32a16dcd8d
Add check for public keys of all message recipients (to, cc, and bcc) before sending the message. Adds an OnFocusLost callback to header editors to facilitate a callback for checking keys whenever a new recipient is added (OnChange results in too many keyring checks). Once encryption is initially set, the callbacks are registered. If a public key is not available for any recipient, encryption is turned off. However, notably, the callbacks are still registered meaning as s soon as the user removes the recipients with missing keys, encryption is turned back on. Signed-off-by: Tim Culverhouse <tim@timculverhouse.com> Tested-by: Koni Marti <koni.marti@gmail.com>
70 lines
1.7 KiB
Go
70 lines
1.7 KiB
Go
package gpg
|
|
|
|
import (
|
|
"bytes"
|
|
"io"
|
|
"log"
|
|
"os/exec"
|
|
|
|
"git.sr.ht/~rjarry/aerc/lib/crypto/gpg/gpgbin"
|
|
"git.sr.ht/~rjarry/aerc/models"
|
|
"github.com/ProtonMail/go-crypto/openpgp"
|
|
"github.com/emersion/go-message/mail"
|
|
)
|
|
|
|
// Mail satisfies the PGPProvider interface in aerc
|
|
type Mail struct {
|
|
logger *log.Logger
|
|
}
|
|
|
|
func (m *Mail) Init(l *log.Logger) error {
|
|
m.logger = l
|
|
_, err := exec.LookPath("gpg")
|
|
return err
|
|
}
|
|
|
|
func (m *Mail) Decrypt(r io.Reader, decryptKeys openpgp.PromptFunction) (*models.MessageDetails, error) {
|
|
gpgReader, err := Read(r)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
md := gpgReader.MessageDetails
|
|
md.SignatureValidity = models.Valid
|
|
if md.SignatureError != "" {
|
|
md.SignatureValidity = handleSignatureError(md.SignatureError)
|
|
}
|
|
return md, nil
|
|
}
|
|
|
|
func (m *Mail) ImportKeys(r io.Reader) error {
|
|
return gpgbin.Import(r)
|
|
}
|
|
|
|
func (m *Mail) Encrypt(buf *bytes.Buffer, rcpts []string, signer string, decryptKeys openpgp.PromptFunction, header *mail.Header) (io.WriteCloser, error) {
|
|
|
|
return Encrypt(buf, header.Header.Header, rcpts, signer)
|
|
}
|
|
|
|
func (m *Mail) Sign(buf *bytes.Buffer, signer string, decryptKeys openpgp.PromptFunction, header *mail.Header) (io.WriteCloser, error) {
|
|
return Sign(buf, header.Header.Header, signer)
|
|
}
|
|
|
|
func (m *Mail) Close() {}
|
|
|
|
func (m *Mail) GetSignerKeyId(s string) (string, error) {
|
|
return gpgbin.GetPrivateKeyId(s)
|
|
}
|
|
|
|
func (m *Mail) GetKeyId(s string) (string, error) {
|
|
return gpgbin.GetKeyId(s)
|
|
}
|
|
|
|
func handleSignatureError(e string) models.SignatureValidity {
|
|
if e == "gpg: missing public key" {
|
|
return models.UnknownEntity
|
|
}
|
|
if e == "gpg: header hash does not match actual sig hash" {
|
|
return models.MicalgMismatch
|
|
}
|
|
return models.UnknownValidity
|
|
}
|