git/list[1] front-page[2] threads[3] people[4] search[5] about
 

[PATCH v3 14/21] gpg-interface: move parse_signature() to where it should be

From
Junio C Hamano <gitster@pobox.com>
Date
Sep 4, 2014, 20:04 UTC
Message-ID
<1409861097-19151-15-git-send-email-gitster@pobox.com>
In-Reply-To
<1409861097-19151-1-git-send-email-gitster@pobox.com>

Our signed-tag objects set the standard format used by Git to store GPG-signed payload (i.e. the payload followed by its detached signature), and it made sense to have a helper to find the boundary between the payload and its signature in tag.c back then.

Newer code added later to parse other kinds of objects that learned to use the same format to store GPG-signed payload (e.g. signed commits), however, kept using the helper from the same location.

Move it to gpg-interface; the helper is no longer about signed tag, but it is how our code and data interact with GPG.

Signed-off-by: Junio C Hamano <gitster@pobox.com>
---
 gpg-interface.c | 21 +++++++++++++++++++++
 gpg-interface.h |  1 +
 tag.c           | 20 --------------------
 tag.h           |  1 -
 4 files changed, 22 insertions(+), 21 deletions(-)
diff --git a/gpg-interface.c b/gpg-interface.c
index 3c9624c..0dd11ea 100644
--- a/gpg-interface.c
+++ b/gpg-interface.c
@@ -7,6 +7,9 @@
 static char *configured_signing_key;
 static const char *gpg_program = "gpg";
 
+#define PGP_SIGNATURE "-----BEGIN PGP SIGNATURE-----"
+#define PGP_MESSAGE "-----BEGIN PGP MESSAGE-----"
+
 void signature_check_clear(struct signature_check *sigc)
 {
 	free(sigc->payload);
@@ -57,6 +60,24 @@ void parse_gpg_output(struct signature_check *sigc)
 	}
 }
 
+/*
+ * Look at GPG signed content (e.g. a signed tag object), whose
+ * payload is followed by a detached signature on it.  Return the
+ * offset where the embedded detached signature begins, or the end of
+ * the data when there is no such signature.
+ */
+size_t parse_signature(const char *buf, unsigned long size)
+{
+	char *eol;
+	size_t len = 0;
+	while (len < size && !starts_with(buf + len, PGP_SIGNATURE) &&
+			!starts_with(buf + len, PGP_MESSAGE)) {
+		eol = memchr(buf + len, '\n', size - len);
+		len += eol ? eol - (buf + len) + 1 : size - len;
+	}
+	return len;
+}
+
 void set_signing_key(const char *key)
 {
 	free(configured_signing_key);
diff --git a/gpg-interface.h b/gpg-interface.h
index 8d677cc..93c76c2 100644
--- a/gpg-interface.h
+++ b/gpg-interface.h
@@ -20,6 +20,7 @@ struct signature_check {
 };
 
 extern void signature_check_clear(struct signature_check *sigc);
+extern size_t parse_signature(const char *buf, unsigned long size);
 extern void parse_gpg_output(struct signature_check *);
 
 extern int sign_buffer(struct strbuf *buffer, struct strbuf *signature, const char *signing_key);
diff --git a/tag.c b/tag.c
index 82d841b..5b0ac62 100644
--- a/tag.c
+++ b/tag.c
@@ -4,9 +4,6 @@
 #include "tree.h"
 #include "blob.h"
 
-#define PGP_SIGNATURE "-----BEGIN PGP SIGNATURE-----"
-#define PGP_MESSAGE "-----BEGIN PGP MESSAGE-----"
-
 const char *tag_type = "tag";
 
 struct object *deref_tag(struct object *o, const char *warn, int warnlen)
@@ -143,20 +140,3 @@ int parse_tag(struct tag *item)
 	free(data);
 	return ret;
 }
-
-/*
- * Look at a signed tag object, and return the offset where
- * the embedded detached signature begins, or the end of the
- * data when there is no such signature.
- */
-size_t parse_signature(const char *buf, unsigned long size)
-{
-	char *eol;
-	size_t len = 0;
-	while (len < size && !starts_with(buf + len, PGP_SIGNATURE) &&
-			!starts_with(buf + len, PGP_MESSAGE)) {
-		eol = memchr(buf + len, '\n', size - len);
-		len += eol ? eol - (buf + len) + 1 : size - len;
-	}
-	return len;
-}
diff --git a/tag.h b/tag.h
index bc8a1e4..f4580ae 100644
--- a/tag.h
+++ b/tag.h
@@ -17,6 +17,5 @@ extern int parse_tag_buffer(struct tag *item, const void *data, unsigned long si
 extern int parse_tag(struct tag *item);
 extern struct object *deref_tag(struct object *, const char *, int);
 extern struct object *deref_tag_noverify(struct object *);
-extern size_t parse_signature(const char *buf, unsigned long size);
 
 #endif /* TAG_H */
-- 
2.1.0-399-g1364b4d
Previous: Junio C HamanoNext: Junio C Hamano
Message 15 of 23 in “Signed push”
  1. 00/21 Signed pushJunio C Hamano, Sep 4, 2014
  2. 01/21 receive-pack: do not overallocate command structureJunio C Hamano, Sep 4, 2014
  3. 02/21 receive-pack: parse feature request a bit earlierJunio C Hamano, Sep 4, 2014
  4. 03/21 receive-pack: do not reuse old_sha1[] for other thingsJunio C Hamano, Sep 4, 2014
  5. 04/21 receive-pack: factor out queueing of commandJunio C Hamano, Sep 4, 2014
  6. 05/21 send-pack: move REF_STATUS_REJECT_NODELETE logic a bit higherJunio C Hamano, Sep 4, 2014
  7. 06/21 send-pack: refactor decision to send update per refJunio C Hamano, Sep 4, 2014
  8. 07/21 send-pack: always send capabilitiesJunio C Hamano, Sep 4, 2014
  9. 08/21 send-pack: factor out capability string generationJunio C Hamano, Sep 4, 2014
  10. 09/21 receive-pack: factor out capability string generationJunio C Hamano, Sep 4, 2014
  11. 10/21 send-pack: rename "new_refs" to "need_pack_data"Junio C Hamano, Sep 4, 2014
  12. 11/21 send-pack: refactor inspecting and resetting status and sending commandsJunio C Hamano, Sep 4, 2014
  13. 12/21 send-pack: clarify that cmds_sent is a booleanJunio C Hamano, Sep 4, 2014
  14. 13/21 gpg-interface: move parse_gpg_output() to where it should beJunio C Hamano, Sep 4, 2014
  15. 14/21 gpg-interface: move parse_signature() to where it should beJunio C Hamano, Sep 4, 2014
  16. 15/21 pack-protocol doc: typofix for PKT-LINEJunio C Hamano, Sep 4, 2014
  17. 16/21 push: the beginning of "git push --signed"Junio C Hamano, Sep 4, 2014
  18. 17/21 receive-pack: GPG-validate push certificatesJunio C Hamano, Sep 4, 2014
  19. 18/21 send-pack: send feature request on push-cert packetJunio C Hamano, Sep 4, 2014
  20. 19/21 signed push: remove duplicated protocol infoJunio C Hamano, Sep 4, 2014
  21. 20/21 signed push: add "pushee" header to push certificateJunio C Hamano, Sep 4, 2014
  22. Shawn PearceSep 4, 2014
  23. 21/21 signed push: fortify against replay attacksJunio C Hamano, Sep 4, 2014

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.