libcommons-openpgp-java/ 0000755 0001750 0001750 00000000000 10620447146 014275 5 ustar paul paul libcommons-openpgp-java/pom.xml 0000755 0001750 0001750 00000005252 10550005561 015612 0 ustar paul paul
4.0.0
org.apache.commons
commons-sandbox
1-SNAPSHOT
commons-openpgp
1.0-SNAPSHOT
Commons OpenPGP
http://jakarta.apache.org/commons/sandbox/openpgp/
2005
org.bouncycastle
bcpg-jdk12
130
junit
junit
3.8.1
test
ant
ant
1.6.5
compile
ant
ant-launcher
1.6.5
runtime
src/main/resources
true
brett
Brett Porter
brett AT apache DOT org
Apache
+10
bodewig
Stefan Bodewig
bodewig AT apache DOT org
Apache
+1
scm:svn:http://svn.apache.org/repos/asf/jakarta/commons/sandbox/openpgp/trunk/
scm:svn:https://svn.apache.org/repos/asf/jakarta/commons/sandbox/openpgp/trunk/
http://svn.apache.org/repos/asf/jakarta/commons/sandbox/openpgp/trunk/
website
Apache Website
scp://people.apache.org/www/jakarta.apache.org/commons/sandbox/openpgp/
1.3
1.3
libcommons-openpgp-java/src/ 0000755 0001750 0001750 00000000000 10620447145 015063 5 ustar paul paul libcommons-openpgp-java/src/site/ 0000755 0001750 0001750 00000000000 10620447146 016030 5 ustar paul paul libcommons-openpgp-java/src/site/apt/ 0000755 0001750 0001750 00000000000 10620447146 016614 5 ustar paul paul libcommons-openpgp-java/src/site/apt/index.apt 0000755 0001750 0001750 00000001270 10550006311 020417 0 ustar paul paul -----
Home
-----
Brett Porter
-----
10 December 2005
-----
Jakarta Commons OpenPGP
Commons OpenPGP was started to produce a common and simple interface for generating
and verifying OpenPGP signatures.
Currently implemented using {{{http://www.bouncycastle.org} BouncyCastle}}, it is
intended to allow pluggable providers so that alternate open source and commercial
providers can be used.
* History
The library was started by Maven and Ant committers to enable the use of OpenPGP
from these tools. Currently, Maven uses it in its development version to sign
libraries released to the repository.
* Using the Library
* {{{usage.html} Usage Instructions}}
libcommons-openpgp-java/src/site/apt/signer.apt 0000644 0001750 0001750 00000007616 10552023307 020614 0 ustar paul paul -----
Signer Ant Task
-----
Antoine Levy-Lambert
-----
12 October 2006
-----
Signer Ant Task
This task will be packaged in the commons-openpgp.jar.
It will use the bouncy castle jars at runtime. It has been tested with bcpg-jdk12-134.jar and bcprov-jdk12-134.jar.
The generated signatures can be verified with gpg.
<<>> can sign one or several files at once.
* <<>>
*------------------+--------------------------------------------------------------------------+-------------------------------------------------+
| Attribute | Description | Required |
*------------------+--------------------------------------------------------------------------+-------------------------------------------------+
| <<>> | Secret key ring file. | Yes |
*------------------+--------------------------------------------------------------------------+-------------------------------------------------+
| <<>> | Public key ring file. | Yes |
*------------------+--------------------------------------------------------------------------+-------------------------------------------------+
| <<>> | Password of the secret key ring. | Yes |
*------------------+--------------------------------------------------------------------------+-------------------------------------------------+
| <<>> | Id of the key used to sign. | Yes |
*------------------+--------------------------------------------------------------------------+-------------------------------------------------+
| <<>> | Boolean, defaults to true. | No |
*------------------+--------------------------------------------------------------------------+-------------------------------------------------+
| <<>> | The file that you want to sign. | No, if fileset nested element present. |
*------------------+--------------------------------------------------------------------------+-------------------------------------------------+
The task must also take either one or several nested <<>> element, or an <<>> attribute.
** <<>> nested element
The task can take one or several fileset nested elements.
See the {{{http://ant.apache.org/manual/CoreTypes/fileset.html} ant manual}} for an explanation.
If you want to sign just one file, the <<>> attribute can be used instead.
