$nnI<dZddlZddlZddlmZddlmZmZmZddl m Z m Z m Z m Z mZmZddlmZmZiZej(eZdZiZej.eZedd d edd d edd dd dZe j2j5e j2j7ej(j8ede j:e<GddZdZdZ dZ!edgededZ"edgededZ#dZ$edddded fd!d"ded#fd$d%ded&fd'd d$ed(ed)fd*d+d$ed,ed-fd.d/d0ed1fge jJzed2ed3Z&d4Z'd5Z(d6Z)y)7z&commands to sign and verify changesetsN)_)binhexshort)cmdutilerrorhelpmatchpycompat registrar)dateutilprocutilsships-with-hg-coregpgcmd)defaultkeys.*T)rgenericsSigning changes (GPG)c eZdZddZdZdZy)gpgNc6||_|xrd|zxsd|_y)Ns --local-user "%s")pathkey)selfrrs -usr/lib/python3.12/site-packages/hgext/gpg.py__init__z gpg.__init__Ds  93c9Acrcdd|j|jfz}tj||S)Ns%s --sign --detach-sign%s)rrrfilter)rdatagpgcmds rsignzgpg.signHs*-DHH0EEtV,,rcdx}} tjdd\}}tj|d}|j ||j tjdd\}}tj|d}|j ||j d|j ||fz}tjd|}||fD]} | rtj|  g} d \} } |jD]} | jd s| d d} | jd r| jd } ?| jdr)| jdddd} | jdd} y| jds4| jds#| jds| jds| | j| | gz| jdd} d} | | j| | gz| S#t$rYEwxYw#||fD])} | rtj| #t$rY'wxYwwxYw)z&returns of the good and bad signaturesNshg-gpg-s.sig)prefixsuffixwbs.txts1%s --logger-fd 1 --status-fd 1 --verify "%s" "%s"r)NNs[GNUPG:] sVALIDSIG ERRSIG sGOODSIGEXPSIG EXPKEYSIGBADSIG)r mkstemposfdopenwritecloserrrunlinkOSError splitlines startswithsplitappend)rrsigsigfiledatafilefdfpr retfkeysr fingerprintls rverifyz gpg.verifyLs,!!( "***WMKB2t$B HHSM HHJ#++:gNLB2t$B HHTN HHJHII //#v.Cx( ! ) %[!A<< ,!"A||K(ggim i(ggdA&r* 3"  Z(<< *<< -<< *?KK{m 34ggdA&" -". ? KK{m+ , ; x( !  )sBC HH  HHI&H>=I> I I I I)N)__name__ __module__ __qualname__rr!rDrrrrCsB-8rrc |jdd}|jd}|s|jdd}t||S)zcreate a new gpg instancerrrr)configgetr)uioptsgpgpathgpgkeys rnewgpgrPs?ii'G XXe_F 66* w rc#PKd}|jd}t|jD]?}dt|z}||j |j |D]}|A d}||j ||D]}|y#t$rYywxYww)zb walk over every sigs, yields a couple ((node, version, sig), (filename, linenumber)) c3^Kd}|D]"}|s|jdd||ff|dz }$yw)Nr)r+)r8)fileitercontextlnrCs r parsefilezsigwalk..parsefiles> A774#gr]3 3 !GB s+-.hgsigss .hgsigs|%s localsigsN)filereversedheadsrreadr6vfsIOError)reporWflrfnitems rsigwalkres  : B bhhj ! U1X %bggaj335r:DJ;" dhhrlB/DJ0    s*A0B&3#BB& B# B&"B##B&cJ|\}}|\}}} d||fz} t|}t|||} tj| } |j | | } g} | D]}|ddk(r#|j t d| |dfz.|ddk(r#|j t d| |dfzY|dd k(r#|j t d | |dfzn*|dd k(r"|j t d | |dfz| j|d|d|d f| S)zget the keys who signed a datas%s:%drr(s%s Unknown key ID "%s" rSr.s%s Bad signature from "%s" r+r,s1%s Note: Signature has expired (signed by: "%s") r-s0%s Note: This key has expired (signed by: "%s") r*)rnode2txtbinascii a2b_base64rDr2rr9)rLr`mygpgsigdatarUrcrVnodeversionr:r#rrA validkeysrs rgetkeysrosZ FB D'3 R F t9D D$ (D   c "C <<c "DI q6Y  HHQ45Q8HH I  q6Y  HHQ89VSV"?@@A HH]fRmQ%77 8*  GGA45R@ A  sC77(D#"D#ssigcheckshg sigcheck REVct|}|j|}t|}g}t|D]4\}}|\}} } ||k(st |||||} | s$|j | 6|s'|j tdt|zy|j tdt|z|D] } |j dt|| z"y)z@verify all the signatures there may be for a particular revisionsno valid signature for %s Ns%s is signed by: s %s ) rPrsrreroryr2rrr{) rLr`rwrjhexrevrArrUrlrmr:r~rs rsigcheckrs 2JE ++c C XF D  g!gs 6>D%w7A A '  12U3Z?