123 lines
4.2 KiB
Java
123 lines
4.2 KiB
Java
// SPDX-FileCopyrightText: 2023 Paul Schaub <vanitasvitae@fsfe.org>
|
|
//
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package sop.external.operation;
|
|
|
|
import sop.ReadyWithResult;
|
|
import sop.Verification;
|
|
import sop.exception.SOPGPException;
|
|
import sop.external.ExternalSOP;
|
|
import sop.operation.InlineVerify;
|
|
import sop.util.UTCUtil;
|
|
|
|
import javax.annotation.Nonnull;
|
|
import java.io.BufferedReader;
|
|
import java.io.File;
|
|
import java.io.FileInputStream;
|
|
import java.io.IOException;
|
|
import java.io.InputStream;
|
|
import java.io.InputStreamReader;
|
|
import java.io.OutputStream;
|
|
import java.util.ArrayList;
|
|
import java.util.Date;
|
|
import java.util.List;
|
|
import java.util.Properties;
|
|
|
|
/**
|
|
* Implementation of the {@link InlineVerify} operation using an external SOP binary.
|
|
*/
|
|
public class InlineVerifyExternal implements InlineVerify {
|
|
|
|
private final ExternalSOP.TempDirProvider tempDirProvider;
|
|
private final List<String> commandList = new ArrayList<>();
|
|
private final List<String> envList;
|
|
|
|
private int certCounter = 0;
|
|
|
|
public InlineVerifyExternal(String binary, Properties environment, ExternalSOP.TempDirProvider tempDirProvider) {
|
|
this.tempDirProvider = tempDirProvider;
|
|
commandList.add(binary);
|
|
commandList.add("inline-verify");
|
|
envList = ExternalSOP.propertiesToEnv(environment);
|
|
}
|
|
|
|
@Override
|
|
@Nonnull
|
|
public InlineVerify notBefore(@Nonnull Date timestamp) throws SOPGPException.UnsupportedOption {
|
|
commandList.add("--not-before=" + UTCUtil.formatUTCDate(timestamp));
|
|
return this;
|
|
}
|
|
|
|
@Override
|
|
@Nonnull
|
|
public InlineVerify notAfter(@Nonnull Date timestamp) throws SOPGPException.UnsupportedOption {
|
|
commandList.add("--not-after=" + UTCUtil.formatUTCDate(timestamp));
|
|
return this;
|
|
}
|
|
|
|
@Override
|
|
@Nonnull
|
|
public InlineVerify cert(@Nonnull InputStream cert) throws SOPGPException.BadData, IOException {
|
|
String envVar = "CERT_" + certCounter++;
|
|
commandList.add("@ENV:" + envVar);
|
|
envList.add(envVar + "=" + ExternalSOP.readString(cert));
|
|
return this;
|
|
}
|
|
|
|
@Override
|
|
@Nonnull
|
|
public ReadyWithResult<List<Verification>> data(@Nonnull InputStream data) throws IOException, SOPGPException.NoSignature, SOPGPException.BadData {
|
|
File tempDir = tempDirProvider.provideTempDirectory();
|
|
|
|
File verificationsOut = new File(tempDir, "verifications-out");
|
|
verificationsOut.delete();
|
|
commandList.add("--verifications-out=" + verificationsOut.getAbsolutePath());
|
|
|
|
String[] command = commandList.toArray(new String[0]);
|
|
String[] env = envList.toArray(new String[0]);
|
|
|
|
try {
|
|
Process process = Runtime.getRuntime().exec(command, env);
|
|
OutputStream processOut = process.getOutputStream();
|
|
InputStream processIn = process.getInputStream();
|
|
|
|
return new ReadyWithResult<List<Verification>>() {
|
|
@Override
|
|
public List<Verification> writeTo(@Nonnull OutputStream outputStream) throws IOException, SOPGPException.NoSignature {
|
|
byte[] buf = new byte[4096];
|
|
int r;
|
|
while ((r = data.read(buf)) > 0) {
|
|
processOut.write(buf, 0, r);
|
|
}
|
|
|
|
data.close();
|
|
processOut.close();
|
|
|
|
|
|
while ((r = processIn.read(buf)) > 0) {
|
|
outputStream.write(buf, 0 , r);
|
|
}
|
|
|
|
processIn.close();
|
|
outputStream.close();
|
|
|
|
ExternalSOP.finish(process);
|
|
|
|
FileInputStream verificationsOutIn = new FileInputStream(verificationsOut);
|
|
BufferedReader reader = new BufferedReader(new InputStreamReader(verificationsOutIn));
|
|
List<Verification> verificationList = new ArrayList<>();
|
|
String line;
|
|
while ((line = reader.readLine()) != null) {
|
|
verificationList.add(Verification.fromString(line.trim()));
|
|
}
|
|
|
|
return verificationList;
|
|
}
|
|
};
|
|
} catch (IOException e) {
|
|
throw new RuntimeException(e);
|
|
}
|
|
}
|
|
}
|