1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
|
Return-Path: <obnam-dev-bounces@obnam.org>
X-Original-To: distix@pieni.net
Delivered-To: distix@pieni.net
Received: from bagpuss.pepperfish.net (bagpuss.pepperfish.net [148.251.8.16])
(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
(No client certificate requested)
by pieni.net (Postfix) with ESMTPS id EE04F20BA7
for <distix@pieni.net>; Fri, 25 Sep 2015 07:38:15 +0200 (CEST)
Received: from platypus.pepperfish.net (unknown [10.112.100.20])
by bagpuss.pepperfish.net (Postfix) with ESMTP id 607F9B9A;
Fri, 25 Sep 2015 06:38:15 +0100 (BST)
Received: from ip6-localhost ([::1] helo=platypus.pepperfish.net)
by platypus.pepperfish.net with esmtp (Exim 4.80 #2 (Debian))
id 1ZfLi3-0006vo-8K; Fri, 25 Sep 2015 06:38:15 +0100
Received: from inmail0 ([10.112.100.10] helo=mx0.pepperfish.net)
by platypus.pepperfish.net with esmtp (Exim 4.80 #2 (Debian))
id 1ZfLi0-0006vf-UG
for <obnam-dev@obnam.org>; Fri, 25 Sep 2015 06:38:13 +0100
Received: from mail-io0-f181.google.com ([209.85.223.181])
by mx0.pepperfish.net with esmtps (TLS1.2:RSA_ARCFOUR_SHA1:128)
(Exim 4.80) (envelope-from <mathstuf@gmail.com>) id 1ZfLhy-0005Qu-Vu
for obnam-dev@obnam.org; Fri, 25 Sep 2015 06:38:12 +0100
Received: by ioiz6 with SMTP id z6so100001880ioi.2
for <obnam-dev@obnam.org>; Thu, 24 Sep 2015 22:37:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
h=from:to:cc:subject:date:message-id:in-reply-to:references;
bh=bSFzbmgZf7xZmMfHt2qm1OFY/5vwwLFYXkdswzkK+3s=;
b=gQRMtVpDQWCt2ZhxNbCaLKBNvJAuq9HZZHKMqmGr7xYwHZnqjASBFaAneD+wZbl2eQ
5LjaxKoB3zePznNxNlOfa03QVcVH/xgaEhWm6Mim/wgIAZfX5NhEabc5+bwotXtyLq//
hzeSRpeLxqD6CNLFnaagjHdb6t0HVEdKpN6sAR3tkqI8IfmAP/1yhe6zIGVcNUH0UqOO
cAmVki0EfzeONxW2sgeMKn23SXmZBb1zPRH2LAKe93VzQSU1mQMFHxrOvoHwiO2ty875
Wvrl75xgnWH1sBE6xPIhS48Mpkbayi91SnuZOI340RYxqcnQura0MEYgXb6eS4Xq2763
9+jA==
X-Received: by 10.107.37.132 with SMTP id l126mr4298384iol.92.1443159478801;
Thu, 24 Sep 2015 22:37:58 -0700 (PDT)
Received: from localhost (26.sub-70-209-128.myvzw.com. [70.209.128.26])
by smtp.gmail.com with ESMTPSA id y6sm751799igl.17.2015.09.24.22.37.56
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Thu, 24 Sep 2015 22:37:57 -0700 (PDT)
From: Ben Boeckel <mathstuf@gmail.com>
To: obnam-dev@obnam.org
Date: Fri, 25 Sep 2015 01:37:50 -0400
Message-Id: <1443159474-27126-1-git-send-email-mathstuf@gmail.com>
X-Mailer: git-send-email 2.5.3
In-Reply-To: <1441948936-12526-1-git-send-email-mathstuf@gmail.com>
References: <1441948936-12526-1-git-send-email-mathstuf@gmail.com>
X-Spam-Score: -0.5
X-Spam-Score-int: -4
X-Spam-Bar: /
X-Scanned-By: pepperfish.net, Fri, 25 Sep 2015 06:38:12 +0100
X-Spam-Report: Content analysis details: (-0.5 points)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 PPF_FROM_CONTAINS_MAIL The From header contains 'mail'
1.2 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(mathstuf[at]gmail.com)
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust [209.85.223.181 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature,
not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
X-ACL-Warn: message may be spam
X-Scan-Signature: 8887c701ef4198506b295ef73f0e38b1
Cc: Ben Boeckel <mathstuf@gmail.com>
Subject: [PATCH v4 0/4] GPGHOMEDIR improvements
X-BeenThere: obnam-dev@obnam.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Obnam development discussions <obnam-dev-obnam.org>
List-Unsubscribe: <http://listmaster.pepperfish.net/cgi-bin/mailman/listinfo/obnam-dev-obnam.org>,
<mailto:obnam-dev-request@obnam.org?subject=unsubscribe>
List-Archive: <http://listmaster.pepperfish.net/pipermail/obnam-dev-obnam.org>
List-Post: <mailto:obnam-dev@obnam.org>
List-Help: <mailto:obnam-dev-request@obnam.org?subject=help>
List-Subscribe: <http://listmaster.pepperfish.net/cgi-bin/mailman/listinfo/obnam-dev-obnam.org>,
<mailto:obnam-dev-request@obnam.org?subject=subscribe>
Sender: obnam-dev-bounces@obnam.org
Errors-To: obnam-dev-bounces@obnam.org
These seem related enough to warrant bundling it all together. I've place the
refactoring and fix commits at the base to make cherry-picking a subset easier.
First, I refactored _gpg_pipe to use _gpg since all it does is set up
--passphrase-fd and the base flags are the same.
Second, I added support for gpghome to the symmetric functions and fixed the
tests because if my USB key is not plugged in, the symlinks in the default gpg
keyring are broken and gpg needs to read *something*, but this fails.
The third patch fixes the test suite for symmetric keys to use a
guaranteed-to-not-be-broken keyring by creating a temporary directory for it.
The last commit implements the gnupghome configuration with tests, now also
passing it to the symmetric key functions.
Thanks,
Ben Boeckel (4):
encryption: refactor _gpg_pipe to use _gpg
encryption: support custom gpghome in symmetric key functions
encryption_tests: make robust against bad default keyrings
encryption_plugin: add a gnupghome configuration option
obnam.1.in | 5 +++++
obnamlib/encryption.py | 28 +++++++++++-----------------
obnamlib/encryption_tests.py | 15 ++++++++++++---
obnamlib/plugins/encryption_plugin.py | 27 +++++++++++++++++++++------
yarns/0060-encryption.yarn | 16 ++++++++++++++++
yarns/9000-implements.yarn | 26 ++++++++++++++++++++++++++
6 files changed, 91 insertions(+), 26 deletions(-)
--
2.5.3
_______________________________________________
obnam-dev mailing list
obnam-dev@obnam.org
http://listmaster.pepperfish.net/cgi-bin/mailman/listinfo/obnam-dev-obnam.org
|