Gecko [ contributie.vriendennsm.nl ]

Name	Size	Permission	Date
images	[ DIR ]	drwxr-xr-x	2026-07-25 20:55
ulang	[ DIR ]	drwxr-xr-x	2026-07-25 20:55
CHANGELOG	713 B	-rw-r--r--	2026-07-19 16:26
config	22 B	-rw-r--r--	2026-07-19 16:26
config.info	136 B	-rw-r--r--	2026-07-19 16:26
config.info.ca	159 B	-rwxr-xr-x	2026-07-19 16:26
config.info.de	163 B	-rw-r--r--	2026-07-19 16:26
config.info.nl	162 B	-rw-r--r--	2026-07-19 16:26
config.info.no	142 B	-rw-r--r--	2026-07-19 16:26
decrypt.cgi	1.08 KB	-rwxr-xr-x	2026-07-19 16:28
delete_keys.cgi	325 B	-rwxr-xr-x	2026-07-19 16:28
delkey.cgi	710 B	-rwxr-xr-x	2026-07-19 16:28
edit_decrypt.cgi	927 B	-rwxr-xr-x	2026-07-19 16:28
edit_encrypt.cgi	1.03 KB	-rwxr-xr-x	2026-07-19 16:28
edit_export.cgi	1.16 KB	-rwxr-xr-x	2026-07-19 16:28
edit_key.cgi	2.73 KB	-rwxr-xr-x	2026-07-19 16:28
edit_secret.cgi	963 B	-rwxr-xr-x	2026-07-19 16:28
edit_sign.cgi	1.08 KB	-rwxr-xr-x	2026-07-19 16:28
edit_verify.cgi	1.11 KB	-rwxr-xr-x	2026-07-19 16:28
encrypt.cgi	844 B	-rwxr-xr-x	2026-07-19 16:28
export.cgi	1.33 KB	-rwxr-xr-x	2026-07-19 16:28
gnupg-lib.pl	14.82 KB	-rwxr-xr-x	2026-07-19 16:26
import.cgi	1.07 KB	-rwxr-xr-x	2026-07-19 16:28
index.cgi	1.64 KB	-rwxr-xr-x	2026-07-19 16:28
list_keys.cgi	3.71 KB	-rwxr-xr-x	2026-07-19 16:28
module.info	198 B	-rw-r--r--	2026-07-19 16:26
module.info.ar	0 B	-rw-r--r--	2026-07-19 16:26
module.info.ar.auto	244 B	-rw-r--r--	2026-07-19 16:26
module.info.bg	0 B	-rw-r--r--	2026-07-19 16:26
module.info.bg.auto	313 B	-rw-r--r--	2026-07-19 16:26
module.info.ca	23 B	-rw-r--r--	2026-07-19 16:26
module.info.ca.auto	142 B	-rw-r--r--	2026-07-19 16:26
module.info.cs	0 B	-rw-r--r--	2026-07-19 16:26
module.info.cs.auto	192 B	-rw-r--r--	2026-07-19 16:26
module.info.da	0 B	-rw-r--r--	2026-07-19 16:26
module.info.da.auto	165 B	-rw-r--r--	2026-07-19 16:26
module.info.de	104 B	-rw-r--r--	2026-07-19 16:26
module.info.de.auto	12 B	-rw-r--r--	2026-07-19 16:26
module.info.el	0 B	-rw-r--r--	2026-07-19 16:26
module.info.el.auto	345 B	-rw-r--r--	2026-07-19 16:26
module.info.es	35 B	-rw-r--r--	2026-07-19 16:26
module.info.es.auto	156 B	-rw-r--r--	2026-07-19 16:26
module.info.eu	0 B	-rw-r--r--	2026-07-19 16:26
module.info.eu.auto	173 B	-rw-r--r--	2026-07-19 16:26
module.info.fa	0 B	-rw-r--r--	2026-07-19 16:26
module.info.fa.auto	243 B	-rw-r--r--	2026-07-19 16:26
