[gnome-keysign: 8/10] gpgmeh: local sigs: import key before trying to sign



commit 8faf7e0559b9eae6b41658a0055e381f58c690ac
Author: Tobias Mueller <muelli cryptobitch de>
Date:   Fri May 10 11:30:25 2019 +0200

    gpgmeh: local sigs: import key before trying to sign
    
    We need to operate on the user's actual keyring. We try to be cautious,
    though, and only import when we have exactly one key in keydata.

 keysign/gpgmeh.py | 4 ++++
 1 file changed, 4 insertions(+)
---
diff --git a/keysign/gpgmeh.py b/keysign/gpgmeh.py
index 332a73a..bc4d35b 100755
--- a/keysign/gpgmeh.py
+++ b/keysign/gpgmeh.py
@@ -430,6 +430,8 @@ def local_sign_keydata(keydata, expires_in=60*60*24*1, error_cb=None, homedir=No
     the blue. But it can hardly be any worse than it is now.
     And the app ought to inform the user about the fact that it's only 
     ephemeral.
+
+    Returns: nothing
     """
     ctx = DirectoryContext(homedir)
 
@@ -448,6 +450,7 @@ def local_sign_keydata(keydata, expires_in=60*60*24*1, error_cb=None, homedir=No
         assert len(imports) == 1
         fpr = result.imports[0].fpr
 
+        ctx.op_import(keydata)
         key = ctx.get_key(fpr)
         # We need to sign in the regular context, because gpgme does not
         # export local signatures from a keyring.
@@ -455,6 +458,7 @@ def local_sign_keydata(keydata, expires_in=60*60*24*1, error_cb=None, homedir=No
         # Unfortunately, key_sign does not report back how many
         # signatures were produced (or not produced...)
         # It may raise an error, but I have yet to see that it does...
+        log.info("Locally signed key %s with an exiry in %d secods", fpr, expires_in)
 
 
 def sign_keydata_and_encrypt(keydata, error_cb=None, homedir=None):


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]