ホーム » Martin Owens » リソース » PasteBin » Evolution GPG Hack
  1. #!/usr/bin/python
  2. #
  3. # Wrap the gpg command to provide evolution with a bit of extra functionality
  4. # This is certainly a hack and you should feel very bad about using it.
  5. #
  6. # Public Domain, Authored by Martin Owens <doctormo@gmail.com> 2016
  7. #
  9. GPG_TRIED_FOOTER = """
  12. --==-- --==-- --==--
  14. I tried to encrypted this message using GPG (GNU Privacy Guard)
  15. Your public key isn't available, so this email can be read by
  16. anyone who might be snooping.
  18. """
  20. import os
  21. import sys
  22. import atexit
  24. from collections import defaultdict
  25. from subprocess import Popen, PIPE, call
  26. from tempfile import mkdtemp, mktemp
  27. from datetime import date
  28. from shutil import rmtree
  30. to_date = lambda d: date(*[int(p) for p in d.split('-')])
  33. class GPG(object):
  34. keyserver = 'hkp://pgp.mit.edu'
  35. remote_commands = ['--search-keys', '--recv-keys']
  37. def __init__(self, cmd='/usr/bin/gpg', local=False):
  38. self.command = cmd
  39. self.photos = []
  40. self.local = local
  41. self.homedir = mkdtemp() if local else None
  42. atexit.register(self.at_exit)
  44. def at_exit(self):
  45. """Remove any temporary files and cleanup"""
  46. # Clean up any used local home directory (only if it's local)
  47. if self.local and self.homedir and os.path.isdir(self.homedir):
  48. rmtree(self.homedir)
  50. # Clean up any downloaded photo-ids
  51. for photo in self.photos:
  52. if os.path.isfile(photo):
  53. os.unlink(photo)
  54. try:
  55. os.rmdir(os.path.dirname(photo))
  56. except OSError:
  57. pass
  59. def __call__(self, *args):
  60. """Call gpg command for result"""
  61. # Add key server if required
  62. if any([cmd in args for cmd in self.remote_commands]):
  63. args = ('--keyserver', self.keyserver) + args
  64. if self.homedir:
  65. args = ('--homedir', self.homedir) + args
  67. command = Popen([self.command, '--batch'] + list(args), stdout=PIPE)
  68. (out, err) = command.communicate()
  69. self.status = command.returncode
  70. return out
  72. def list_keys(self, *keys, **options):
  73. """Returns a list of keys (with photos if needed)"""
  74. with_photos = options.get('photos', False)
  75. args = ()
  76. if with_photos:
  77. args += ('--list-options', 'show-photos',
  78. '--photo-viewer', 'echo PHOTO:%I')
  79. out = self(*(args + ('--list-keys',) + keys))
  81. # Processing the output with this parser
  82. units = []
  83. current = defaultdict(list)
  84. for line in out.split('\n'):
  85. if not line.strip():
  86. # We should always output entries if they have a uid and key
  87. if current and 'uid' in current and 'key' in current:
  88. # But ignore revoked keys if revoked option is True
  89. if not (current.get('revoked', False) and options.get('revoked', False)):
  90. units.append(dict(current))
  92. current = defaultdict(list)
  94. elif line.startswith('PHOTO:'):
  95. current['photo'] = line.split(':', 1)[-1]
  96. self.photos.append(current['photo'])
  97. elif ' of size ' in line:
  98. continue
  99. elif ' ' in line:
  100. (kind, line) = line.split(' ', 1)
  101. if kind == 'pub':
  102. current['expires'] = False
  103. current['revoked'] = False
  105. if '[' in line:
  106. (line, mod) = line.strip().split('[', 1)
  107. (mod, _) = mod.split(']', 1)
  108. if ': ' in mod:
  109. (mod, edited) = mod.split(': ', 1)
  110. current[mod] = to_date(edited)
  112. (key, created) = line.split(' ', 1)
  113. current['created'] = to_date(created)
  114. (current['bits'], current['key']) = key.split('/', 1)
  115. elif kind in ('uid', 'sub'):
  116. current[kind].append(line.strip())
  117. else:
  118. current[kind] = line.strip()
  120. return units
  122. @property
  123. def default_photo(self):
  124. if not hasattr(self, '_photo'):
  125. self._photo = mktemp('.svg')
  126. with open(self._photo, 'w') as fhl:
  127. fhl.write("""<svg xmlns="http://www.w3.org/2000/svg" version="1.1" width="120" height="120" viewbox="0 0 120 120">
  128. <path style="stroke:#6c6c6c;stroke-width:.5px;fill:#ece8e6;"
  129. d="M 0.25,0.25018138 0.25,119.66328 25.941297,116.2119 C 21.595604,99.862371 26.213982,56.833751 43.785402,47.903791 17.34816,4.9549214 103.06892,5.4226914 76.631675,48.405571 96.179208,63.458931 98.051138,99.588601 93.51442,116.28034 l 26.23558,3.46961 0,-119.41309862 z"/>
