simonvareille
/
keyserver
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add restriction to importing keys : only keys with at least one Esisar's UID are valid.

esisar-restrictions
Simon Vareille 2020-02-07 22:07:16 +01:00
parent cc145dd19b
commit fe9bf831e5
No known key found for this signature in database
GPG Key ID: 008AE8E706CC19F9
1 changed files with 20 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
src/service/pgp.js
View File

@ -67,9 +67,14 @@ class PGP {
}
// check for at least one valid user id
const userIds = await this.parseUserIds(key.users, primaryKey, verifyDate);
const {userIds, status} = await this.parseUserIds(key.users, primaryKey, verifyDate);
if (!userIds.length) {
util.throw(400, 'Invalid PGP key: invalid user IDs');
if (status == 1) {
util.throw(400, 'Invalid PGP key: no user ID comes from Esisar');
}
else {
util.throw(400, 'Invalid PGP key: invalid user IDs');
}
}
// get algorithm details from primary key
@ -116,10 +121,11 @@ class PGP {
/**
* Parse an array of user ids and verify signatures
* @param {Array} users A list of openpgp.js user objects
* @param {Array} users A list of openpgp.js user objects
* @param {Object} primaryKey The primary key packet of the key
* @param {Date} verifyDate Verify user IDs at this point in time
* @return {Array} An array of user id objects
* @param {Date} verifyDate Verify user IDs at this point in time
* @return {Array, integer} An array of user id objects and a satus indicator.
* Values of status : 0 if no error, 1 if no address comes from Esisar.
*/
async parseUserIds(users, primaryKey, verifyDate = new Date()) {
if (!users || !users.length) {
@ -127,6 +133,7 @@ class PGP {
}
// at least one user id must be valid, revoked or expired
const result = [];
var isFromEsisar = false;
for (const user of users) {
const userStatus = await user.verify(primaryKey, verifyDate);
if (userStatus !== openpgp.enums.keyStatus.invalid && user.userId && user.userId.userid) {
@ -140,11 +147,18 @@ class PGP {
email: util.normalizeEmail(uid.email),
verified: false
});
if(/^([a-z0-9\-.]+)@([a-z0-9.\-]*)esisar\.grenoble-inp\.fr$/.test(util.normalizeEmail(uid.email)))
isFromEsisar = true;
}
} catch (e) {}
}
}
return result;
var status = 0;
if(!isFromEsisar){
result.length = 0;
status = 1;
}
return {userIds: result, status: status};
}
/**