crans/cranspasswords
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

--check-keys -v plus verbeux

Browse source
This commit is contained in:
Vincent Le Gallic 2013-07-28 17:58:50 +02:00
parent a97aa5eea3
commit 5263206f29
1 changed files with 10 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

12
client.py
View file

@ -187,6 +187,8 @@ def update_keys():
def check_keys(): def check_keys():
"""Vérifie les clés existantes""" """Vérifie les clés existantes"""
if VERB:
print("M : l'uid correspond au mail du fingerprint\nC : confiance OK (inclu la vérification de non expiration).\n")
keys = all_keys() keys = all_keys()
gpg = gnupg.GPG(gnupghome='~/.gnupg') gpg = gnupg.GPG(gnupghome='~/.gnupg')
localkeys = gpg.list_keys() localkeys = gpg.list_keys()
@ -194,24 +196,30 @@ def check_keys():
for (mail, fpr) in keys.values(): for (mail, fpr) in keys.values():
if fpr: if fpr:
if VERB: if VERB:
print((u"Checking %s" % (mail)).encode("utf-8")) print((u"Checking %s… " % (mail)).encode("utf-8"), end="")
corresponds = [key for key in localkeys if key["fingerprint"] == fpr] corresponds = [key for key in localkeys if key["fingerprint"] == fpr]
# On vérifie qu'on possède la clé… # On vérifie qu'on possède la clé…
if len(corresponds) == 1: if len(corresponds) == 1:
correspond = corresponds[0] correspond = corresponds[0]
# …qu'elle correspond au mail… # …qu'elle correspond au mail…
if mail.lower() in sum([re.findall("<(.*)>", uid.lower()) for uid in correspond["uids"]], []): if mail.lower() in sum([re.findall("<(.*)>", uid.lower()) for uid in correspond["uids"]], []):
if VERB:
print("M ", end="")
meaning, trustvalue = GPG_TRUSTLEVELS[correspond["trust"]] meaning, trustvalue = GPG_TRUSTLEVELS[correspond["trust"]]
# … et qu'on lui fait confiance # … et qu'on lui fait confiance
if not trustvalue: if not trustvalue:
print((u"--> Fail on %s:%s\nLa confiance en la clé est : %s" % (meaning,)).encode("utf-8")) print((u"--> Fail on %s:%s\nLa confiance en la clé est : %s" % (fpr, mail, meaning,)).encode("utf-8"))
failed = True failed = True
elif VERB:
print("C ", end="")
else: else:
print((u"--> Fail on %s:%s\n!! Le fingerprint et le mail ne correspondent pas !" % (fpr, mail)).encode("utf-8")) print((u"--> Fail on %s:%s\n!! Le fingerprint et le mail ne correspondent pas !" % (fpr, mail)).encode("utf-8"))
failed = True failed = True
else: else:
print((u"--> Fail on %s:%s\nPas (ou trop) de clé avec ce fingerprint." % (fpr, mail)).encode("utf-8")) print((u"--> Fail on %s:%s\nPas (ou trop) de clé avec ce fingerprint." % (fpr, mail)).encode("utf-8"))
failed = True failed = True
if VERB:
print("")
return not failed return not failed
def get_recipients_of_roles(roles): def get_recipients_of_roles(roles):