1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
|
package deb // import "pault.ag/go/debian/deb"
import (
"fmt"
"io"
"strings"
"golang.org/x/crypto/openpgp"
)
const (
SigTypeArchive = `archive`
SigTypeMaint = `maint`
SigTypeOrigin = `origin`
)
func (deb *Deb) CheckDebsig(validKeys openpgp.EntityList, sigType string) (signer *openpgp.Entity, err error) {
sig, ok := deb.ArContent[`_gpg`+sigType]
if !ok {
return nil, fmt.Errorf("no signature of type %v present", sigType)
}
binaryFlag, ok := deb.ArContent[`debian-binary`]
if !ok {
return nil, fmt.Errorf("archive does not contain a debian-binary flag")
}
var control, data *ArEntry
for _, member := range deb.ArContent {
if strings.HasPrefix(member.Name, "control.") {
control = member
if data != nil {
break
}
} else if strings.HasPrefix(member.Name, "data.") {
data = member
if control != nil {
break
}
}
}
if control == nil || data == nil {
return nil, fmt.Errorf("unable to find signed data")
}
binaryFlag.Data.Seek(0, 0)
control.Data.Seek(0, 0)
data.Data.Seek(0, 0)
signedData := io.MultiReader(binaryFlag.Data, control.Data, data.Data)
return openpgp.CheckDetachedSignature(validKeys, signedData, sig.Data)
}
|
