tests/run-export.c - master - githubmirror/gpgme

tests/run-export.c
264 строки7 KB
Ingo Klöcker
Allow setting export filters when exporting keys
14 янв 2026, 18:09
14 янв 2026, 18:091823e06
/* pgp-export.c  - Helper to run an export command
 * Copyright (C) 2008, 2009 g10 Code GmbH
 *
 * This file is part of GPGME.
 *
 * GPGME is free software; you can redistribute it and/or modify it
 * under the terms of the GNU Lesser General Public License as
 * published by the Free Software Foundation; either version 2.1 of
 * the License, or (at your option) any later version.
 *
 * GPGME is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this program; if not, see <https://gnu.org/licenses/>.
 * SPDX-License-Identifier: LGPL-2.1-or-later
 */

/* We need to include config.h so that we know whether we are building
   with large file system (LFS) support. */
#ifdef HAVE_CONFIG_H
#include <config.h>
#endif

#include <stdlib.h>
#include <stdio.h>
#include <string.h>

#include <gpgme.h>

#define PGM "run-export"

#include "run-support.h"


static int verbose;


static gpg_error_t
status_cb (void *opaque, const char *keyword, const char *value)
{
  (void)opaque;
  fprintf (stderr, "status_cb: %s %s\n", keyword, value);
  return 0;
}


static int
show_usage (int ex)
{
  fputs ("usage: " PGM " [options] USERIDS\n\n"
         "Options:\n"
         "  --verbose        run in verbose mode\n"
         "  --status         print status lines from the backend\n"
         "  --openpgp        use OpenPGP protocol (default)\n"
         "  --cms            use X.509 protocol\n"
         "  --ssh            export as ssh public key\n"
         "  --extern         send keys to the keyserver (TAKE CARE!)\n"
         "  --secret         export secret keys instead of public keys\n"
         "  --secret-subkey  export secret subkeys instead of public keys\n"
         "  --raw            use PKCS#1 as secret key format\n"
         "  --pkcs12         use PKCS#12 as secret key format\n"
         "  --export-filter  use the specified export filter\n"
         , stderr);
  exit (ex);
}

int
main (int argc, char **argv)
{
  int last_argc = -1;
  gpgme_error_t err;
  gpgme_ctx_t ctx;
  gpgme_key_t key;
  gpgme_keylist_result_t result;
  gpgme_key_t keyarray[100];
  int keyidx = 0;
  gpgme_data_t out;
  gpgme_protocol_t protocol = GPGME_PROTOCOL_OpenPGP;
  gpgme_export_mode_t mode = 0;
  int print_status = 0;
  char *export_filter = NULL;

  if (argc)
    { argc--; argv++; }

  while (argc && last_argc != argc )
    {
      last_argc = argc;
      if (!strcmp (*argv, "--"))
        {
          argc--; argv++;
          break;
        }
      else if (!strcmp (*argv, "--help"))
        show_usage (0);
      else if (!strcmp (*argv, "--verbose"))
        {
          verbose = 1;
          argc--; argv++;
        }
      else if (!strcmp (*argv, "--status"))
        {
          print_status = 1;
          argc--; argv++;
        }
      else if (!strcmp (*argv, "--openpgp"))
        {
          protocol = GPGME_PROTOCOL_OpenPGP;
          argc--; argv++;
        }
      else if (!strcmp (*argv, "--cms"))
        {
          protocol = GPGME_PROTOCOL_CMS;
          argc--; argv++;
        }
      else if (!strcmp (*argv, "--extern"))
        {
          mode |= GPGME_EXPORT_MODE_EXTERN;
          argc--; argv++;
        }
      else if (!strcmp (*argv, "--ssh"))
        {
          mode |= GPGME_EXPORT_MODE_SSH;
          argc--; argv++;
        }
      else if (!strcmp (*argv, "--secret"))
        {
          mode |= GPGME_EXPORT_MODE_SECRET;
          argc--; argv++;
        }
      else if (!strcmp (*argv, "--secret-subkey"))
        {
          mode |= GPGME_EXPORT_MODE_SECRET_SUBKEY;
          argc--; argv++;
        }
      else if (!strcmp (*argv, "--raw"))
        {
          mode |= GPGME_EXPORT_MODE_RAW;
          argc--; argv++;
        }
      else if (!strcmp (*argv, "--pkcs12"))
        {
          mode |= GPGME_EXPORT_MODE_PKCS12;
          argc--; argv++;
        }
      else if (!strcmp (*argv, "--export-filter"))
        {
          argc--; argv++;
          if (!argc)
            show_usage (1);
          export_filter = strdup (*argv);
          argc--; argv++;
        }
      else if (!strncmp (*argv, "--", 2))
        show_usage (1);

