
r N)
rf r ZGPGME_EXPORT_MODE_SECRETr� rV rW rX rY r r� )r r� r[ r� Z sk_resultru r; r r r �key_export_secret� s zContext.key_export_secretc c sh |s | j |� | j||� n t|t�s0t|d�}| j|d� | j� }x|rZ|V | j� }qFW | j� dS )a List keys
Keyword arguments:
pattern -- return keys matching pattern (default: all keys)
secret -- return only secret keys (default: False)
mode -- keylist mode (default: list local keys)
source -- read keys from source instead from the keyring
(all other options are ignored in this case)
Returns:
-- an iterator returning key objects
Raises:
GPGMEError -- as signaled by the underlying library
)�filer N)Zset_keylist_mode�op_keylist_startr| rf Zop_keylist_from_data_start�op_keylist_next�op_keylist_end)r r� �secretr� �sourcer6 r r r �keylist� s
zContext.keylistr c s� t j� �r<| j} t| dd�} tj| _d� fdd� }
| j|
� z�| j||d|d|rXtjj nd|rftjj
ndB |rvtjj ndB |r�tjj ndB � dkr�tjj
ndB |r�dntjjB |
r�tjjndB � W dt j� �r�| | _| r�| j| dd� � X | j� S )a Create a primary key
Create a primary key for the user id USERID.
ALGORITHM may be used to specify the public key encryption
algorithm for the new key. By default, a reasonable default
is chosen. You may use "future-default" to select an
algorithm that will be the default in a future implementation
of the engine. ALGORITHM may be a string like "rsa", or
"rsa2048" to explicitly request an algorithm and a key size.
EXPIRES_IN specifies the expiration time of the key in number
of seconds since the keys creation. By default, a reasonable
expiration time is chosen. If you want to create a key that
does not expire, use the keyword argument EXPIRES.
SIGN, ENCRYPT, CERTIFY, and AUTHENTICATE can be used to
request the capabilities of the new key. If you don't request
any, a reasonable set of capabilities is selected, and in case
of OpenPGP, a subkey with a reasonable set of capabilities is
created.
If PASSPHRASE is None (the default), then the key will not be
protected with a passphrase. If PASSPHRASE is a string, it
will be used to protect the key. If PASSPHRASE is True, the
passphrase must be supplied using a passphrase callback or
out-of-band with a pinentry.
Keyword arguments:
algorithm -- public key algorithm, see above (default: reasonable)
expires_in -- expiration time in seconds (default: reasonable)
expires -- whether or not the key should expire (default: True)
sign -- request the signing capability (see above)
encrypt -- request the encryption capability (see above)
certify -- request the certification capability (see above)
authenticate -- request the authentication capability (see above)
passphrase -- protect the key with a passphrase (default: no
passphrase)
force -- force key creation even if a key with the same userid
exists (default: False)
Returns:
-- an object describing the result of the key creation
Raises:
GPGMEError -- as signaled by the underlying library
r] Nc s � S )Nr )r^ r_ r` ra )rb r r rc 5 s z)Context.create_key.<locals>.passphrase_cbr r )N)r � is_a_stringrR r r rg rh Z op_createkey�create�SIGN�ENCRZCERT�AUTH�NOPASSWD�NOEXPIREZFORCE�op_genkey_result)r Zuserid� algorithm�
expires_in�expiresrp rv Zcertify� authenticaterb �forcers rt rc r )rb r �
create_key� s( ;
b
zContext.create_keyc s� t j� �r<| j} t| dd�}
tj| _d� fdd� } | j| � zf| j||d||rVtjj nd|rdtjj
ndB |rttjj ndB � dkr�tjj ndB |r�dntjj
B � W dt j� �r�| | _|
r�| j|
dd� � X | j� S )a@ Create a subkey
Create a subkey for the given KEY. As subkeys are a concept
of OpenPGP, calling this is only valid for the OpenPGP
protocol.
