summaryrefslogtreecommitdiffstats
path: root/models/gpg_key.go
diff options
context:
space:
mode:
authorLunny Xiao <xiaolunwen@gmail.com>2021-12-10 16:14:24 +0800
committerGitHub <noreply@github.com>2021-12-10 16:14:24 +0800
commit3ca5dc7e32b372d14ff80d96f14b8f6a805862f1 (patch)
tree50d193ed0dacf2888d57b193a9b0d36065aff205 /models/gpg_key.go
parent0a9fcf63a49799ad3b0f146c54879161bac61e10 (diff)
downloadgitea-3ca5dc7e32b372d14ff80d96f14b8f6a805862f1.tar.gz
gitea-3ca5dc7e32b372d14ff80d96f14b8f6a805862f1.zip
Move keys to models/asymkey (#17917)
* Move keys to models/keys * Rename models/keys -> models/asymkey * change the missed package name * Fix package alias * Fix test * Fix docs * Fix test * Fix test * merge
Diffstat (limited to 'models/gpg_key.go')
-rw-r--r--models/gpg_key.go272
1 files changed, 0 insertions, 272 deletions
diff --git a/models/gpg_key.go b/models/gpg_key.go
deleted file mode 100644
index ce27a9237e..0000000000
--- a/models/gpg_key.go
+++ /dev/null
@@ -1,272 +0,0 @@
-// Copyright 2017 The Gitea Authors. All rights reserved.
-// Use of this source code is governed by a MIT-style
-// license that can be found in the LICENSE file.
-
-package models
-
-import (
- "fmt"
- "strings"
- "time"
-
- "code.gitea.io/gitea/models/db"
- user_model "code.gitea.io/gitea/models/user"
- "code.gitea.io/gitea/modules/log"
- "code.gitea.io/gitea/modules/timeutil"
-
- "github.com/keybase/go-crypto/openpgp"
- "github.com/keybase/go-crypto/openpgp/packet"
- "xorm.io/xorm"
-)
-
-// __________________ ________ ____ __.
-// / _____/\______ \/ _____/ | |/ _|____ ___.__.
-// / \ ___ | ___/ \ ___ | <_/ __ < | |
-// \ \_\ \| | \ \_\ \ | | \ ___/\___ |
-// \______ /|____| \______ / |____|__ \___ > ____|
-// \/ \/ \/ \/\/
-
-// GPGKey represents a GPG key.
-type GPGKey struct {
- ID int64 `xorm:"pk autoincr"`
- OwnerID int64 `xorm:"INDEX NOT NULL"`
- KeyID string `xorm:"INDEX CHAR(16) NOT NULL"`
- PrimaryKeyID string `xorm:"CHAR(16)"`
- Content string `xorm:"TEXT NOT NULL"`
- CreatedUnix timeutil.TimeStamp `xorm:"created"`
- ExpiredUnix timeutil.TimeStamp
- AddedUnix timeutil.TimeStamp
- SubsKey []*GPGKey `xorm:"-"`
- Emails []*user_model.EmailAddress
- Verified bool `xorm:"NOT NULL DEFAULT false"`
- CanSign bool
- CanEncryptComms bool
- CanEncryptStorage bool
- CanCertify bool
-}
-
-func init() {
- db.RegisterModel(new(GPGKey))
-}
-
-// BeforeInsert will be invoked by XORM before inserting a record
-func (key *GPGKey) BeforeInsert() {
- key.AddedUnix = timeutil.TimeStampNow()
-}
-
-// AfterLoad is invoked from XORM after setting the values of all fields of this object.
-func (key *GPGKey) AfterLoad(session *xorm.Session) {
- err := session.Where("primary_key_id=?", key.KeyID).Find(&key.SubsKey)
- if err != nil {
- log.Error("Find Sub GPGkeys[%s]: %v", key.KeyID, err)
- }
-}
-
-// ListGPGKeys returns a list of public keys belongs to given user.