module.info.fi	0 B	-rw-r--r--	2026-07-19 16:26
module.info.fi.auto	165 B	-rw-r--r--	2026-07-19 16:26
module.info.fr	26 B	-rw-r--r--	2026-07-19 16:26
module.info.fr.auto	159 B	-rw-r--r--	2026-07-19 16:26
module.info.hr	0 B	-rw-r--r--	2026-07-19 16:26
module.info.hr.auto	194 B	-rw-r--r--	2026-07-19 16:26
module.info.hu	27 B	-rw-r--r--	2026-07-19 16:26
module.info.hu.auto	169 B	-rw-r--r--	2026-07-19 16:26
module.info.it	0 B	-rw-r--r--	2026-07-19 16:26
module.info.it.auto	182 B	-rw-r--r--	2026-07-19 16:26
module.info.ja	24 B	-rw-r--r--	2026-07-19 16:26
module.info.ja.auto	153 B	-rw-r--r--	2026-07-19 16:26
module.info.ko	0 B	-rw-r--r--	2026-07-19 16:26
module.info.ko.auto	163 B	-rw-r--r--	2026-07-19 16:26
module.info.ms	0 B	-rw-r--r--	2026-07-19 16:26
module.info.ms.auto	176 B	-rw-r--r--	2026-07-19 16:26
module.info.nl	28 B	-rw-r--r--	2026-07-19 16:26
module.info.nl.auto	142 B	-rw-r--r--	2026-07-19 16:26
module.info.no	25 B	-rw-r--r--	2026-07-19 16:26
module.info.no.auto	131 B	-rw-r--r--	2026-07-19 16:26
module.info.pl	165 B	-rw-r--r--	2026-07-19 16:26
module.info.pl.auto	180 B	-rw-r--r--	2026-07-19 16:26
module.info.pt	0 B	-rw-r--r--	2026-07-19 16:26
module.info.pt.auto	181 B	-rw-r--r--	2026-07-19 16:26
module.info.pt_BR	0 B	-rw-r--r--	2026-07-19 16:26
module.info.pt_BR.auto	190 B	-rw-r--r--	2026-07-19 16:26
module.info.ru	0 B	-rw-r--r--	2026-07-19 16:26
module.info.ru.auto	290 B	-rw-r--r--	2026-07-19 16:26
module.info.sk	0 B	-rw-r--r--	2026-07-19 16:26
module.info.sk.auto	186 B	-rw-r--r--	2026-07-19 16:26
module.info.sv	0 B	-rw-r--r--	2026-07-19 16:26
module.info.sv.auto	163 B	-rw-r--r--	2026-07-19 16:26
module.info.tr	0 B	-rw-r--r--	2026-07-19 16:26
module.info.tr.auto	195 B	-rw-r--r--	2026-07-19 16:26
module.info.uk	0 B	-rw-r--r--	2026-07-19 16:26
module.info.uk.auto	300 B	-rw-r--r--	2026-07-19 16:26
module.info.zh	0 B	-rw-r--r--	2026-07-19 16:26
module.info.zh.auto	137 B	-rw-r--r--	2026-07-19 16:26
module.info.zh_TW	0 B	-rw-r--r--	2026-07-19 16:26
module.info.zh_TW.auto	146 B	-rw-r--r--	2026-07-19 16:26
recv.cgi	734 B	-rwxr-xr-x	2026-07-19 16:28
save_key.cgi	2.85 KB	-rwxr-xr-x	2026-07-19 16:28
secret.cgi	2.02 KB	-rwxr-xr-x	2026-07-19 16:28
send.cgi	654 B	-rwxr-xr-x	2026-07-19 16:28
sign.cgi	1018 B	-rwxr-xr-x	2026-07-19 16:28
signkey.cgi	6.27 KB	-rwxr-xr-x	2026-07-19 16:28
verify.cgi	1.53 KB	-rwxr-xr-x	2026-07-19 16:28