ALGORITHM may be used to specify the public key encryption
algorithm for the new subkey. By default, a reasonable
default is chosen. You may use "future-default" to select an
algorithm that will be the default in a future implementation
of the engine. ALGORITHM may be a string like "rsa", or
"rsa2048" to explicitly request an algorithm and a key size.
EXPIRES_IN specifies the expiration time of the subkey in
number of seconds since the subkeys creation. By default, a
reasonable expiration time is chosen. If you want to create a
subkey that does not expire, use the keyword argument EXPIRES.
SIGN, ENCRYPT, and AUTHENTICATE can be used to request the
capabilities of the new subkey. If you don't request any, an
encryption subkey is generated.
If PASSPHRASE is None (the default), then the subkey will not
be protected with a passphrase. If PASSPHRASE is a string, it
will be used to protect the subkey. If PASSPHRASE is True,
the passphrase must be supplied using a passphrase callback or
out-of-band with a pinentry.
Keyword arguments:
algorithm -- public key algorithm, see above (default: reasonable)
expires_in -- expiration time in seconds (default: reasonable)
expires -- whether or not the subkey should expire (default: True)
sign -- request the signing capability (see above)
encrypt -- request the encryption capability (see above)
authenticate -- request the authentication capability (see above)
passphrase -- protect the subkey with a passphrase (default: no
passphrase)
Returns:
-- an object describing the result of the subkey creation
Raises:
GPGMEError -- as signaled by the underlying library
r] Nc s � S )Nr )r^ r_ r` ra )rb r r rc � s z,Context.create_subkey.<locals>.passphrase_cbr r )N)r r� rR r r rg rh Zop_createsubkeyr� r� r� r� r� r� r� ) r r6 r� r� r� rp rv r� rb rs rt rc r )rb r �
create_subkeyP s& 6
B
zContext.create_subkeyc C s | j ||d� dS )z�Add a UID
Add the uid UID to the given KEY. Calling this function is
only valid for the OpenPGP protocol.
Raises:
GPGMEError -- as signaled by the underlying library
r N)Z op_adduid)r r6 �uidr r r � key_add_uid� s
zContext.key_add_uidc C s | j ||d� dS )z�Revoke a UID
Revoke the uid UID from the given KEY. Calling this function
is only valid for the OpenPGP protocol.
Raises:
GPGMEError -- as signaled by the underlying library
r N)Z op_revuid)r r6 r� r r r �key_revoke_uid� s
zContext.key_revoke_uidc C sb d}|dks.t j|�rn|tjjO }dj|�}|s>|tjjO }|rN|tjjO }| j||||� dS )a� Sign a key
Sign a key with the current set of signing keys. Calling this
function is only valid for the OpenPGP protocol.
If UIDS is None (the default), then all UIDs are signed. If
it is a string, then only the matching UID is signed. If it
is a list of strings, then all matching UIDs are signed. Note
that a case-sensitive exact string comparison is done.
EXPIRES_IN specifies the expiration time of the signature in
seconds. If EXPIRES_IN is False, the signature does not
expire.
Keyword arguments:
uids -- user ids to sign, see above (default: sign all)
expires_in -- validity period of the signature in seconds
(default: do not expire)
local -- create a local, non-exportable signature
(default: False)
Raises:
GPGMEError -- as signaled by the underlying library
r N�
) r r� r ZkeysignZLFSEPr r� �LOCALZ
op_keysign)r r6 Zuidsr� Zlocalr r r r �key_sign� s
zContext.key_signc C s | j ||� dS )z�Set a keys' TOFU policy
Set the TOFU policy associated with KEY to POLICY. Calling
this function is only valid for the OpenPGP protocol.
Raises:
GPGMEError -- as signaled by the underlying library
N)Zop_tofu_policy)r r6 Zpolicyr r r �key_tofu_policy� s
zContext.key_tofu_policyc C s� t j|�st|t�r|}ndjdd� |D ��}tj� }tj| j||rRt j
| �|fnd|rft j
| �|fnd|rzt j
| �|fnd|�}| j r�tj | � t
|� tj|�}tj|� |dkr�t|�S dS )a� Issue a raw assuan command
This function can be used to issue a raw assuan command to the
engine.