@HHQ$ %c 23 F2sO+,rcH|\}}}|jd|}|rd||fzS|S)z/associate a string to a key (username, comment)rs%s (%s))rJ)rLrkeyiduserrBcomments rr{r{s5"E4ii ,GT7O++ rssignllocalsmake the signature localfforces$sign even if the sigfile is modifiedrs no-commits'do not commit the sigfile after signingksthe key id to sign withsIDmmessagesuse text as commit messagesTEXTeseditFs invoke editor on commit messagesshg sign [OPTION]... [REV]...cn|j5t||g|i|cdddS#1swYyxYw)atadd a signature for the current or given revision If no revision is given, the parent of the working directory is used, or tip if no revision is checked out. The ``gpg.cmd`` config setting can be used to specify the command to run. A default key can be specified with ``gpg.key``. See :hg:`help dates` for a list of formats valid for -d/--date. N)wlock_dosign)rLr`r|rMs rr!r! s+< r4/$/$/ s+4c  t|fi|}tj|}d}d}|jd}|rt j ||d<|r|Dcgc]}|j |} }n|jjD cgc]} | |jk7s| } } t| dkDrtjtd| s|jjg} | D]}t!|} |j#td|jj%|t'|fzt)|||} |j+| } | stjtdt-j.| } | j1dd} |d | || fzz }|d r|j2j5d |y|d s\t7j8d g}t;|j=|ddr)tjtdtd|j?d d}|j#||jAd |jvr9|jjC|5|djEd gddd|dry|d}|s+djG| Dcgc]}dt'|zc}} tIjJddditjL|}|jO||d|d|ycc}wcc} w#1swYxYwcc}w#tP$r-}tjtjR|d}~wwxYw)N0rsdaterSs6uncommitted merge - please provide a specific revisionssigning %d:%s serror while signing s %s %s %s rrYrrXT)r unknownignoreds#working copy of .hgsigs is changed splease commit .hgsigs manually)hintsabs no_commitrs Added signature for changeset %seditformsgpg.signsuser)r editorrH)*rPr byteskwargsrKr parsedatersdirstateparentsnullidlenrAbortrrvtiprr2rwrrgr!rh b2a_base64replacer^r9r exactanystatuswvfsr3changing_filesaddjoinrgetcommiteditor strkwargscommit ValueErrorbytestr)rLr`r|rMrjsigver sigmessagedater}nodesrlhexnoderr:msigssigsfilemessagerinsts rrr.s? 2  E    %D FJ 88G D  **40W  )-.AQ."]]224 4T 8KD4   u:>++KL ^^'')*E a& %&$..*<* ZL) t{{d{C D++8989  yyU+H NN: NN& ]] ) )$ / JNNJ< (0 L:G **EJ KU 058 ;U K 2((   $,$6$6t$<  T']DMv  u/ P0 / L 2kk(**40112s=L2L7#L7L<M+AM <M N(M>>Ncd|dk(rdt|zStjtd)zmap a manifest into some textrs%s sunknown signature version)rrrr)r`rlvers rrgrgzs- d{T""kk!89::rctjjtjjtj t dtjt <y)Ns GPG signing)r CATEGORY_ORDERinsertindexcommandCATEGORY_MAINTENANCE_HELP_CATEGORYCATEGORY_NAMES)rLs rextsetuprsD !!'">">?+9D'r)*__doc__rhr0mercurial.i18nrmercurial.noderrr mercurialrrr r r r mercurial.utilsr rcmdtabler testedwith configtable configitemrrrr CATEGORY_HELPrrrPrerorrr{ commitopts2r!rrgrrHrrrs) -    )  H % #  !Y ! !+ .             i//==>'?N#AAH  :D "a m.A9B92 b!./nM-N-0  xq!<=> xq!HIJ    8 9  vsA891U8D z3"? @!G*M wq!DEF  %&#& 0'& 0I2X;9r