hancock

// Copyright (C) 2019  David N. Cohen

// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU Affero General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.

// This program is distributed in the hope that it will be useful,
................................................................................
// This pipeline construction is intended to isolate signing code from
// the code which produces and publishes data. Isolation, in this
// case, minimizes the amount of code which handles secrets, and
// allows signing to be performed on an isolated machine.
//
package main


//go:generate sh -c "go doc | dumbdown > README.md"

import (
	"flag"
	"fmt"
	"log"
	"net/url"
................................................................................
		}

		// TODO(dnc): case "http(s)"

	default:
		return nil, fmt.Errorf("unexpected store sheme (%q)", u.Scheme)
	}

	return s, nil
}

// Copyright (C) 2019, 2020  David N. Cohen

// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU Affero General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.

// This program is distributed in the hope that it will be useful,
................................................................................
// This pipeline construction is intended to isolate signing code from
// the code which produces and publishes data. Isolation, in this
// case, minimizes the amount of code which handles secrets, and
// allows signing to be performed on an isolated machine.
//
package main

// use `go get src.d10.dev/dumbdown`
//go:generate sh -c "go doc | dumbdown > README.md"

import (
	"flag"
	"fmt"
	"log"
	"net/url"
................................................................................
		}

		// TODO(dnc): case "http(s)"

	default:
		return nil, fmt.Errorf("unexpected store sheme (%q)", u.Scheme)
	}
	stor[flag] = s
	return s, nil
}

func closeStore() error {
	for _, s := range stor {
		err := s.Close()
		if err != nil {
			return err
		}
	}
	return nil
}

	err = validateStoreFlag(defaultStore)
	if err != nil {
		return err
	}
	if len(storeFlag) == 0 {
		return errors.New("Storage URL required. Use flag `-store <URL>` or see configuration file.")
	}


	// decode input
	dec := json.NewDecoder(os.Stdin)

	// first input, the public key (corresponding to signing private key)
	var authorityEncoded model.Authority
	err = dec.Decode(&authorityEncoded)

	err = validateStoreFlag(defaultStore)
	if err != nil {
		return err
	}
	if len(storeFlag) == 0 {
		return errors.New("Storage URL required. Use flag `-store <URL>` or see configuration file.")
	}
	defer closeStore() // cleanup; safe to call even if no stores initialized

	// decode input
	dec := json.NewDecoder(os.Stdin)

	// first input, the public key (corresponding to signing private key)
	var authorityEncoded model.Authority
	err = dec.Decode(&authorityEncoded)

// Copyright (C) 2019  David N. Cohen

// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU Affero General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.

// This program is distributed in the hope that it will be useful,
................................................................................
	}

	noRecurse := errors.New("no recurse") // prepare for filepath.Walk

	// Exit status
	status := 0
	summary := make(Summary)




	// TODO(dnc): goroutines for performance
	for _, arg := range command.OperationFlagSet.Args() {
		err = filepath.Walk(arg, func(currentFile string, info os.FileInfo, err error) error {
			if err != nil {
				command.Error(err) // log error
				return nil         // continue walk
................................................................................

				tkey := model.TestimonyKey{
					Authority: auth,
					Content:   cid.Encode(),
				}

				for _, storeFlag := range verifyStoreFlag {

					command.V(3).Infof("querying %q for %q (%v)", storeFlag, currentFile, tkey)
					store, err := storeFromFlag(storeFlag)
					if err != nil {
						err = fmt.Errorf("failed to access testimony store (%q): %w", storeFlag, err)
						command.Check(err)
					}

					// TODO(dnc): concurrency for performance
					testimony, err := store.GetTestimony(tkey)
					if err != nil {
						// don't exit, as the testimony may be retrieved from another store
						command.Infof("failed to retrieve testimony via %q: %s", storeFlag, err)
						continue
					}

					// checks
					err = testimony.Verify()
					if err != nil {
						// may not be an error, if another valid testimony applies to the same file.
						command.Info(fmt.Errorf("invalid testimony (authority %q; file %q) ignored", authorityName, currentFile))
						continue
					}

					var manifest model.FileManifest
					err = model.Decode(&manifest, testimony.Encoded)

					// path check is disabled because an identical file may appear in more than one place.  TODO(dnc) fix this, or enable strict mode

// Copyright (C) 2019, 2020  David N. Cohen

// This program is free software: you can redistribute it and/or modify
// it under the terms of the GNU Affero General Public License as published by
// the Free Software Foundation, either version 3 of the License, or
// (at your option) any later version.

// This program is distributed in the hope that it will be useful,
................................................................................
	}

	noRecurse := errors.New("no recurse") // prepare for filepath.Walk

	// Exit status
	status := 0
	summary := make(Summary)

	// cleanup; safe to call even if no stores initialized
	defer closeStore()

	// TODO(dnc): goroutines for performance
	for _, arg := range command.OperationFlagSet.Args() {
		err = filepath.Walk(arg, func(currentFile string, info os.FileInfo, err error) error {
			if err != nil {
				command.Error(err) // log error
				return nil         // continue walk
................................................................................

				tkey := model.TestimonyKey{
					Authority: auth,
					Content:   cid.Encode(),
				}

				for _, storeFlag := range verifyStoreFlag {

					command.V(3).Infof("querying %q for %q (%v)", storeFlag, currentFile, tkey)
					store, err := storeFromFlag(storeFlag)
					if err != nil {
						err = fmt.Errorf("failed to access testimony store (%q): %w", storeFlag, err)
						command.Check(err)
					}

					// TODO(dnc): concurrency for performance
					testimony, err := store.GetTestimony(tkey)
					if err != nil {
						// not necessarily a problem; testimony may be found in another store
						command.V(2).Infof("no testimony for file %q by authority %q found via store %q: %s", currentFile, authorityName, storeFlag, err)
						continue
					}

					// checks
					err = testimony.Verify()
					if err != nil {
						// may not be an error, if another valid testimony applies to the same file.
						command.Info(fmt.Errorf("invalid testimony (authority %q; file %q) ignored: %w", authorityName, currentFile, err))
						continue
					}

					var manifest model.FileManifest
					err = model.Decode(&manifest, testimony.Encoded)

					// path check is disabled because an identical file may appear in more than one place.  TODO(dnc) fix this, or enable strict mode