If command is a string or bytes, it will be used as-is. If it
is an iterable of strings, it will be properly escaped and
joined into an well-formed assuan command.
Keyword arguments:
data_cb -- a callback receiving data lines
inquire_cb -- a callback providing more information
status_cb -- a callback receiving status lines
Returns:
result -- the result of command as GPGMEError
Raises:
GPGMEError -- as signaled by the underlying library
r c s s | ]}t j|�V qd S )N)r Zpercent_escape)r r r r r r� s z*Context.assuan_transact.<locals>.<genexpr>Nr )r r� r| �bytesr r �new_gpgme_error_t_pZ gpgme_op_assuan_transact_extr �weakref�refr
r9 r �gpgme_error_t_p_value�delete_gpgme_error_t_pr ) r ZcommandZdata_cbZ
inquire_cbZ status_cb�cmdZerrptr�errrx r r r �assuan_transact� s
zContext.assuan_transactc C sr |dkrt d��|dkr t� }|r4tj| �||f}ntj| �|f}tj| j||||�}| jrftj| � t |� dS )a� Interact with the engine
This method can be used to edit keys and cards interactively.
KEY is the key to edit, FUNC is called repeatedly with two
unicode arguments, 'keyword' and 'args'. See the GPGME manual
for details.
Keyword arguments:
sink -- if given, additional output is written here
flags -- use constants.INTERACT_CARD to edit a card
Raises:
GPGMEError -- as signaled by the underlying library
Nz First argument cannot be None)
�
ValueErrorrf r� r� r Zgpgme_op_interactr r
r9 r )r r6 r< rZ r � fnc_valueZ
opaquedatar; r r r �interact" s
zContext.interactc s � fdd�t � j� �D �S )zKeys used for signingc s g | ]}� j |��qS r )Z signers_enum)r �i)r r r r F s z#Context.signers.<locals>.<listcomp>)�rangeZ
signers_count)r r )r r rQ C s zContext.signersc C sD | j }| j� y x|D ]}| j|� qW W n || _ � Y nX d S )N)rQ Z
signers_clearZ signers_add)r rQ �oldr6 r r r rQ H s
c C s | j � S )z
Pinentry mode)Zget_pinentry_mode)r r r r rR S s zContext.pinentry_modec C s | j |� d S )N)Zset_pinentry_mode)r r0 r r r rR X s c C s | j � S )zProtocol to use)Z get_protocol)r r r r rS \ s zContext.protocolc C s t tj|�� | j|� d S )N)r r �gpgme_engine_check_versionZ set_protocol)r r0 r r r rS a s c C s | j jS )zEngine's home directory)� engine_inforT )r r r r rT f s zContext.home_dirc C s | j | j|d� d S )N)rT )�set_engine_inforS )r r0 r r r rT k s Z gpgme_ctx_tZgpgme_c C s |j d�r|jd� p |dkS )z?This function should list all functions returning gpgme_error_tZ gpgme_op_Z_resultrM �gpgme_set_ctx_flag�gpgme_set_protocol�gpgme_set_sub_protocol�gpgme_set_keylist_mode�gpgme_set_pinentry_mode�gpgme_set_locale�gpgme_ctx_set_engine_info�gpgme_signers_add�gpgme_sig_notation_add�gpgme_set_sender� gpgme_cancel�gpgme_cancel_async�
gpgme_get_key�gpgme_get_sig_key> r� r� r� r� r� r� rM r� r� r� r� r� r� r� r� )�
startswith�endswith)r r* r r r r+ r s
zContext._errorcheckrN rO rP c C sH t sd S | j� | j� | j� | jrD| jrDt jrDt j| j� d | _d S )N)r � _free_passcb�_free_progresscb�_free_statuscbrL r Z
gpgme_release)r r r r �__del__� s zContext.__del__c C s | S )Nr )r r r r � __enter__� s zContext.__enter__c C s | j � d S )N)r� )r �typer0 �tbr r r �__exit__� s zContext.__exit__c o s8 | j ||� | j� }x|r*|V | j� }qW | j� d S )N)r� r� r� )r r: �kwargsr6 r r r �op_keylist_all� s zContext.op_keylist_allc C s� t j� }y tt j| j|�� t j|�}W n: tjk
