Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- added new tests - RemotePharVerifier will abort on openssl files in no pubkey mode - RemotePharVerifier will check other signature methods in no pubkey mode
- Loading branch information
Showing
8 changed files
with
171 additions
and
20 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,8 @@ | ||
| @ECHO OFF | ||
| if "%PHPBIN%" == "" set PHPBIN="@php_bin@" | ||
| if not exist "%PHPBIN%" if "%PHP_PEAR_PHP_BIN%" neq "" goto USE_PEAR_PATH | ||
| GOTO RUN | ||
| :USE_PEAR_PATH | ||
| set PHPBIN="%PHP_PEAR_PHP_BIN%" | ||
| :RUN | ||
| %PHPBIN% "@bin_dir@\phar-verify" %* |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,94 @@ | ||
| #!/usr/bin/env php | ||
| <?php | ||
| /** | ||
| * Verify Phar archive signature using a public key file | ||
| * | ||
| * This file is part of the PharUtil library. | ||
| * @author Krzysztof Kotowicz <kkotowicz at gmail dot com> | ||
| * @package PharUtil | ||
| */ | ||
|
|
||
| // Include the Console_CommandLine package. | ||
| require_once 'Console/CommandLine.php'; | ||
| require_once 'PharUtil/RemotePharVerifier.php'; | ||
|
|
||
| // create the parser | ||
| $parser = new Console_CommandLine(array( | ||
| 'description' => 'Verify Phar archive signature using a public key file', | ||
| 'version' => '@package_version@', | ||
| 'name' => 'phar-verify', | ||
| )); | ||
|
|
||
| $parser->addOption('public', array( | ||
| 'short_name' => '-P', | ||
| 'long_name' => '--public', | ||
| 'action' => 'StoreString', | ||
| 'default' => './cert/pub.pem', | ||
| 'description' => "Public key file (PEM) to verify signature\n(./cert/pub.pem by default)" | ||
| )); | ||
|
|
||
| $parser->addOption('nosign', array( | ||
| 'short_name' => '-n', | ||
| 'long_name' => '--ns', | ||
| 'action' => 'StoreTrue', | ||
| 'description' => 'Archive is not signed, don\'t require an OpenSSL signature' | ||
| )); | ||
|
|
||
| $parser->addOption('temp', array( | ||
| 'short_name' => '-t', | ||
| 'long_name' => '--temp', | ||
| 'action' => 'StoreString', | ||
| 'description' => 'Temporary directory (' . sys_get_temp_dir() . ' by default)', | ||
| )); | ||
|
|
||
| $parser->addArgument('phar', array( | ||
| 'action' => 'StoreString', | ||
| 'description' => "Input Phar archive URI e.g.\n/path/to/local/phar.phar or http://path/to/remote/phar.phar", | ||
| )); | ||
|
|
||
| // run the parser | ||
| try { | ||
| $result = $parser->parse(); | ||
| } catch (Exception $exc) { | ||
| $parser->displayError($exc->getMessage()); | ||
| } | ||
|
|
||
| $options = $result->options; | ||
| $args = $result->args; | ||
|
|
||
| echo $parser->name . ' ' . $parser->version . PHP_EOL . PHP_EOL; | ||
|
|
||
| // validate parameters | ||
| if (substr($args['phar'], -5) !== '.phar') { | ||
| $parser->displayError("Input Phar must have .phar extension, {$args['phar']} given.", 2); | ||
| } | ||
|
|
||
| if ($options['nosign']) { | ||
| $options['public'] = null; // no public key | ||
| } | ||
|
|
||
| if ($options['public']) { | ||
| if (!file_exists($options['public']) || !is_readable($options['public'])) { | ||
| $parser->displayError("Public key in '{$options['public']}' does not exist or is not readable.", 4); | ||
| } | ||
| } | ||
|
|
||
| if (!$options['temp']) { | ||
| $options['temp'] = sys_get_temp_dir(); | ||
| } | ||
|
|
||
| try { | ||
| echo "Verifying Phar archive: {$args['phar']}..." . PHP_EOL; | ||
|
|
||
| $v = new PharUtil_RemotePharVerifier($options['temp'], $options['temp'], $options['public']); | ||
|
|
||
| $v->verify($args['phar']); | ||
|
|
||
| echo "Phar archive successfully verified." . PHP_EOL; | ||
| } catch (Exception $e) { | ||
| echo "Error: " . $e->getMessage() . PHP_EOL; | ||
| exit(1); | ||
| } | ||
|
|
||
|
|
||
| echo PHP_EOL . "All done, exiting." . PHP_EOL; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Binary file not shown.