    }

  if (!argc)
    show_usage (1);

  init_gpgme (protocol);

  err = gpgme_new (&ctx);
  fail_if_err (err);
  gpgme_set_protocol (ctx, protocol);
  if (print_status)
    {
      gpgme_set_status_cb (ctx, status_cb, NULL);
      gpgme_set_ctx_flag (ctx, "full-status", "1");
    }
  if (export_filter)
    {
      err = gpgme_set_ctx_flag (ctx, "export-filter", export_filter);
      fail_if_err (err);
    }

  err = gpgme_data_new (&out);
  fail_if_err (err);

  if ((mode & GPGME_EXPORT_MODE_SSH))
    {
      mode = GPGME_EXPORT_MODE_SSH; /* Set only this bit for this test.  */
      keyarray[0] = NULL;

      err = gpgme_op_export_ext (ctx, (const char**)argv, mode, out);
      fail_if_err (err);
    }
  else if ((mode & GPGME_EXPORT_MODE_SECRET_SUBKEY))
    {
      keyarray[0] = NULL;

      printf ("exporting secret subkeys!\n");

      gpgme_set_armor (ctx, 1);
      err = gpgme_op_export_ext (ctx, (const char**)argv, mode, out);
      fail_if_err (err);
    }
  else
    {
      /* Lookup the keys as required by the export_keys function.  */
      err = gpgme_op_keylist_ext_start (ctx, (const char**)argv, 0, 0);
      fail_if_err (err);

      while (!(err = gpgme_op_keylist_next (ctx, &key)))
        {
          printf ("keyid: %s  (fpr: %s)\n",
                  key->subkeys?nonnull (key->subkeys->keyid):"?",
                  key->subkeys?nonnull (key->subkeys->fpr):"?");

          if (keyidx < DIM (keyarray)-1)
            keyarray[keyidx++] = key;
          else
            {
              fprintf (stderr, PGM": too many keys"
                       "- skipping this key\n");
              gpgme_key_unref (key);
            }
        }
      if (gpgme_err_code (err) != GPG_ERR_EOF)
        fail_if_err (err);
      err = gpgme_op_keylist_end (ctx);
      fail_if_err (err);
      keyarray[keyidx] = NULL;

      result = gpgme_op_keylist_result (ctx);
      if (result->truncated)
        {
          fprintf (stderr, PGM ": key listing unexpectedly truncated\n");
          exit (1);
        }

      /* Now for the actual export.  */
      if ((mode & GPGME_EXPORT_MODE_EXTERN))
        printf ("sending keys to keyserver\n");
      if ((mode & GPGME_EXPORT_MODE_SECRET))
        printf ("exporting secret keys!\n");

      gpgme_set_armor (ctx, 1);
      err = gpgme_op_export_keys (ctx, keyarray, mode,
                                  (mode & GPGME_KEYLIST_MODE_EXTERN)? NULL:out);
      fail_if_err (err);
    }

  fflush (NULL);
  if (!(mode & GPGME_KEYLIST_MODE_EXTERN))
    {
      fputs ("Begin Result:\n", stdout);
      print_data (out);
      fputs ("End Result.\n", stdout);
    }

  /* Cleanup.  */
  gpgme_data_release (out);

  for (keyidx=0; keyarray[keyidx]; keyidx++)
    gpgme_key_unref (keyarray[keyidx]);

  gpgme_release (ctx);
  return 0;
}