rb } z d}|j� tj krR|�W Y dd}~X nX t j
|� |r�dd� |_ |S dS )z~Returns the next key in the list created
by a call to op_keylist_start(). The object returned
is of type Key.Nc S s
t j| �S )N)r �gpgme_key_unref)r r r r r{ � s z)Context.op_keylist_next.<locals>.<lambda>) r �new_gpgme_key_t_pr Zgpgme_op_keylist_nextr �gpgme_key_t_p_valuer
r rj �EOF�delete_gpgme_key_t_pr� )r �ptrr6 �excpr r r r� � s
zContext.op_keylist_nextc C s� t j� }ytt j| j|||�� W n@ tjk
rb } z"|j� tjkrNtj |��|�W Y dd}~X nX t j
|�}t j |� |s�t �dd� |_
|S )a& Get a key given a fingerprint
Keyword arguments:
secret -- to request a secret key
Returns:
-- the matching key
Raises:
KeyError -- if the key was not found
GPGMEError -- as signaled by the underlying library
Nc S s
t j| �S )N)r r� )r r r r r{ � s z!Context.get_key.<locals>.<lambda>)r r� r r� r r
r rj r� Z KeyNotFoundr� r� rn r� )r r� r� r� ru r6 r r r �get_key� s
zContext.get_keyc o s8 | j ||� | j� }x|r*|V | j� }qW | j� d S )N)Zop_trustlist_start�op_trustlist_nextZop_trustlist_end)r r: r� �trustr r r �op_trustlist_all� s zContext.op_trustlist_allc C sp t j� }y tt j| j|�� t j|�}W n8 tjk
r` } zd}|j� tj krP� W Y dd}~X nX t j
|� |S )z�Returns the next trust item in the list created
by a call to op_trustlist_start(). The object returned
is of type TrustItem.N) r Znew_gpgme_trust_item_t_pr Zgpgme_op_trustlist_nextr Zgpgme_trust_item_t_p_valuer
r rj r� Zdelete_gpgme_trust_item_t_p)r r� r� r� r r r r� � s
zContext.op_trustlist_nextc C sF |dkrd}n(|dkr&t j| �|f}nt j| �||f}tj| |� dS )a* Sets the passphrase callback to the function specified by func.
When the system needs a passphrase, it will call func with three args:
hint, a string describing the key it needs the passphrase for;
desc, a string describing the passphrase it needs;
prev_bad, a boolean equal True if this is a call made after
unsuccessful previous attempt.
If hook has a value other than None it will be passed into the func
as a forth argument.
Please see the GPGME manual for more information.
N)r� r� r �gpg_set_passphrase_cb)r r< ra �hookdatar r r rh � s zContext.set_passphrase_cbc C s t jr| jd � d S )N)r r� rh )r r r r r� � s zContext._free_passcbc C sF |dkrd}n(|dkr&t j| �|f}nt j| �||f}tj| |� dS )a� Sets the progress meter callback to the function specified by FUNC.
If FUNC is None, the callback will be cleared.
This function will be called to provide an interactive update
of the system's progress. The function will be called with
three arguments, type, total, and current. If HOOK is not
None, it will be supplied as fourth argument.
Please see the GPGME manual for more information.
N)r� r� r �gpg_set_progress_cb)r r< ra r� r r r �set_progress_cb s zContext.set_progress_cbc C s t jr| jd � d S )N)r r� r� )r r r r r� s zContext._free_progresscbc C sF |dkrd}n(|dkr&t j| �|f}nt j| �||f}tj| |� dS )aP Sets the status callback to the function specified by FUNC. If
FUNC is None, the callback will be cleared.
The function will be called with two arguments, keyword and
args. If HOOK is not None, it will be supplied as third
argument.
Please see the GPGME manual for more information.