Rename

#!/usr/bin/perl
# signkey.cgi
# Sign a key, after asking the user if he is sure

require './gnupg-lib.pl';
&ReadParse();

@keys = &list_keys();
$key = $keys[$in{'idx'}];
@secrets = grep { $_->{'secret'} } @keys;
($secret) = grep { defined(&signkey_passphrase($_)) } @secrets;
$secret ||= $secrets[0];

&ui_print_header(undef, $text{'signkey_title'}, "");
$keytext = "<tt>".&html_escape($key->{'name'}->[0])."</tt>";

if ($in{'confirm'}) {
	# Do it!
	$secret || &error($text{'gnupg_esignpass'});
	$pass = &signkey_passphrase($secret);
	defined($pass) || &error($text{'gnupg_esignpass'}.". ".
		&text('gnupg_canset', "/gnupg/edit_key.cgi?idx=$secret->{'index'}").".");
	$trust = $in{'trust'} =~ /^[0-3]$/ ? $in{'trust'} : 0;
	if (&gpg_supports_option("--quick-sign-key")) {
		# Use GnuPG's unattended signing mode to avoid hanging on prompt changes.
		$fpr = &key_primary_fingerprint($key);
		$was_signed = &key_signed_by($key, $secret);
		if ($was_signed) {
			print "",&text('signkey_already', $keytext),"\n";
			}
		elsif (!$fpr) {
			print "",&text('signkey_failed', $keytext,
				"<pre>Unable to determine key fingerprint</pre>"),"\n";
			}
		else {
			$cmd = "$gpgpath --batch --yes --no-tty ".
			 "--pinentry-mode loopback ".
			 "--passphrase-file ".quotemeta(&signkey_passphrase_file($secret))." ".
			 "--local-user ".quotemeta($secret->{'key'})." ".
			 "--default-cert-level ".quotemeta($trust)." ".
			 "--quick-sign-key ".quotemeta($fpr);
			&clean_language();
			($out, $timed_out) = &backquote_with_timeout("$cmd 2>&1", 60);
			&reset_environment();
			$is_signed = &key_signed_by($key, $secret);
			if ($is_signed) {
				print "",&text('signkey_success', $keytext),"\n";
				}
			else {
				$out ||= $timed_out ? "Timed out waiting for GnuPG" : "";
				print "",&text('signkey_failed', $keytext,
					"<pre>".&html_escape($out)."</pre>"),"\n";
				}
			}
		}
	else {
		# Older GnuPG fallback.
		$seen_pass = 0;
		$keyid = &key_edit_id($key);
		$cmd = "$gpgpath --edit-key ".quotemeta($keyid);
		($fh, $fpid) = &foreign_call("proc", "pty_process_exec", $cmd);
		&wait_for($fh, "command>", "gpg>");
		syswrite($fh, "sign\n");
		while(1) {
			$rv = &wait_for($fh, "really sign all",
					'really sign\?', "already",
					"your selection", "your decision",
					"passphrase", "nothing to sign",
					"command>", "gpg>",
					"(error|failed).*", "expire at the same time");
			sleep(1);
			if ($rv == 0 || $rv == 1) {
				syswrite($fh, "y\n");
				}
			elsif ($rv == 2 || $rv == 6) {
				print "",&text('signkey_already', $keytext),"\n";
				last;
				}
			elsif ($rv == 3 || $rv == 4) {
				syswrite($fh, $trust."\n");
				}
			elsif ($rv == 5) {
				if ($seen_pass++) {
					print "",&text('signkey_failed',
					 $keytext,
					 "<pre>".&html_escape($wait_for_input)."</pre>"),"\n";
					last;
					}
				syswrite($fh, "$pass\n");
				}
			elsif ($rv == 7 || $rv == 8) {
				print "",&text('signkey_success', $keytext),"\n";
				last;
				}
			elsif ($rv == 9) {
				print "",&text('signkey_failed',
				 $keytext,
				 "<pre>".&html_escape($wait_for_input)."</pre>"),"\n";
				last;
				}
			elsif ($rv == 10) {
				syswrite($fh, "y\n");
				}
			else {
				# Unknown response!
				last;
				}
			}
		syswrite($fh, "quit\n");
		$rv = &wait_for($fh, "save changes");
		if ($rv == 0) {
			syswrite($fh, "y\n");
			sleep(1);
			}
		close($fh);
		}
	}
else {
	# Ask the user if he is sure
	$email = $key->{'email'}->[0] ?
		 "&lt;<tt>".&html_escape($key->{'email'}->[0])."</tt>&gt;" : "";
	print &ui_confirmation_form("signkey.cgi", 
	 &text('signkey_confirm', $keytext, $email,
	 "<tt>".&key_fingerprint($key)."</tt>"),
	 [ [ "idx", $key->{'index'} ] ],
	 [ [ "confirm", $text{'key_sign'} ] ],
	 $text{'signkey_trustlevel'}." ".
	 &ui_select("trust", 0,
		 [ map { [ $_, $text{'signkey_trust'.$_} ] } (0..3) ])
	 );
	}

