1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
|
module Hbc
module Verify
class Gpg
def self.me?(cask)
cask.gpg
end
attr_reader :cask, :downloaded_path
def initialize(cask, downloaded_path, command = Hbc::SystemCommand)
@command = command
@cask = cask
@downloaded_path = downloaded_path
end
def available?
return @available unless @available.nil?
@available = self.class.me?(cask) && installed?
end
def installed?
cmd = @command.run("/usr/bin/type",
args: ["-p", "gpg"])
# if `gpg` is found, return its absolute path
cmd.success? ? cmd.stdout : false
end
def fetch_sig(force = false)
unversioned_cask = cask.version.is_a?(Symbol)
cached = cask.metadata_subdir("gpg") unless unversioned_cask
meta_dir = cached || cask.metadata_subdir("gpg", :now, true)
sig_path = meta_dir.join("signature.asc")
curl_download cask.gpg.signature, to: sig_path unless cached || force
sig_path
end
def import_key
args = if cask.gpg.key_id
["--recv-keys", cask.gpg.key_id]
elsif cask.gpg.key_url
["--fetch-key", cask.gpg.key_url.to_s]
end
@command.run!("gpg", args: args)
end
def verify
return unless available?
import_key
sig = fetch_sig
ohai "Verifying GPG signature for #{cask}"
@command.run!("gpg",
args: ["--verify", sig, downloaded_path],
print_stdout: true)
end
end
end
end
|
