jlengrand/jreleaser
1
0
Fork 0
mirror of https://github.com/jlengrand/jreleaser.git synced 2026-03-10 08:31:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

[#152] check if a given key can be used for signing

Browse Source
This commit is contained in:
Benjamin Marwell
2021-05-19 15:31:55 +02:00
parent cdb2e5fed8
commit 902fc82780
1 changed files with 27 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

33
core/jreleaser-utils/src/main/java/org/jreleaser/util/signing/Keyring.java
View File

@@ -17,6 +17,11 @@
*/
package org.jreleaser.util.signing;
import java.io.IOException;
import java.io.InputStream;
import java.util.Collections;
import java.util.Iterator;
import org.bouncycastle.bcpg.PublicKeyAlgorithmTags;
import org.bouncycastle.openpgp.PGPException;
import org.bouncycastle.openpgp.PGPPublicKey;
import org.bouncycastle.openpgp.PGPPublicKeyRing;
@@ -27,11 +32,6 @@ import org.bouncycastle.openpgp.PGPSecretKeyRingCollection;
import org.bouncycastle.openpgp.operator.KeyFingerPrintCalculator;
import org.bouncycastle.openpgp.operator.bc.BcKeyFingerprintCalculator;
import java.io.IOException;
import java.io.InputStream;
import java.util.Collections;
import java.util.Iterator;
/**
* Adapted from {@code name.neuhalfen.projects.crypto.bouncycastle.openpgp.keys.keyrings.InMemoryKeyring}
* Original author: Jens Neuhalfen
@@ -109,7 +109,7 @@ public abstract class Keyring {
Iterator<PGPPublicKey> keyIter = keyRing.getPublicKeys();
while (keyIter.hasNext()) {
PGPPublicKey key = keyIter.next();
if (key.isEncryptionKey()) {
if (isSigningKey(key)) {
return key;
}
}
@@ -117,4 +117,25 @@ public abstract class Keyring {
throw new SigningException("Did not find public key for signing.");
}
/**
* Returns {@code true} if the given key can be used for signing.
*
* <p>There is no Method key.isSigningKey(), and encryption does not always mean signing.
* The algorithms here need to be kept in sync with {@code org.bouncycastle.openpgp.operator.jcajce.OperatorHelper#createSignature}.
*
* @param key they key to check if it is usable for signing.
* @return {@code true} if the given key can be used for signing.
*/
private static boolean isSigningKey(PGPPublicKey key) {
final int algorithm = key.getAlgorithm();
return algorithm == PublicKeyAlgorithmTags.EDDSA ||
algorithm == PublicKeyAlgorithmTags.ECDSA ||
algorithm == PublicKeyAlgorithmTags.ELGAMAL_GENERAL ||
algorithm == PublicKeyAlgorithmTags.ELGAMAL_ENCRYPT ||
algorithm == PublicKeyAlgorithmTags.RSA_SIGN ||
algorithm == PublicKeyAlgorithmTags.RSA_GENERAL ||
algorithm == PublicKeyAlgorithmTags.DSA;
}
}