&ui_print_footer("list_keys.cgi", $text{'keys_return'},
	"", $text{'index_return'});

# key_signed_by(&key, &signer)
# Returns 1 if the key already has a signature from the signing key.
sub key_signed_by
{
my ($key, $signer) = @_;
my $fpr = &key_primary_fingerprint($key);
return 0 if (!$fpr);
&clean_language();
my $out = &backquote_command("$gpgpath --with-colons --list-sigs ".
			     quotemeta($fpr)." 2>/dev/null");
&reset_environment();
foreach my $line (split(/\r?\n/, $out)) {
	next if ($line !~ /^sig:/);
	my @fields = split(/:/, $line, -1);
	return 1 if (&key_matches_id($fields[4], $signer));
	return 1 if ($fields[12] && &key_matches_id($fields[12], $signer));
	}
return 0;
}

# signkey_passphrase(&key)
# Returns the stored passphrase for the signing key, or undef if unavailable.
sub signkey_passphrase
{
my ($key) = @_;
my $file = &signkey_passphrase_file($key);
open(PASS, "<", $file) || return undef;
my $pass = <PASS>;
close(PASS);
chomp($pass);
return $pass;
}

# signkey_passphrase_file(&key)
# Returns the stored passphrase file, accepting fingerprint, key ID and legacy
# generic filenames so GnuPG can read the same file Usermin found.
sub signkey_passphrase_file
{
my ($key) = @_;
my @files;
if ($key && $key->{'key'}) {
	push(@files, "$user_module_config_directory/pass.$key->{'key'}");
	if ($key->{'key'} =~ /([A-F0-9]{16})$/i) {
		push(@files, "$user_module_config_directory/pass.$1");
		}
	if ($key->{'key'} =~ /([A-F0-9]{8})$/i) {
		push(@files, "$user_module_config_directory/pass.$1");
		}
	}
push(@files, "$user_module_config_directory/pass");
foreach my $file (@files) {
	return $file if (-r $file);
	}
return $key && $key->{'key'} ? &get_passphrase_file($key) : $files[-1];
}

# key_primary_fingerprint(&key)
# Returns the primary key fingerprint without spaces, or undef if not available.
sub key_primary_fingerprint
{
my ($key) = @_;
my $fpr = $key->{'key'} =~ /^[A-F0-9]{40}$/i ? $key->{'key'} :
					    &key_fingerprint($key);
$fpr =~ s/\s+//g;
return $fpr =~ /^[A-F0-9]{40}$/i ? $fpr : undef;
}

# key_edit_id(&key)
# Returns the most reliable key identifier for the older --edit-key fallback.
sub key_edit_id
{
my ($key) = @_;
return &key_primary_fingerprint($key) || $key->{'key'} || $key->{'name'}->[0];
}

# gpg_supports_option(option)
# Returns 1 if the installed GnuPG supports a command or option.
sub gpg_supports_option
{
my ($option) = @_;
my $opts = &backquote_command("$gpgpath --dump-options 2>/dev/null");
return $opts =~ /^\Q$option\E$/m;
}