  130. </svg>""")
  131. self.photos.append(self._photo)
  132. return self._photo
  134. def recieve_keys(self, *keys, **options):
  135. """Present the opotunity to add the key to the user:
  137. Returns
  138. - True if the key was already or is now imported.
  139. - False if keys were available but the user canceled.
  140. - None if no keys were found within the search.
  142. """
  143. keys = self.search_keys(*keys)
  144. if not keys:
  145. return None # User doesn't have GPG
  147. # Always use a temporary gpg home to review keys
  148. gpg = GPG(cmd=self.command, local=True) if not self.local else self
  150. # B. Import each of the keys
  151. gpg('--recv-keys', *zip(*keys)[0])
  153. # C. List keys (with photo options)
  154. choices = []
  155. for key in gpg.list_keys(photos=True):
  156. choices.append(key.get('photo', self.default_photo))
  157. choices.append('\n'.join(key['uid']))
  158. choices.append(key['key'])
  159. choices.append(str(key['expires']))
  161. if len(choices) / 4 == 1:
  162. title = "Can I use this GPG key to encrypt for this user?"
  163. else:
  164. title = "Please select the GPG key to use for encryption"
  166. # Show using gtk zenity (easier than gtk3 directly)
  167. p = Popen(['zenity',
  168. '--width', '900', '--height', '700', '--title', title,
  169. '--list', '--imagelist', '--print-column', '3',
  170. '--column', 'Photo ID',
  171. '--column', 'ID',
  172. '--column', 'Key',
  173. '--column', 'Expires',
  174. ] + choices, stdout=PIPE, stderr=PIPE)
  176. # Returncode is generated after communicate!
  177. key = p.communicate()[0].strip()
  179. # Select the default first key if one choice.
  180. # (person pressed ok without looking)
  181. if not key and len(choices) == 4:
  182. key = choices[2]
  184. if p.returncode != 0:
  185. # Cancel was pressed
  186. return False
  188. # E. Import the selected key
  189. self('--recv-keys', key)
  190. return self.status == 0
  192. def is_key_available(self, search):
  193. """Return False if the email is not found in the local key list"""
  194. self('--list-keys', search)
  195. if self.status == 2: # Keys not found
  196. return False
  197. # We return true, even if gpg returned some other kind of error
  198. # Because this prevents us running more commands to a broken gpg
  199. return True
  201. def search_keys(self, *keys):
  202. """Returns a list of (key_id, info) tuples from a search"""
  203. out = self('--search-keys', *keys)
  204. found = []
  205. prev = []
  206. for line in out.split("\n"):
  207. if line.startswith('gpg:'):
  208. continue
  209. if 'created:' in line:
  210. key_id = line.split('key ')[-1].split(',')[0]
  211. if '(revoked)' not in line:
  212. found.append((key_id, prev))
  213. prev = []
  214. else:
  215. prev.append(line)
  216. return found
  219. if __name__ == '__main__':
  220. cmd = sys.argv[0] + '.orig'
  221. if not os.path.isfile(cmd):
  222. sys.stderr.write("Can't find pass-through command '%s'\n" % args[0])
  223. sys.exit(-13)
  225. args = [cmd] + sys.argv[1:]
  226. # Check to see if call is from an application
  227. if 'GIO_LAUNCHED_DESKTOP_FILE' in os.environ:
  228. # We use our moved gpg command file
  229. gpg = GPG(cmd=cmd)
  230. # Check if we've got a missing key during an encryption, we get the
  231. # very next argument after a -r or -R argument (which should be
  232. # the email address)
  233. for recipient in [args[i+1] for (i, v) in enumerate(args) if v in ('-r', '-R')]:
  234. # Only check email addresses
  235. if '@' in recipient:
  236. if not gpg.is_key_available(recipient):
  237. if gpg.recieve_keys(recipient) is None:
  238. pass
  239. # We can add a footer to the message here explaining GPG
  240. # We can't do this, evolution will wrap it all up in a
  241. # message structure.
  242. #msg = sys.stdin.read()
  243. #if msg:
  244. # msg += GPG_TRIED_FOOTER
  245. #sys.stdout.write(msg)
  246. #sys.exit(0)
  248. # We call and do not PIPE anything (pass-through)
  249. try:
  250. sys.exit(call(args))
  251. except KeyboardInterrupt:
  252. sys.exit(-14)
 
 

1083

Evolution GPG Hack

作成者 Martin Owens

This hack wraps the gpg calls evolution makes in order to call out to get keys using a GUI.

PasteBin

行
253
言葉
982
サイズ
9.1 KB
作成済み
訂正
4
タイプ
text/x-python
Public Domain (PD)
コメントするにはログインしてください！

Inkscape（インクスケープ）はGPLで認証された無料のオープンソースソフトウェアです。