mirror of
https://github.com/scm-manager/scm-manager.git
synced 2026-03-06 20:30:52 +01:00
118 lines
3.9 KiB
Java
118 lines
3.9 KiB
Java
/*
|
|
* MIT License
|
|
*
|
|
* Copyright (c) 2020-present Cloudogu GmbH and Contributors
|
|
*
|
|
* Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
* of this software and associated documentation files (the "Software"), to deal
|
|
* in the Software without restriction, including without limitation the rights
|
|
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
* copies of the Software, and to permit persons to whom the Software is
|
|
* furnished to do so, subject to the following conditions:
|
|
*
|
|
* The above copyright notice and this permission notice shall be included in all
|
|
* copies or substantial portions of the Software.
|
|
*
|
|
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
* SOFTWARE.
|
|
*/
|
|
|
|
package sonia.scm.security.gpg;
|
|
|
|
import lombok.Value;
|
|
import org.bouncycastle.openpgp.PGPException;
|
|
import org.bouncycastle.openpgp.PGPPrivateKey;
|
|
import org.bouncycastle.openpgp.PGPPublicKey;
|
|
import org.bouncycastle.openpgp.PGPPublicKeyRing;
|
|
import org.bouncycastle.openpgp.PGPPublicKeyRingCollection;
|
|
import org.bouncycastle.openpgp.PGPUtil;
|
|
import org.bouncycastle.openpgp.operator.KeyFingerPrintCalculator;
|
|
import org.bouncycastle.openpgp.operator.jcajce.JcaKeyFingerprintCalculator;
|
|
|
|
import java.io.ByteArrayInputStream;
|
|
import java.io.IOException;
|
|
import java.io.InputStream;
|
|
import java.nio.charset.StandardCharsets;
|
|
import java.util.ArrayList;
|
|
import java.util.Collections;
|
|
import java.util.HashSet;
|
|
import java.util.List;
|
|
import java.util.Locale;
|
|
import java.util.Set;
|
|
import java.util.function.Function;
|
|
|
|
@Value
|
|
final class Keys {
|
|
|
|
private static final KeyFingerPrintCalculator calculator = new JcaKeyFingerprintCalculator();
|
|
|
|
private final String master;
|
|
private final Set<String> subs;
|
|
|
|
private Keys(String master, Set<String> subs) {
|
|
this.master = master;
|
|
this.subs = subs;
|
|
}
|
|
|
|
static Keys resolve(String raw) {
|
|
return resolve(raw, Keys::collectKeys);
|
|
}
|
|
|
|
static Keys resolve(String raw, Function<String, List<PGPPublicKey>> parser) {
|
|
List<PGPPublicKey> parsedKeys = parser.apply(raw);
|
|
|
|
String master = null;
|
|
Set<String> subs = new HashSet<>();
|
|
|
|
for (PGPPublicKey key : parsedKeys) {
|
|
if (key.isMasterKey()) {
|
|
if (master != null) {
|
|
throw new IllegalArgumentException("Found more than one master key");
|
|
}
|
|
master = createId(key);
|
|
} else {
|
|
subs.add(createId(key));
|
|
}
|
|
}
|
|
|
|
if (master == null) {
|
|
throw new IllegalArgumentException("No master key found");
|
|
}
|
|
|
|
return new Keys(master, Collections.unmodifiableSet(subs));
|
|
}
|
|
|
|
static String createId(PGPPublicKey pgpPublicKey) {
|
|
return formatKey(pgpPublicKey.getKeyID());
|
|
}
|
|
|
|
static String createId(PGPPrivateKey pgpPrivateKey) {
|
|
return formatKey(pgpPrivateKey.getKeyID());
|
|
}
|
|
|
|
static String formatKey(long keyId) {
|
|
return "0x" + Long.toHexString(keyId).toUpperCase(Locale.ENGLISH);
|
|
}
|
|
|
|
private static List<PGPPublicKey> collectKeys(String rawKey) {
|
|
try {
|
|
List<PGPPublicKey> publicKeys = new ArrayList<>();
|
|
InputStream decoderStream = PGPUtil.getDecoderStream(new ByteArrayInputStream(rawKey.getBytes(StandardCharsets.UTF_8)));
|
|
PGPPublicKeyRingCollection collection = new PGPPublicKeyRingCollection(decoderStream, calculator);
|
|
for (PGPPublicKeyRing pgpPublicKeys : collection) {
|
|
for (PGPPublicKey pgpPublicKey : pgpPublicKeys) {
|
|
publicKeys.add(pgpPublicKey);
|
|
}
|
|
}
|
|
return publicKeys;
|
|
} catch (IOException | PGPException ex) {
|
|
throw new GPGException("Failed to collect public keys", ex);
|
|
}
|
|
}
|
|
}
|