blob: 89348299ddc394a755873b3c1bb1d5db2a56261b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
|
#
# Simple parser for HKP KeyInfo responses.
#
# Focus is on simple here. Trying to avoid state and sideeffects.
# Parsing a response with 12 keys and validating them takes 2ms.
# So no need for memoization and making things more complex.
#
module Nickserver; module HKP
class ParseKeyInfo
# for this regexp to work, the source text must end in a trailing "\n",
# which the output of sks does.
MATCH_PUB_KEY = /(^pub:.+?\n(^uid:.+?\n)+)/m
# header -- header of the hkp response
# vindex_result -- raw output from a vindex hkp query (machine readable)
def initialize(header, vindex_result)
@header = header
@vindex_result = vindex_result
end
def status(uid)
if hkp_ok? && keys(uid).empty?
error_status(uid)
else
header.status
end
end
def keys(uid)
key_infos(uid).reject { |key| error_for_key(key) }
end
def msg(uid)
if errors(uid).any?
error_messages(uid).join "\n"
else
"Could not fetch keyinfo."
end
end
protected
attr_reader :header
attr_reader :vindex_result
def error_status(uid)
if errors(uid).any?
500
else
404
end
end
def errors(uid)
key_infos(uid).map{|key| error_for_key(key) }.compact
end
def error_messages(uid)
key_infos(uid).map do |key|
err = error_for_key(key)
error_message(uid, key, err)
end.compact
end
def key_infos(uid)
all_key_infos.select do |key_info|
key_info.uids.include?(uid)
end
end
def all_key_infos
# only parse hkp responses with status 200 (OK)
return [] unless hkp_ok?
@all_key_infos ||= vindex_result.scan(MATCH_PUB_KEY).map do |match|
KeyInfo.new(match[0])
end
end
def hkp_ok?
header.status == 200
end
def error_message(uid, key, err)
"Ignoring key #{key.keyid} for #{uid}: #{err}" if err
end
def error_for_key(key)
if key.keylen < 2048
"key length is too short."
elsif key.expired?
"key expired."
elsif key.revoked?
"key revoked."
elsif key.disabled?
"key disabled."
elsif key.expirationdate && key.expirationdate < Time.now
"key expired"
end
end
end
end; end
|