** <<>> nested element
The task may take a {{{http://ant.apache.org/manual/CoreTypes/mapper.html} mapper}} nested element.
This nested element tells the task how the signature files should be called.
If you do not supply this element, the signature files will be located in the same directory as the files that
you sign. An ending of <<<.asc>>> will be appended to the file name for ascii armored output (the default).
If you set <<>> to false, the ending will be <<<.sig>>>
* example
-----
-----
libcommons-openpgp-java/src/site/apt/usage.apt 0000755 0001750 0001750 00000005432 10550006311 020420 0 ustar paul paul -----
Usage
-----
Brett Porter
-----
10 December 2005
-----
Usage Instructions
Currently only creation and verification of detached signatures is supported. This can be done in streaming and
non-streaming mode.
Both modes require that you have created a key ring.
* Creating a Key Ring
A key ring object needs to be created, containing an input stream for both the public and secret key rings.
The password for the secret key ring also needs to be passed in for creating signatures.
For example, to create the Bouncy Castle key ring, the constructor is used:
-----
BouncyCastleKeyRing( InputStream secretKeyRing, InputStream publicKeyRing, char[] password );
-----
* Non-streaming Mode
~~TODO: link to Javadoc
To sign data with a detached signature, create a <<>>.
-----
signer = new BouncyCastleOpenPgpSigner();
signer.detachedSign(
getClass().getResourceAsStream( "/test-input" ), // binary input file
signature, // outputstream for the signature
keyId, // key ID
keyRing,
true ); // ascii armor
-----
Verifying the signature is similar.
-----
verifier = new BouncyCastleOpenPgpSignatureVerifier();
verifier.verifyDetachedSignature(
getClass().getResourceAsStream( "/test-input" ), // binary input file
signature, // inputstream for the signature
keyRing,
true ); // ascii armor
-----
* Streaming Mode
~~TODO: link to Javadoc
To sign data in streaming mode, create an instance of <<>>.
The <<>> method is called on blocks of data to update the signautre. Finally, <<>> is called
to receive the detached signature as a byte array.
-----
signer = new BouncyCastleOpenPgpStreamingSigner(
new FileOutputStream( "file.asc" ), // detached signature
"ABC123D", // key ID
keyRing,
true ); // ascii armor?
int len;
do
{
len = read( buf );
if ( len > 0 )
{
signer.update( buf );
}
}
while ( len >= 0 );
byte[] signature = signer.finish();
-----
To verify a signature in streaming mode is similar.
-----
verifier = new BouncyCastleOpenPgpStreamingSignatureVerifier(
new FileInputStream( "file.asc" ), // detached signature
keyRing,
true ); // ascii armor?
int len;
do
{
len = read( buf );
if ( len > 0 )
{
verifier.update( buf );
}
}
while ( len >= 0 );
SignatureStatus status = verifier.finish();
-----
The <<>> returned indicates whether the signature was valid and whether it was trusted.
libcommons-openpgp-java/src/site/site.xml 0000755 0001750 0001750 00000000746 10550005521 017515 0 ustar paul paul
* VALID_TRUSTEDVALID_UNTRUSTEDINVALID
*
* @author Brett Porter
* @todo incorporate levels of trust
*/
public class SignatureStatus
{
/**
* Status that indicates the signature is valid, and from a trusted source.
*/
public static SignatureStatus VALID_TRUSTED = new SignatureStatus( true, true );
/**
* Status that indicates the signature is valid, but from an unknown or untrusted source.
*/
public static SignatureStatus VALID_UNTRUSTED = new SignatureStatus( true, false );
/**
* Status that indicates the signature is invalid.
*/
public static SignatureStatus INVALID = new SignatureStatus( false, false );
/**
* Whether the signature is valid.
*/
private final boolean valid;
/**
* Whether the signature is trusted.
*/
private final boolean trusted;
private SignatureStatus( boolean valid, boolean trusted )
{
this.valid = valid;
this.trusted = trusted;
}
public boolean isValid()
{
return valid;
}
public boolean isTrusted()
{
return trusted;
}
}
libcommons-openpgp-java/src/main/java/org/apache/commons/openpgp/UnknownKeyException.java 0000644 0001750 0001750 00000002407 10533243442 030715 0 ustar paul paul package org.apache.commons.openpgp;
/*
* Licensed to the Apache Software Foundation (ASF) under one or more
* contributor license agreements. See the NOTICE file distributed with
* this work for additional information regarding copyright ownership.
