@ -59,8 +59,10 @@ import org.bouncycastle.openpgp.PGPSignatureGenerator;
import org.bouncycastle.openpgp.operator.jcajce.JcaPGPContentSignerBuilder ;
import org.bouncycastle.openpgp.operator.jcajce.JcaPGPContentSignerBuilder ;
import org.bouncycastle.openpgp.operator.jcajce.JcePBESecretKeyDecryptorBuilder ;
import org.bouncycastle.openpgp.operator.jcajce.JcePBESecretKeyDecryptorBuilder ;
import org.eclipse.jgit.annotations.NonNull ;
import org.eclipse.jgit.annotations.NonNull ;
import org.eclipse.jgit.annotations.Nullable ;
import org.eclipse.jgit.api.errors.CanceledException ;
import org.eclipse.jgit.api.errors.CanceledException ;
import org.eclipse.jgit.api.errors.JGitInternalException ;
import org.eclipse.jgit.api.errors.JGitInternalException ;
import org.eclipse.jgit.errors.UnsupportedCredentialItem ;
import org.eclipse.jgit.internal.JGitText ;
import org.eclipse.jgit.internal.JGitText ;
import org.eclipse.jgit.lib.CommitBuilder ;
import org.eclipse.jgit.lib.CommitBuilder ;
import org.eclipse.jgit.lib.GpgSignature ;
import org.eclipse.jgit.lib.GpgSignature ;
@ -90,27 +92,50 @@ public class BouncyCastleGpgSigner extends GpgSigner {
}
}
@Override
@Override
public void sign ( @NonNull CommitBuilder commit , String gpgSigningKey ,
public boolean canLocateSigningKey ( @Nullable String gpgSigningKey ,
@NonNull PersonIdent committer ,
PersonIdent committer , CredentialsProvider credentialsProvider )
CredentialsProvider credentialsProvider ) throws CanceledException {
throws CanceledException {
try ( BouncyCastleGpgKeyPassphrasePrompt passphrasePrompt = new BouncyCastleGpgKeyPassphrasePrompt (
credentialsProvider ) ) {
BouncyCastleGpgKey gpgKey = locateSigningKey ( gpgSigningKey ,
committer , passphrasePrompt ) ;
return gpgKey ! = null ;
} catch ( PGPException | IOException | URISyntaxException e ) {
return false ;
}
}
private BouncyCastleGpgKey locateSigningKey ( @Nullable String gpgSigningKey ,
PersonIdent committer ,
BouncyCastleGpgKeyPassphrasePrompt passphrasePrompt )
throws CanceledException , UnsupportedCredentialItem , IOException ,
PGPException , URISyntaxException {
if ( gpgSigningKey = = null | | gpgSigningKey . isEmpty ( ) ) {
if ( gpgSigningKey = = null | | gpgSigningKey . isEmpty ( ) ) {
gpgSigningKey = committer . getEmailAddress ( ) ;
gpgSigningKey = committer . getEmailAddress ( ) ;
}
}
BouncyCastleGpgKeyLocator keyHelper = new BouncyCastleGpgKeyLocator (
gpgSigningKey , passphrasePrompt ) ;
return keyHelper . findSecretKey ( ) ;
}
@Override
public void sign ( @NonNull CommitBuilder commit ,
@Nullable String gpgSigningKey , @NonNull PersonIdent committer ,
CredentialsProvider credentialsProvider ) throws CanceledException {
try ( BouncyCastleGpgKeyPassphrasePrompt passphrasePrompt = new BouncyCastleGpgKeyPassphrasePrompt (
try ( BouncyCastleGpgKeyPassphrasePrompt passphrasePrompt = new BouncyCastleGpgKeyPassphrasePrompt (
credentialsProvider ) ) {
credentialsProvider ) ) {
BouncyCastleGpgKeyLocator keyHelper = new BouncyCastleGpgKeyLocator (
BouncyCastleGpgKey gpgKey = locateSigningKey ( gpgSigningKey ,
gpgSigningKey , passphrasePrompt ) ;
committer , passphrasePrompt ) ;
BouncyCastleGpgKey gpgKey = keyHelper . findSecretKey ( ) ;
PGPSecretKey secretKey = gpgKey . getSecretKey ( ) ;
PGPSecretKey secretKey = gpgKey . getSecretKey ( ) ;
if ( secretKey = = null ) {
if ( secretKey = = null ) {
throw new JGitInternalException (
throw new JGitInternalException (
JGitText . get ( ) . unableToSignCommitNoSecretKey ) ;
JGitText . get ( ) . unableToSignCommitNoSecretKey ) ;
}
}
char [ ] passphrase = passphrasePrompt
char [ ] passphrase = passphrasePrompt . getPassphrase (
. getPassphrase ( secretKey . getPublicKey ( ) . getFingerprint ( ) ,
secretKey . getPublicKey ( ) . getFingerprint ( ) ,
gpgKey . getOrigin ( ) ) ;
gpgKey . getOrigin ( ) ) ;
PGPPrivateKey privateKey = secretKey
PGPPrivateKey privateKey = secretKey
. extractPrivateKey ( new JcePBESecretKeyDecryptorBuilder ( )
. extractPrivateKey ( new JcePBESecretKeyDecryptorBuilder ( )
. setProvider ( BouncyCastleProvider . PROVIDER_NAME )
. setProvider ( BouncyCastleProvider . PROVIDER_NAME )