-func ListGPGKeys(uid int64, listOptions db.ListOptions) ([]*GPGKey, error) {
- return listGPGKeys(db.GetEngine(db.DefaultContext), uid, listOptions)
-}
-
-func listGPGKeys(e db.Engine, uid int64, listOptions db.ListOptions) ([]*GPGKey, error) {
- sess := e.Table(&GPGKey{}).Where("owner_id=? AND primary_key_id=''", uid)
- if listOptions.Page != 0 {
- sess = db.SetSessionPagination(sess, &listOptions)
- }
-
- keys := make([]*GPGKey, 0, 2)
- return keys, sess.Find(&keys)
-}
-
-// CountUserGPGKeys return number of gpg keys a user own
-func CountUserGPGKeys(userID int64) (int64, error) {
- return db.GetEngine(db.DefaultContext).Where("owner_id=? AND primary_key_id=''", userID).Count(&GPGKey{})
-}
-
-// GetGPGKeyByID returns public key by given ID.
-func GetGPGKeyByID(keyID int64) (*GPGKey, error) {
- key := new(GPGKey)
- has, err := db.GetEngine(db.DefaultContext).ID(keyID).Get(key)
- if err != nil {
- return nil, err
- } else if !has {
- return nil, ErrGPGKeyNotExist{keyID}
- }
- return key, nil
-}
-
-// GetGPGKeysByKeyID returns public key by given ID.
-func GetGPGKeysByKeyID(keyID string) ([]*GPGKey, error) {
- keys := make([]*GPGKey, 0, 1)
- return keys, db.GetEngine(db.DefaultContext).Where("key_id=?", keyID).Find(&keys)
-}
-
-// GPGKeyToEntity retrieve the imported key and the traducted entity
-func GPGKeyToEntity(k *GPGKey) (*openpgp.Entity, error) {
- impKey, err := GetGPGImportByKeyID(k.KeyID)
- if err != nil {
- return nil, err
- }
- keys, err := checkArmoredGPGKeyString(impKey.Content)
- if err != nil {
- return nil, err
- }
- return keys[0], err
-}
-
-// parseSubGPGKey parse a sub Key
-func parseSubGPGKey(ownerID int64, primaryID string, pubkey *packet.PublicKey, expiry time.Time) (*GPGKey, error) {
- content, err := base64EncPubKey(pubkey)
- if err != nil {
- return nil, err
- }
- return &GPGKey{
- OwnerID: ownerID,
- KeyID: pubkey.KeyIdString(),
- PrimaryKeyID: primaryID,
- Content: content,
- CreatedUnix: timeutil.TimeStamp(pubkey.CreationTime.Unix()),
- ExpiredUnix: timeutil.TimeStamp(expiry.Unix()),
- CanSign: pubkey.CanSign(),
- CanEncryptComms: pubkey.PubKeyAlgo.CanEncrypt(),
- CanEncryptStorage: pubkey.PubKeyAlgo.CanEncrypt(),
- CanCertify: pubkey.PubKeyAlgo.CanSign(),
- }, nil
-}
-
-// parseGPGKey parse a PrimaryKey entity (primary key + subs keys + self-signature)
-func parseGPGKey(ownerID int64, e *openpgp.Entity, verified bool) (*GPGKey, error) {
- pubkey := e.PrimaryKey
- expiry := getExpiryTime(e)
-
- // Parse Subkeys
- subkeys := make([]*GPGKey, len(e.Subkeys))
- for i, k := range e.Subkeys {
- subs, err := parseSubGPGKey(ownerID, pubkey.KeyIdString(), k.PublicKey, expiry)
- if err != nil {
- return nil, ErrGPGKeyParsing{ParseError: err}
- }
- subkeys[i] = subs
- }
-
- // Check emails
- userEmails, err := user_model.GetEmailAddresses(ownerID)
- if err != nil {
- return nil, err
- }
-
- emails := make([]*user_model.EmailAddress, 0, len(e.Identities))
- for _, ident := range e.Identities {
- if ident.Revocation != nil {
- continue