* The ASF licenses this file to You under the Apache License, Version 2.0
* (the "License"); you may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
/**
* An exception occurring during the verification of a signature, when the key is not found in the keyring.
*
* @author Brett Porter
*/
public class UnknownKeyException
extends OpenPgpException
{
public UnknownKeyException( String message )
{
super( message );
}
public UnknownKeyException( String message, Throwable cause )
{
super( message, cause );
}
}
libcommons-openpgp-java/src/main/java/org/apache/commons/openpgp/OpenPgpException.java 0000644 0001750 0001750 00000002502 10533243442 030151 0 ustar paul paul package org.apache.commons.openpgp;
/*
* Licensed to the Apache Software Foundation (ASF) under one or more
* contributor license agreements. See the NOTICE file distributed with
* this work for additional information regarding copyright ownership.
* The ASF licenses this file to You under the Apache License, Version 2.0
* (the "License"); you may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
/**
* An exception occurring during the use of the OpenPGP library.
*
* @author Brett Porter
*/
public class OpenPgpException
extends Exception
{
private Throwable cause;
public OpenPgpException( String message )
{
super( message );
}
public OpenPgpException( String message, Throwable cause )
{
super( message );
this.cause = cause;
}
public Throwable getCause()
{
return cause;
}
}
././@LongLink 0000000 0000000 0000000 00000000153 00000000000 011564 L ustar root root libcommons-openpgp-java/src/main/java/org/apache/commons/openpgp/BouncyCastleOpenPgpSignatureVerifier.java libcommons-openpgp-java/src/main/java/org/apache/commons/openpgp/BouncyCastleOpenPgpSignatureVerifie0000644 0001750 0001750 00000004162 10533243442 033066 0 ustar paul paul package org.apache.commons.openpgp;
/*
* Licensed to the Apache Software Foundation (ASF) under one or more
* contributor license agreements. See the NOTICE file distributed with
* this work for additional information regarding copyright ownership.
* The ASF licenses this file to You under the Apache License, Version 2.0
* (the "License"); you may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
import java.io.IOException;
import java.io.InputStream;
/**
* Verify signatures using the Bouncy Castle OpenPGP provider.
*
* @author Brett Porter
*/
public class BouncyCastleOpenPgpSignatureVerifier
implements OpenPgpSignatureVerifier
{
private static final int BUFFER_SIZE = 1024;
public SignatureStatus verifySignature( InputStream data, KeyRing keyRing )
throws OpenPgpException, UnknownKeyException
{
// TODO: implement
return null; //To change body of implemented methods use File | Settings | File Templates.
}
public SignatureStatus verifyDetachedSignature( InputStream data, InputStream signature, KeyRing keyRing,
boolean asciiArmored )
throws OpenPgpException, UnknownKeyException, IOException
{
OpenPgpStreamingSignatureVerifier verifier =
new BouncyCastleOpenPgpStreamingSignatureVerifier( signature, keyRing, asciiArmored );
byte[] buf = new byte[BUFFER_SIZE];
int len;
do
{
len = data.read( buf );
if ( len > 0 )
{
verifier.update( buf, 0, len );
}
}
while ( len >= 0 );
return verifier.finish();
}
}
libcommons-openpgp-java/src/main/java/org/apache/commons/openpgp/KeyRing.java 0000644 0001750 0001750 00000003356 10533243442 026302 0 ustar paul paul package org.apache.commons.openpgp;
/*
* Licensed to the Apache Software Foundation (ASF) under one or more
* contributor license agreements. See the NOTICE file distributed with
* this work for additional information regarding copyright ownership.
* The ASF licenses this file to You under the Apache License, Version 2.0
* (the "License"); you may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
import org.bouncycastle.openpgp.PGPPublicKey;
import org.bouncycastle.openpgp.PGPSecretKey;
/**
* Interface describing a key ring for use in signing or verifying data.
