signaturecheckwf.cc

Go to the documentation of this file.

/*---------------------------------------------------------------------\
|                          ____ _   __ __ ___                          |
|                         |__  / \ / / . \ . \                         |
|                           / / \ V /|  _/  _/                         |
|                          / /__ | | | | | |                           |
|                         /_____||_| |_| |_|                           |
|                                                                      |
\---------------------------------------------------------------------*/

#include "signaturecheckwf.h"
#include "keyringwf.h"
#include <zypp-core/base/Logger.h>

#include <zypp/ZYppFactory.h>
#include <zypp-core/fs/PathInfo.h>
#include <zypp-media/filecheckexception.h>

namespace zyppng {

  namespace {

    using namespace zyppng::operators;

    struct VerifySignatureLogic {

      VerifySignatureLogic( ContextRef &&zyppCtx, zypp::keyring::VerifyFileContext &&ctx )
        : _zyppCtx( std::move(zyppCtx) )
        , _verifyCtx( std::move(ctx) ) { }

      MaybeAwaitable<expected<zypp::keyring::VerifyFileContext>> execute () {

        const zypp::Pathname & sig { _verifyCtx.signature() };
        if ( not ( sig.empty() || zypp::PathInfo(sig).isExist() ) ) {
          return makeReadyTask( expected<zypp::keyring::VerifyFileContext>::error(ZYPP_EXCPT_PTR( zypp::SignatureCheckException("Signature " + sig.asString() + " not found.") )));
        }

        MIL << "Checking " << _verifyCtx.file ()<< " file validity using digital signature.." << std::endl;

        return KeyRingWorkflow::verifyFileSignature( _zyppCtx, zypp::keyring::VerifyFileContext( _verifyCtx ) )
         | []( auto &&res  ) {
             if ( not res.first  )
               return expected<zypp::keyring::VerifyFileContext>::error( ZYPP_EXCPT_PTR( zypp::SignatureCheckException( "Signature verification failed for "  + res.second.file().basename() ) ) );
             return expected<zypp::keyring::VerifyFileContext>::success ( std::move( res.second ) );
           };
      }

    protected:
      ContextRef _zyppCtx;
      zypp::keyring::VerifyFileContext _verifyCtx;
    };
  }

  namespace SignatureFileCheckWorkflow {
    MaybeAwaitable<expected<zypp::keyring::VerifyFileContext> > verifySignature(ContextRef ctx, zypp::keyring::VerifyFileContext context )
    {
      VerifySignatureLogic impl( std::move(ctx), std::move(context) );
      zypp_co_return zypp_co_await( impl.execute () );
    }
  }
}