- }
- email := strings.ToLower(strings.TrimSpace(ident.UserId.Email))
- for _, e := range userEmails {
- if e.IsActivated && e.LowerEmail == email {
- emails = append(emails, e)
- break
- }
- }
- }
-
- if !verified {
- // In the case no email as been found
- if len(emails) == 0 {
- failedEmails := make([]string, 0, len(e.Identities))
- for _, ident := range e.Identities {
- failedEmails = append(failedEmails, ident.UserId.Email)
- }
- return nil, ErrGPGNoEmailFound{failedEmails, e.PrimaryKey.KeyIdString()}
- }
- }
-
- content, err := base64EncPubKey(pubkey)
- if err != nil {
- return nil, err
- }
- return &GPGKey{
- OwnerID: ownerID,
- KeyID: pubkey.KeyIdString(),
- PrimaryKeyID: "",
- Content: content,
- CreatedUnix: timeutil.TimeStamp(pubkey.CreationTime.Unix()),
- ExpiredUnix: timeutil.TimeStamp(expiry.Unix()),
- Emails: emails,
- SubsKey: subkeys,
- Verified: verified,
- CanSign: pubkey.CanSign(),
- CanEncryptComms: pubkey.PubKeyAlgo.CanEncrypt(),
- CanEncryptStorage: pubkey.PubKeyAlgo.CanEncrypt(),
- CanCertify: pubkey.PubKeyAlgo.CanSign(),
- }, nil
-}
-
-// deleteGPGKey does the actual key deletion
-func deleteGPGKey(e db.Engine, keyID string) (int64, error) {
- if keyID == "" {
- return 0, fmt.Errorf("empty KeyId forbidden") // Should never happen but just to be sure
- }
- // Delete imported key
- n, err := e.Where("key_id=?", keyID).Delete(new(GPGKeyImport))
- if err != nil {
- return n, err
- }
- return e.Where("key_id=?", keyID).Or("primary_key_id=?", keyID).Delete(new(GPGKey))
-}
-
-// DeleteGPGKey deletes GPG key information in database.
-func DeleteGPGKey(doer *user_model.User, id int64) (err error) {
- key, err := GetGPGKeyByID(id)
- if err != nil {
- if IsErrGPGKeyNotExist(err) {
- return nil
- }
- return fmt.Errorf("GetPublicKeyByID: %v", err)
- }
-
- // Check if user has access to delete this key.
- if !doer.IsAdmin && doer.ID != key.OwnerID {
- return ErrGPGKeyAccessDenied{doer.ID, key.ID}
- }
-
- ctx, committer, err := db.TxContext()
- if err != nil {
- return err
- }
- defer committer.Close()
-
- if _, err = deleteGPGKey(db.GetEngine(ctx), key.KeyID); err != nil {
- return err
- }
-
- return committer.Commit()
-}
-
-func checkKeyEmails(email string, keys ...*GPGKey) (bool, string) {
- uid := int64(0)
- var userEmails []*user_model.EmailAddress
- var user *user_model.User
- for _, key := range keys {
- for _, e := range key.Emails {
- if e.IsActivated && (email == "" || strings.EqualFold(e.Email, email)) {
- return true, e.Email
- }
- }
- if key.Verified && key.OwnerID != 0 {
- if uid != key.OwnerID {
- userEmails, _ = user_model.GetEmailAddresses(key.OwnerID)
- uid = key.OwnerID
- user = &user_model.User{ID: uid}
- _, _ = user_model.GetUser(user)
- }
- for _, e := range userEmails {
- if e.IsActivated && (email == "" || strings.EqualFold(e.Email, email)) {
- return true, e.Email
- }
- }
- if user.KeepEmailPrivate && strings.EqualFold(email, user.GetEmail()) {
- return true, user.GetEmail()
- }
- }
- }
- return false, email
-}