func pgpDecryptClearsign(source io.Reader, sink io.Writer, kr openpgp.KeyRing) (*SignatureStatus, error) {
// clearsign decode only works with the whole data slice, not a reader
// so have to read it all here:
msg, err := ioutil.ReadAll(source)
if err != nil {
return nil, err
}
b, _ := clearsign.Decode(msg)
if b == nil {
return nil, fmt.Errorf("Unable to decode clearsigned message")
}
signer, err := openpgp.CheckDetachedSignature(kr, bytes.NewReader(b.Bytes), b.ArmoredSignature.Body)
if err != nil {
return nil, fmt.Errorf("Check sig error: %s", err)
}
n, err := io.Copy(sink, bytes.NewReader(b.Plaintext))
if err != nil {
return nil, err
}
G.Log.Debug("PGPDecrypt: copied %d bytes to writer", n)
var status SignatureStatus
if signer == nil {
return &status, nil
}
status.IsSigned = true
status.Verified = true
status.Entity = signer
return &status, nil
}
// runClearsign verifies a clearsign signature
func (e *PGPVerify) runClearsign(ctx *Context) error {
// clearsign decode only works with the whole data slice, not a reader
// so have to read it all here:
msg, err := ioutil.ReadAll(e.peek)
if err != nil {
return err
}
b, _ := clearsign.Decode(msg)
if b == nil {
return errors.New("Unable to decode clearsigned message")
}
sigBody, err := ioutil.ReadAll(b.ArmoredSignature.Body)
if err != nil {
return err
}
sk, err := NewScanKeys(ctx.SecretUI, ctx.IdentifyUI, &e.arg.TrackOptions, e.G())
if err != nil {
return err
}
signer, err := openpgp.CheckDetachedSignature(sk, bytes.NewReader(b.Bytes), bytes.NewReader(sigBody))
if err != nil {
return fmt.Errorf("Check sig error: %s", err)
}
e.owner = sk.Owner()
e.signStatus = &libkb.SignatureStatus{IsSigned: true}
if signer != nil {
e.signStatus.Verified = true
e.signStatus.Entity = signer
if err := e.checkSignedBy(ctx); err != nil {
return err
}
p, err := packet.Read(bytes.NewReader(sigBody))
if err != nil {
return err
}
if val, ok := p.(*packet.Signature); ok {
e.signStatus.SignatureTime = val.CreationTime
}
fingerprint := libkb.PGPFingerprint(signer.PrimaryKey.Fingerprint)
OutputSignatureSuccess(ctx, fingerprint, sk.Owner(), e.signStatus.SignatureTime)
}
return nil
}
