Add function to revoke a user identity.

Done with Context::revUid, not with UserID::revoke.

Does not remove the identity.

N.B. : if the uid is revoked a second time, Error::code is 0.
This commit is contained in:
SET
2020-11-18 20:48:15 +01:00
parent 98c4fa2b22
commit 43e1eff221
2 changed files with 40 additions and 0 deletions

View File

@@ -201,6 +201,33 @@ const Error GpgMEWorker::AddUserID(const char* keyFpr, const string& passphrase,
return e; return e;
} }
const Error GpgMEWorker::RevokeUserID(const char* keyFpr,
const string& passphrase,
const string& name, const string& email,
const string& comment)
{
Error e;
Key k = FindKey(keyFpr, e, true);
if (e.code() != 0)
return e;
e = m_ctx->addSigningKey(k);
if (e.code() != 0)
return e;
m_ctx->setPinentryMode(Context::PinentryMode::PinentryLoopback);
if (m_ppp == NULL)
m_ppp = new LoopbackPassphraseProvider();
m_ppp->SetPassphrase(passphrase);
m_ctx->setPassphraseProvider(m_ppp);
const string uid = MakeUidString(name, email, comment);
e = m_ctx->revUid(k, uid.c_str());
k.update();
m_ctx->clearSigningKeys();
return e;
}
/* /*
* Using a temporary context for key creation. It is altered after secret key * Using a temporary context for key creation. It is altered after secret key
* creation, and subkey creation fails thereafter. This is observational. * creation, and subkey creation fails thereafter. This is observational.

View File

@@ -100,6 +100,19 @@ public:
const Error AddUserID(const char * keyFpr, const string& passphrase, const Error AddUserID(const char * keyFpr, const string& passphrase,
const string& name, const string& email, const string& name, const string& email,
const string& comment); const string& comment);
/**
* Revoke a user identity. Does not remove the identity.
* \n N.B. : if the uid is revoked a second time, Error::code is 0.
* @param keyFpr
* @param passphrase
* @param name
* @param email
* @param comment
* @return
*/
const Error RevokeUserID(const char * keyFpr, const string& passphrase,
const string& name, const string& email,
const string& comment);
/** /**
* Creates a pair of secret and public keys with the default engine * Creates a pair of secret and public keys with the default engine
* algorithms. Default expiry time is 2 * 365 days. * algorithms. Default expiry time is 2 * 365 days.