#!/usr/bin/python## Wrap the gpg command to provide evolution with a bit of extra functionality# This is certainly a hack and you should feel very bad about using it.## Public Domain, Authored by Martin Owens <doctormo@gmail.com> 2016#GPG_TRIED_FOOTER = """--==-- --==-- --==--I tried to encrypted this message using GPG (GNU Privacy Guard)Your public key isn't available, so this email can be read byanyone who might be snooping."""import osimport sysimport atexitfrom collections import defaultdictfrom subprocess import Popen, PIPE, callfrom tempfile import mkdtemp, mktempfrom datetime import datefrom shutil import rmtreeto_date = lambda d: date(*[int(p) for p in d.split('-')])class GPG(object):keyserver = 'hkp://pgp.mit.edu'remote_commands = ['--search-keys', '--recv-keys']def __init__(self, cmd='/usr/bin/gpg', local=False):self.command = cmdself.photos = []self.local = localself.homedir = mkdtemp() if local else Noneatexit.register(self.at_exit)def at_exit(self):"""Remove any temporary files and cleanup"""# Clean up any used local home directory (only if it's local)if self.local and self.homedir and os.path.isdir(self.homedir):rmtree(self.homedir)# Clean up any downloaded photo-idsfor photo in self.photos:if os.path.isfile(photo):os.unlink(photo)try:os.rmdir(os.path.dirname(photo))except OSError:passdef __call__(self, *args):"""Call gpg command for result"""# Add key server if requiredif any([cmd in args for cmd in self.remote_commands]):args = ('--keyserver', self.keyserver) + argsif self.homedir:args = ('--homedir', self.homedir) + argscommand = Popen([self.command, '--batch'] + list(args), stdout=PIPE)(out, err) = command.communicate()self.status = command.returncodereturn outdef list_keys(self, *keys, **options):"""Returns a list of keys (with photos if needed)"""with_photos = options.get('photos', False)args = ()if with_photos:args += ('--list-options', 'show-photos','--photo-viewer', 'echo PHOTO:%I')out = self(*(args + ('--list-keys',) + keys))# Processing the output with this parserunits = []current = defaultdict(list)for line in out.split('\n'):if not line.strip():# We should always output entries if they have a uid and keyif current and 'uid' in current and 'key' in current:# But ignore revoked keys if revoked option is Trueif not (current.get('revoked', False) and options.get('revoked', False)):units.append(dict(current))current = defaultdict(list)elif line.startswith('PHOTO:'):current['photo'] = line.split(':', 1)[-1]self.photos.append(current['photo'])elif ' of size ' in line:continueelif ' ' in line:(kind, line) = line.split(' ', 1)if kind == 'pub':current['expires'] = Falsecurrent['revoked'] = Falseif '[' in line:(line, mod) = line.strip().split('[', 1)(mod, _) = mod.split(']', 1)if ': ' in mod:(mod, edited) = mod.split(': ', 1)current[mod] = to_date(edited)(key, created) = line.split(' ', 1)current['created'] = to_date(created)(current['bits'], current['key']) = key.split('/', 1)elif kind in ('uid', 'sub'):current[kind].append(line.strip())else:current[kind] = line.strip()return units@propertydef default_photo(self):if not hasattr(self, '_photo'):self._photo = mktemp('.svg')with open(self._photo, 'w') as fhl:fhl.write("""<svg xmlns="http://www.w3.org/2000/svg" version="1.1" width="120" height="120" viewbox="0 0 120 120"><path style="stroke:#6c6c6c;stroke-width:.5px;fill:#ece8e6;"d="M 0.25,0.25018138 0.25,119.66328 25.941297,116.2119 C 21.595604,99.862371 26.213982,56.833751 43.785402,47.903791 17.34816,4.9549214 103.06892,5.4226914 76.631675,48.405571 96.179208,63.458931 98.051138,99.588601 93.51442,116.28034 l 26.23558,3.46961 0,-119.41309862 z"/></svg>""")self.photos.append(self._photo)return self._photodef recieve_keys(self, *keys, **options):"""Present the opotunity to add the key to the user:Returns- True if the key was already or is now imported.- False if keys were available but the user canceled.- None if no keys were found within the search."""keys = self.search_keys(*keys)if not keys:return None # User doesn't have GPG# Always use a temporary gpg home to review keysgpg = GPG(cmd=self.command, local=True) if not self.local else self# B. Import each of the keysgpg('--recv-keys', *zip(*keys)[0])# C. List keys (with photo options)choices = []for key in gpg.list_keys(photos=True):choices.append(key.get('photo', self.default_photo))choices.append('\n'.join(key['uid']))choices.append(key['key'])choices.append(str(key['expires']))if len(choices) / 4 == 1:title = "Can I use this GPG key to encrypt for this user?"else:title = "Please select the GPG key to use for encryption"# Show using gtk zenity (easier than gtk3 directly)p = Popen(['zenity','--width', '900', '--height', '700', '--title', title,'--list', '--imagelist', '--print-column', '3','--column', 'Photo ID','--column', 'ID','--column', 'Key','--column', 'Expires',] + choices, stdout=PIPE, stderr=PIPE)# Returncode is generated after communicate!key = p.communicate()[0].strip()# Select the default first key if one choice.# (person pressed ok without looking)if not key and len(choices) == 4:key = choices[2]if p.returncode != 0:# Cancel was pressedreturn False# E. Import the selected keyself('--recv-keys', key)return self.status == 0def is_key_available(self, search):"""Return False if the email is not found in the local key list"""self('--list-keys', search)if self.status == 2: # Keys not foundreturn False# We return true, even if gpg returned some other kind of error# Because this prevents us running more commands to a broken gpgreturn Truedef search_keys(self, *keys):"""Returns a list of (key_id, info) tuples from a search"""out = self('--search-keys', *keys)found = []prev = []for line in out.split("\n"):if line.startswith('gpg:'):continueif 'created:' in line:key_id = line.split('key ')[-1].split(',')[0]if '(revoked)' not in line:found.append((key_id, prev))prev = []else:prev.append(line)return foundif __name__ == '__main__':cmd = sys.argv[0] + '.orig'if not os.path.isfile(cmd):sys.stderr.write("Can't find pass-through command '%s'\n" % args[0])sys.exit(-13)args = [cmd] + sys.argv[1:]# Check to see if call is from an applicationif 'GIO_LAUNCHED_DESKTOP_FILE' in os.environ:# We use our moved gpg command filegpg = GPG(cmd=cmd)# Check if we've got a missing key during an encryption, we get the# very next argument after a -r or -R argument (which should be# the email address)for recipient in [args[i+1] for (i, v) in enumerate(args) if v in ('-r', '-R')]:# Only check email addressesif '@' in recipient:if not gpg.is_key_available(recipient):if gpg.recieve_keys(recipient) is None:pass# We can add a footer to the message here explaining GPG# We can't do this, evolution will wrap it all up in a# message structure.#msg = sys.stdin.read()#if msg:# msg += GPG_TRIED_FOOTER#sys.stdout.write(msg)#sys.exit(0)# We call and do not PIPE anything (pass-through)try:sys.exit(call(args))except KeyboardInterrupt:sys.exit(-14)
This hack wraps the gpg calls evolution makes in order to call out to get keys using a GUI.
PasteBin
- Lines
- 253
- Words
- 982
- Size
- 9.1 KB
- Created
- Revisions
- 4
- Type
- text/x-python
Please log in to leave a comment!
