[git] GPGME - branch, ben/howto-update-02, updated. gpgme-1.10.0-167-gf9159b1
by Ben McGinnes
cvs at cvs.gnupg.org
Tue Mar 27 03:33:56 CEST 2018
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "GnuPG Made Easy".
The branch, ben/howto-update-02 has been updated
via f9159b1d75d3209b1c22bbb0ed4472800b60a522 (commit)
via 1b5da37a47ceef41545e0b2474738613f36be949 (commit)
from 5b32efbaf37920b2e99d4bb87cb383b2809b1688 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit f9159b1d75d3209b1c22bbb0ed4472800b60a522
Author: Ben McGinnes <ben at adversary.org>
Date: Tue Mar 27 12:29:08 2018 +1100
example: key creation
* Script to generate a new key with encryption subkey taking input
from interactive prompts.
* Will also take a passphrase via pinentry and uses passphrase caching
of five minutes when used in conjunction with the temp homedir
script.
diff --git a/lang/python/examples/howto/create-key.py b/lang/python/examples/howto/create-key.py
new file mode 100755
index 0000000..429ab1f
--- /dev/null
+++ b/lang/python/examples/howto/create-key.py
@@ -0,0 +1,95 @@
+#!/usr/bin/env python3
+# -*- coding: utf-8 -*-
+
+from __future__ import absolute_import, division, unicode_literals
+
+# Copyright (C) 2018 Ben McGinnes <ben at gnupg.org>
+#
+# This program is free software; you can redistribute it and/or modify it under
+# the terms of the GNU General Public License as published by the Free Software
+# Foundation; either version 2 of the License, or (at your option) any later
+# version.
+#
+# This program is free software; you can redistribute it and/or modify it under
+# the terms of the GNU Lesser General Public License as published by the Free
+# Software Foundation; either version 2.1 of the License, or (at your option)
+# any later version.
+#
+# This program is distributed in the hope that it will be useful, but WITHOUT
+# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
+# FOR A PARTICULAR PURPOSE. See the GNU General Public License and the GNU
+# Lesser General Public Licensefor more details.
+#
+# You should have received a copy of the GNU General Public License and the GNU
+# Lesser General Public along with this program; if not, see
+# <http://www.gnu.org/licenses/>.
+
+import gpg
+import os.path
+
+print("""
+This script generates a new key which does not expire.
+
+The gpg-agent and pinentry are invoked to set the passphrase.
+""")
+
+c = gpg.Context()
+
+homedir = input("Enter the GPG configuration directory path (optional): ")
+uid_name = input("Enter the name of the user ID: ")
+uid_email = input("Enter the email address of the user ID: ")
+uid_cmnt = input("Enter a comment to include (optional): ")
+key_algo = input("Enter the key algorithm, RSA or DSA (default is RSA): ")
+key_size = input("Enter the key size (2048-4096, default is 2048): ")
+
+if homedir.startswith("~"):
+ if os.path.exists(os.path.expanduser(homedir)) is True:
+ c.home_dir = os.path.expanduser(homedir)
+ else:
+ pass
+elif os.path.exists(homedir) is True:
+ c.home_dir = homedir
+else:
+ pass
+
+if len(uid_cmnt) > 0:
+ userid = "{0} ({1}) <{2}>".format(uid_name, uid_cmnt, uid_email)
+else:
+ userid = "{0} <{2}>".format(uid_name, uid_email)
+
+if key_algo.lower() == "dsa":
+ ka = "dsa"
+else:
+ ka = "rsa"
+
+if len(key_size) == 4:
+ try:
+ ks0 = int(key_size)
+ except ValueError:
+ ks0 = None
+ if ks0 is None:
+ ks = "2048"
+ else:
+ if ks0 < 2048:
+ ks = "2048"
+ elif ka == "dsa" and ks0 > 3072:
+ ks = "3072"
+ elif ka == "rsa" and ks0 > 4096:
+ ks = "4096"
+ else:
+ ks = key_size
+else:
+ ks = "2048"
+
+keyalgo = "{0}{1}".format(ka, ks)
+
+newkey = c.create_key(userid, algorithm=keyalgo, expires=False,
+ passphrase=True, certify=True)
+key = c.get_key(newkey.fpr, secret=True)
+
+if ka == "rsa":
+ newsub = c.create_subkey(key, algorithm=keyalgo, expires=False,
+ passphrase=True, encrypt=True)
+else:
+ newsub = c.create_subkey(key, expires=False, passphrase=True,
+ encrypt=True)
commit 1b5da37a47ceef41545e0b2474738613f36be949
Author: Ben McGinnes <ben at adversary.org>
Date: Tue Mar 27 12:16:29 2018 +1100
script: temp homedir config
* added passphrase caching of 5 minutes.
diff --git a/lang/python/examples/howto/temp-homedir-config.py b/lang/python/examples/howto/temp-homedir-config.py
index 368cace..ddd7932 100755
--- a/lang/python/examples/howto/temp-homedir-config.py
+++ b/lang/python/examples/howto/temp-homedir-config.py
@@ -69,6 +69,10 @@ personal-digest-preferences SHA512 SHA384 SHA256 SHA224 RIPEMD160 SHA1
personal-compress-preferences ZLIB BZIP2 ZIP Uncompressed
"""
+agentconf = """# gpg-agent.conf settings for key generation:
+default-cache-ttl 300
+"""
+
if len(sys.argv) == 1:
print(intro)
new_homedir = input("Enter the temporary gnupg homedir name: ")
@@ -107,9 +111,12 @@ else:
print("Creating the {0} directory.".format(nh))
os.mkdir(nh)
os.chmod(nh, 0o700)
- with open("{0}/{1}".format(nh, "gpg.conf"), "w") as f:
- f.write(gpgconf)
+ with open("{0}/{1}".format(nh, "gpg.conf"), "w") as f1:
+ f1.write(gpgconf)
os.chmod("{0}/{1}".format(nh, "gpg.conf"), 0o600)
+ with open("{0}/{1}".format(nh, "gpg-agent.conf"), "w") as f2:
+ f2.write(gpgconf)
+ os.chmod("{0}/{1}".format(nh, "gpg-agent.conf"), 0o600)
print("""You may now use the {0} directory as an alternative GPG homedir:
gpg --homedir {0}
-----------------------------------------------------------------------
Summary of changes:
lang/python/examples/howto/create-key.py | 95 +++++++++++++++++++++++
lang/python/examples/howto/temp-homedir-config.py | 11 ++-
2 files changed, 104 insertions(+), 2 deletions(-)
create mode 100755 lang/python/examples/howto/create-key.py
hooks/post-receive
--
GnuPG Made Easy
http://git.gnupg.org
More information about the Gnupg-commits
mailing list