N)r� r� r �gpg_set_status_cb)r r< ra r� r r r �
set_status_cb s zContext.set_status_cbc C s t jr| jd � d S )N)r r� r� )r r r r r� - s zContext._free_statuscbc s4 | j � � fdd�| j� D �}t|�dks,t�|d S )z,Configuration of the engine currently in usec s g | ]}|j � kr|�qS r )rS )r r� )r7 r r r 5 s z'Context.engine_info.<locals>.<listcomp>r r )rS �get_engine_infor� rn )r Zinfosr )r7 r r� 1 s zContext.engine_infoc C s t j| j�S )z�Get engine configuration
Returns information about all configured and installed
engines.
Returns:
infos -- a list of engine infos
)r Zgpgme_ctx_get_engine_infor )r r r r r� 9 s
zContext.get_engine_infoc C s | j |||� dS )a6 Change engine configuration
Changes the configuration of the crypto engine implementing
the protocol 'proto' for the context.
Keyword arguments:
file_name -- engine program file name (unchanged if None)
home_dir -- configuration directory (unchanged if None)
N)Zctx_set_engine_info)r �proto� file_namerT r r r r� E s zContext.set_engine_infoc C s8 t j� }t j| j||� t j|�}t j|� t|� dS )z�Wait for asynchronous call to finish. Wait forever if hang is True.
Raises an exception on errors.
Please read the GPGME manual for more information.
N)r r� �
gpgme_waitr r� r� r )r �hangr� rx r r r �waitR s
z Context.waitc C s t jdtd� | j||||d�S )a� Start key editing using supplied callback function
Note: This interface is deprecated and will be removed with
GPGME 1.8. Please use .interact instead. Furthermore, we
implement this using gpgme_op_interact, so callbacks will get
called with string keywords instead of numeric status
messages. Code that is using constants.STATUS_X or
constants.status.X will continue to work, whereas code using
magic numbers will break as a result.
z"Call to deprecated method op_edit.)rw )rZ r� )r} r~ r r� )r r6 r< r� �outr r r �op_edit_ s
zContext.op_edit)NNT)N)N)N) Nr TFFFFNF)Nr TFFFN)NFF)NNN)Nr N)F)N)N)N)NN)<r rE rF r> r ZPINENTRY_MODE_DEFAULTZPROTOCOL_OpenPGPr r\ r rv r� ZSIG_MODE_NORMALrp r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r4 rQ �setterrR rS rT r( r) r+ r r� r� r� r� r� r� r� r� rh r� r� r� r� r� r� r� r� r� r rJ r r )r r rK � s� Y
v+>/
"
#
* #
S
K
)
.
!
rK c s� e Zd ZdZdZdZdd� Zd'� fdd � Zd
d � Zd d
� Z dd� Z
dd� Z dd� Z d(dd�Z
d)dd�Zd*dd�Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd,d%d&�Z� ZS )-rf aJ Data buffer
A lot of data has to be exchanged between the user and the crypto
engine, like plaintext messages, ciphertext, signatures and
information about the keys. The technical details about
exchanging the data information are completely abstracted by
GPGME. The user provides and receives the data via `gpgme_data_t'
objects, regardless of the communication protocol between GPGME
and the crypto engine in use.
This Data class is the implementation of the GpgmeData objects.
Please see the information about __init__ for instantiation.
Z gpgme_data_tZ gpgme_data_c
C s |d
kS ) z?This function should list all functions returning gpgme_error_t�gpgme_data_read�gpgme_data_write�gpgme_data_seek�gpgme_data_release� gpgme_data_release_and_get_mem�gpgme_data_get_encoding�gpgme_data_get_file_name�gpgme_data_set_flag�gpgme_data_identify> r r r r r r r r r
r )r r* r r r r+ � s zData._errorcheckNTc s� t t| �jd� d| _|dk r*| j|� nr|dk r@| j||� n\|dk rh|dk rh|dk rh| j|||� n4|dk r�tj|�r�| j ||� q�| j
|� n| j � dS )a� Initialize a new gpgme_data_t object.
