folkslinux
/
rpm
mirror of https://github.com/rpm-software-management/rpm.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
rpm/sign/rpmsignfiles.h

26 lines
476 B
C
Raw Normal View History

Sign file digests and store signatures in header This patch introduces rpmSignFiles, which extracts file digests from the provided header and signs them using libimaevm and the provided key. The file signatures are stored in the header as hex strings under the tag RPM_FILESIGNATURES. Changelog: - fix signatureLength() - Mimi - remove existing file signatures and the file signature length, before adding new file signatures. - Mimi - fix dependency on ima - Fin [lkardos@redhat.com: fixed indentation] Signed-off-by: Lubos Kardos <lkardos@redhat.com>
2015-07-22 01:00:41 +08:00
#ifndef H_RPMSIGNFILES
#define H_RPMSIGNFILES
rpmSignFiles() is an internal-only API
2017-06-08 22:23:15 +08:00
#include <rpm/rpmtypes.h>
#include <rpm/rpmutil.h>
Sign file digests and store signatures in header This patch introduces rpmSignFiles, which extracts file digests from the provided header and signs them using libimaevm and the provided key. The file signatures are stored in the header as hex strings under the tag RPM_FILESIGNATURES. Changelog: - fix signatureLength() - Mimi - remove existing file signatures and the file signature length, before adding new file signatures. - Mimi - fix dependency on ima - Fin [lkardos@redhat.com: fixed indentation] Signed-off-by: Lubos Kardos <lkardos@redhat.com>
2015-07-22 01:00:41 +08:00
#ifdef __cplusplus
extern "C" {
#endif
/**
* Sign file digests in header and store the signatures in header
* @param h package header
* @param key signing key
Add support for passing the file signing key password The option to provide a password for signing an RPM package was recently removed in favor of using the underlying mechanisms. Requiring a user to enter a password for each file being signed, however, is tedious. This patch adds support for prompting the user for the password. Dependency on ima-evm-utils version > "0.9" Changelog: - update get_fskpass() based on Dmitry's comments Signed-off-by: Lubos Kardos <lkardos@redhat.com>
2015-07-22 01:00:46 +08:00
* @param keypass signing key password
Sign file digests and store signatures in header This patch introduces rpmSignFiles, which extracts file digests from the provided header and signs them using libimaevm and the provided key. The file signatures are stored in the header as hex strings under the tag RPM_FILESIGNATURES. Changelog: - fix signatureLength() - Mimi - remove existing file signatures and the file signature length, before adding new file signatures. - Mimi - fix dependency on ima - Fin [lkardos@redhat.com: fixed indentation] Signed-off-by: Lubos Kardos <lkardos@redhat.com>
2015-07-22 01:00:41 +08:00
* @return RPMRC_OK on success
*/
rpmSignFiles() is an internal-only API
2017-06-08 22:23:15 +08:00
RPM_GNUC_INTERNAL
Add support for passing the file signing key password The option to provide a password for signing an RPM package was recently removed in favor of using the underlying mechanisms. Requiring a user to enter a password for each file being signed, however, is tedious. This patch adds support for prompting the user for the password. Dependency on ima-evm-utils version > "0.9" Changelog: - update get_fskpass() based on Dmitry's comments Signed-off-by: Lubos Kardos <lkardos@redhat.com>
2015-07-22 01:00:46 +08:00
rpmRC rpmSignFiles(Header h, const char *key, char *keypass);
Sign file digests and store signatures in header This patch introduces rpmSignFiles, which extracts file digests from the provided header and signs them using libimaevm and the provided key. The file signatures are stored in the header as hex strings under the tag RPM_FILESIGNATURES. Changelog: - fix signatureLength() - Mimi - remove existing file signatures and the file signature length, before adding new file signatures. - Mimi - fix dependency on ima - Fin [lkardos@redhat.com: fixed indentation] Signed-off-by: Lubos Kardos <lkardos@redhat.com>
2015-07-22 01:00:41 +08:00
#ifdef _cplusplus
}
#endif
#endif /* H_RPMSIGNFILES */