[Rt-commit] r7575 - in rt/branches/3.7-EXPERIMENTAL: .

[ruz at bestpractical.com]

Author: ruz
Date: Thu Apr 19 17:50:13 2007
New Revision: 7575

Added:
   rt/branches/3.7-EXPERIMENTAL/lib/RT/Interface/Email/Auth/GnuPGNG.pm
Modified:
   rt/branches/3.7-EXPERIMENTAL/   (props changed)

Log:
 r5002 at cubic-pc:  cubic | 2007-04-20 01:41:39 +0400
 * add Auth::GnuPGNG email filter


Added: rt/branches/3.7-EXPERIMENTAL/lib/RT/Interface/Email/Auth/GnuPGNG.pm
==============================================================================
--- (empty file)
+++ rt/branches/3.7-EXPERIMENTAL/lib/RT/Interface/Email/Auth/GnuPGNG.pm	Thu Apr 19 17:50:13 2007
@@ -0,0 +1,81 @@
+package RT::Interface::Email::Auth::GnuPGNG;
+
+use strict;
+use warnings;
+
+=head2 GetCurrentUser
+
+To use the gnupg-secured mail gateway, you need to do the following:
+
+Set up a gnupgp key directory with a pubring containing only the keys
+you care about and specify the following in your SiteConfig.pm
+
+Set(%GnuPG, homedir => '/opt/rt3/var/data/GnuPG');
+Set(@MailPlugins, 'Auth::GnuPGNG', ...other filter...);
+
+=cut
+
+use RT::Crypt::GnuPG;
+
+sub GetCurrentUser {
+    my %args = (
+        Message       => undef,
+        RawMessageRef => undef,
+        CurrentUser   => undef,
+        AuthLevel     => undef,
+        Ticket        => undef,
+        Queue         => undef,
+        Action        => undef,
+        @_
+    );
+
+    $args{'Message'}->head->delete('X-RT-GnuPG-Status');
+
+    my ($status, @res) = VerifyDecrypt( Entity => $args{'Message'} );
+    return @args{qw(CurrentUser AuthLevel)} if $status && !@res;
+
+    $RT::Logger->error("Had a problem during decrypting and verifying")
+        unless $status;
+
+    $args{'Message'}->head->add( 'X-RT-GnuPG-Status' => $_->{'status'} )
+        foreach @res;
+
+    return @args{qw(CurrentUser AuthLevel)};
+}
+
+sub VerifyDecrypt {
+    my %args = (
+        Entity => undef,
+        @_
+    );
+
+    my @res = RT::Crypt::GnuPG::VerifyDecrypt( %args );
+    unless ( @res ) {
+        $RT::Logger->debug("No more encrypted/signed parts");
+        return 1;
+    }
+
+    $RT::Logger->debug('Found GnuPG protected parts');
+
+    # return on any error
+    if ( grep $_->{'exit_code'}, @res ) {
+        $RT::Logger->debug("Error during verify/decrypt operation");
+        return (0, @res);
+    }
+
+    # nesting
+    my ($status, @nested) = VerifyDecrypt( %args );
+    return $status, @res, @nested;
+}
+
+eval "require RT::Interface::Email::Auth::GnuPGNG_Vendor";
+die $@
+  if ( $@
+    && $@ !~ qr{^Can't locate RT/Interface/Email/Auth/GnuPGNG_Vendor.pm} );
+eval "require RT::Interface::Email::Auth::GnuPGNG_Local";
+die $@
+  if ( $@
+    && $@ !~ qr{^Can't locate RT/Interface/Email/Auth/GnuPGNG_Local.pm} );
+
+1;
+