If no args are specified, make it an empty object.
If string alone is specified, initialize it with the data
contained there.
If file, offset, and length are all specified, file must
be either a filename or a file-like object, and the object
will be initialized by reading the specified chunk from the file.
If cbs is specified, it MUST be a tuple of the form:
(read_cb, write_cb, seek_cb, release_cb[, hook])
where the first four items are functions implementing reading,
writing, seeking the data, and releasing any resources once
the data object is deallocated. The functions must match the
following prototypes:
def read(amount, hook=None):
return <a b"bytes" object>
def write(data, hook=None):
return <the number of bytes written>
def seek(offset, whence, hook=None):
return <the new file position>
def release(hook=None):
<return value and exceptions are ignored>
The functions may be bound methods. In that case, you can
simply use the 'self' reference instead of using a hook.
If file is specified without any other arguments, then
it must be a filename, and the object will be initialized from
that file.
N) r rf r Zdata_cbs� new_from_cbs� new_from_mem�new_from_filepartr r� �
new_from_file� new_from_fd�new)r �stringr� �offset�lengthZcbs�copy)r r r r � s /
z
Data.__init__c C sF t sd S | jd k r:t jr:t j| j� | jr4t j| � d | _| j� d S )N)r r r r
r9 �
_free_datacbs)r r r r r� � s
z Data.__del__c C s | S )Nr )r r r r r� � s zData.__enter__c C s | j � d S )N)r� )r r� r0 r� r r r r� � s z
Data.__exit__c C s
d | _ d S )N)Z _data_cbs)r r r r r � s zData._free_datacbsc C s0 t j� }tt j|�� t j|�| _t j|� d S )N)r �new_gpgme_data_t_pr Zgpgme_data_new�gpgme_data_t_p_valuer �delete_gpgme_data_t_p)r rU r r r r � s zData.newc C s: t j� }tt j||t|�|�� t j|�| _t j|� d S )N)r r r Zgpgme_data_new_from_memr� r r r )r r r rU r r r r
� s
zData.new_from_memc C s� t j� }ytt j|||�� W nF tjk
rd } z(|j� tjkrP| rPtd��n|�W Y d d }~X nX t j |�| _
t j |� d S )Nz#delayed reads are not yet supported) r r r Zgpgme_data_new_from_filer
r rj Z INV_VALUEr� r r r )r �filenamer rU ru r r r r � s
zData.new_from_filec C sd t j� }|d k r(tj| �|||||f}ntj| �||||f}t j| ||� t j|�| _t j|� d S )N)r r r� r� Zgpg_data_new_from_cbsr r r )r Zread_cbZwrite_cbZseek_cbZ
release_cbra rU r� r r r r s
zData.new_from_cbsc C s� t j� }d}d}tj|�r |}n6t j|j� |j�}|dkrVtdtt |��t|�f ��t
t j |||||�� t j |�| _
t j|� dS )z�This wraps the GPGME gpgme_data_new_from_filepart() function.
The argument "file" may be:
* a string specifying a file name, or
* a file-like object supporting the fileno() and the mode attribute.
Nz"Failed to open file from %s arg %s)r r r r� �fdopen�filenor� r� �strr� r Z gpgme_data_new_from_filepartr r r )r r� r r rU r �fpr r r r s
zData.new_from_filepartc C s6 t j� }tt j||j� �� t j|�| _t j|� dS )z�This wraps the GPGME gpgme_data_new_from_fd() function. The
argument "file" must be a file-like object, supporting the
fileno() method.
N)r r r Zgpgme_data_new_from_fdr r r r )r r� rU r r r r - s zData.new_from_fdc C s | j |� dS )z�This wrap around gpgme_data_new_from_stream is an alias for
new_from_fd() method since in python there's no difference
between file stream and file descriptor.N)r )r r� r r r �new_from_stream8 s zData.new_from_streamc C s | j |� dS )z�This wrap around gpgme_data_new_from_estream is an alias for
new_from_fd() method since in python there's no difference
between file stream and file descriptor, but using fd broke.N)r )r r� r r r �new_from_estream> s zData.new_from_estreamc C s4 t j| j|�}|dk r0| jr(t j| � ntj� �|S )zkWrite buffer given as string or bytes.
