WIP: verify command to verify clear-sign PGP signatures.

1 files changed, 17 insertions, 2 deletions

diff --git a/kiki.hs b/kiki.hs
index cd0f516..b4512f3 100644
--- a/kiki.hs
+++ b/kiki.hs
@@ -1647,6 +1647,20 @@ kiki "tar" args = do
         ["-A":_] -> putStrLn "unimplemented." -- import tar file?
         _ -> kiki "tar" ["--help"]
 
+kiki "verify" args | "--help" `elem` args = do
+    putStr . unlines $
+        [ "kiki verify [--homedir HOMEDIR | --homeless] [[--keyring FILE] ...] FILE"
+        ]
+kiki "verify" argvals =
+    let opts = [("--homedir",1),("--keyring",1),("--homeless",0)]
+    in case runArgs (parseInvocation (fancy opts [] "") argvals)
+                    (verifyFile <$> flag "--homeless"
+                                <*> dashdashHomedir
+                                <*> args "--keyring"
+                                <*> param 0) of
+        Left er  -> hPutStrLn stderr $ usageErrorMessage er
+        Right io -> io
+
 kiki cmd args = hPutStrLn stderr $ "I don't know how to "++cmd++"."
 
 sshkeyname :: Packet -> [FilePath]
@@ -1709,7 +1723,7 @@ ipsecKeyNames (Hostnames _ onames _ _) = do
 
 tarT :: ([[String]],Map.Map String [String]) -> IO ()
 tarT (sargs,margs) = do
-    KikiResult rt report <- runKeyRing $ minimalOp $ parseCommonArgs margs
+    KikiResult rt report <- runKeyRing $ minimalOp False $ parseCommonArgs margs
     case rt of
       KikiSuccess rt -> do
         let keyspec = concat . take 1 <$> Map.lookup "--secrets" margs
@@ -1720,7 +1734,7 @@ tarT (sargs,margs) = do
 
 tarC :: ([[String]],Map.Map String [String]) -> IO ()
 tarC (sargs,margs) = do
-    KikiResult rt report <- runKeyRing $ minimalOp $ parseCommonArgs margs
+    KikiResult rt report <- runKeyRing $ minimalOp False $ parseCommonArgs margs
     case rt of
       KikiSuccess rt -> do
         CTime pubtime <- modificationTime <$> getFileStatus (rtPubring rt)
@@ -1813,6 +1827,7 @@ commands =
  , ( "rename", "Change the usage tag on a specified subkey" )
  --    also repairs signature and adds missing cross-certification.
  , ( "tar", "import or export system key files in tar format" )
+ , ( "verify", "Check a clear-sign pgp signature." )
  ]
 
 main :: IO ()