If a string is given, it is implicitly encoded using UTF-8.r )r r r r
r9 r Z fromSyserror)r �bufferZwrittenr r r �writeD s z
Data.writer c C s� |dkr dS |dkrLyt j| j|�}W n | jr@t j| � n� Y nX |S g }xPyt j| jd�}W n | jr~t j| � n� Y nX t|�dkr�P |j|� qRW dj|�S dS )z�Read at most size bytes, returned as bytes.
If the size argument is negative or omitted, read until EOF is reached.
Returns the data read, or the empty string if there was no data
to read before EOF was reached.r � i � N)r r r r
r9 r� r r )r �sizer; Zchunksr r r rY P s, z Data.read)NNNNNT)T)T)N���)r& )r rE rF r> r( r) r+ r r� r� r� r r r
r r r r r r r" rY rJ r r )r r rf p s0 :
rf c C s
t j| �S )z�Return short algorithm string
Return a public key algorithm string (e.g. "rsa2048") for a given
SUBKEY.
Returns:
algo - a string
)r Zgpgme_pubkey_algo_string)r� r r r �pubkey_algo_stringt s
r' c C s
t j| �S )z�Return name of public key algorithm
Return the name of the public key algorithm for a given numeric
algorithm id ALGO (cf. RFC4880).
Returns:
algo - a string
)r Zgpgme_pubkey_algo_name)�algor r r �pubkey_algo_name� s
r) c C s
t j| �S )z�Return name of hash algorithm
Return the name of the hash algorithm for a given numeric
algorithm id ALGO (cf. RFC4880).
Returns:
algo - a string
)r Zgpgme_hash_algo_name)r( r r r �hash_algo_name� s
r* c C s
t j| �S )ztGet protocol description
Get the string describing protocol PROTO.
Returns:
proto - a string
)r Zgpgme_get_protocol_name)r� r r r �get_protocol_name� s r+ c C s
t j| �S )z�Return the address spec
Return the addr-spec (cf. RFC2822 section 4.3) from a user id UID.
Returns:
addr_spec - a string
)r Zgpgme_addrspec_from_uid)r� r r r �addrspec_from_uid� s r, c C s
t j| �S )N)r Zgpgme_check_version)�versionr r r �
check_version� s r. c C s. yt tj| �� dS tjk
r( dS X d S )NTF)r r r� r
r )r� r r r �engine_check_version� s
r/ c C sN t j� } y tt j| �� t j| �}W n tjk
r> d }Y nX t j| � |S )N)r Znew_gpgme_engine_info_t_pr Zgpgme_get_engine_infoZgpgme_engine_info_t_p_valuer
r Z delete_gpgme_engine_info_t_p)r� �infor r r r� � s
r� c C s t tj| ||�� dS )a# Changes the default configuration of the crypto engine implementing
the protocol 'proto'. 'file_name' is the file name of
the executable program implementing this protocol. 'home_dir' is the
directory name of the configuration directory (engine's default is
used if omitted).N)r r Zgpgme_set_engine_info)r� r� rT r r r r� � s r� c C s t tjd| |�� dS )z(Sets the default locale used by contextsN)r r r� )rw r0 r r r �
set_locale� s r1 c C sL t j� }t jd|| �}t j|�}t j|� |dkr<t|� nt|�}||fS )aF Wait for asynchronous call on any Context to finish.
Wait forever if hang is True.
For finished anynch calls it returns a tuple (status, context):
status - status return by asnynchronous call.
context - context which caused this call to return.
Please read the GPGME manual of more information.N)r r� r� r� r� r rK )r� r� �contextrx r r r r� � s
r� )N)N) Z
__future__r r r rH rW r} r� r# r r
r r r r �objectr rK rf r' r) r* r+ r, r. r/ r� r� r1 r� r r r r �<module> sJ M