*
* @author Brett Porter
*/
public interface KeyRing
{
String ROLE = KeyRing.class.getName();
/**
* @return
* @todo seems like the wrong place
*/
char[] getPassword();
/**
* @param keyId
* @return
* @todo remove BC specifics
*/
PGPSecretKey getSecretKey( String keyId );
/**
* @param keyId
* @return
* @todo remove BC specifics
*/
PGPPublicKey getPublicKey( String keyId );
/**
* @param keyId
* @return
* @todo remove BC specifics
*/
PGPSecretKey getSecretKey( long keyId );
/**
* @param keyId
* @return
* @todo remove BC specifics
*/
PGPPublicKey getPublicKey( long keyId );
}
libcommons-openpgp-java/src/main/java/org/apache/commons/openpgp/OpenPgpSignatureVerifier.java 0000644 0001750 0001750 00000004257 10533243442 031661 0 ustar paul paul package org.apache.commons.openpgp;
/*
* Licensed to the Apache Software Foundation (ASF) under one or more
* contributor license agreements. See the NOTICE file distributed with
* this work for additional information regarding copyright ownership.
* The ASF licenses this file to You under the Apache License, Version 2.0
* (the "License"); you may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
import java.io.IOException;
import java.io.InputStream;
/**
* Interface for verifying data signed with OpenPGP.
*
* @author Brett Porter
* @todo perhaps should have different interface methods for the default key
* @todo should the exception be a verification exception instead of a common one?
*/
public interface OpenPgpSignatureVerifier
{
String ROLE = OpenPgpSignatureVerifier.class.getName();
/**
* Verify a piece of data that was signed with OpenPGP.
*
* @param data the data that was signed
* @param keyRing the keyring containing the key used to sign the data
*/
SignatureStatus verifySignature( InputStream data, KeyRing keyRing )
throws OpenPgpException, UnknownKeyException;
/**
* Verify a piece of data against a detached signature.
*
* @param data the data to that was signed
* @param signature the detached signature to verify against the data
* @param keyRing the keyring containing the key used to sign the data
* @param asciiArmored whether the signature is ascii armored
*/
SignatureStatus verifyDetachedSignature( InputStream data, InputStream signature, KeyRing keyRing,
boolean asciiArmored )
throws OpenPgpException, UnknownKeyException, IOException;
}
libcommons-openpgp-java/src/main/java/org/apache/commons/openpgp/OpenPgpStreamingSigner.java 0000644 0001750 0001750 00000004037 10533243442 031321 0 ustar paul paul package org.apache.commons.openpgp;
/*
* Licensed to the Apache Software Foundation (ASF) under one or more
* contributor license agreements. See the NOTICE file distributed with
* this work for additional information regarding copyright ownership.
* The ASF licenses this file to You under the Apache License, Version 2.0
* (the "License"); you may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
import java.io.IOException;
/**
* An interface for updating an OpenPGP signature on the fly with streaming data.
*
* @author Brett Porter
*/
public interface OpenPgpStreamingSigner
{
String ROLE = OpenPgpStreamingSigner.class.getName();
/**
* Update the signature with the next block from the data buffer.
*
* @param buf the buffer
* @throws OpenPgpException if the buffer is not valid for updating the signature
*/
void update( byte[] buf )
throws OpenPgpException;
/**
* Update the signature with the next block from the data buffer.
*
* @param buf the buffer
* @param offset offset within the buffer to start from
* @param length number of bytes in the buffer to read from
* @throws OpenPgpException if the buffer is not valid for updating the signature
*/
void update( byte[] buf, int offset, int length )
throws OpenPgpException;
/**
* Finish creating the signature.
*
* @return the completed signature
* @throws OpenPgpException if the signature is not in a consistent or complete state
*/
byte[] finish()
throws OpenPgpException, IOException;
}
libcommons-openpgp-java/src/test/ 0000755 0001750 0001750 00000000000 10620447143 016040 5 ustar paul paul libcommons-openpgp-java/src/test/resources/ 0000755 0001750 0001750 00000000000 10620447143 020052 5 ustar paul paul libcommons-openpgp-java/src/test/resources/test-input 0000644 0001750 0001750 00000000627 10345740566 022127 0 ustar paul paul The quick brown fox jumps over the lazy dog
quick brown fox jumps over the lazy dog The
brown fox jumps over the lazy dog The quick
fox jumps over the lazy dog The quick brown
jumps over the lazy dog The quick brown fox
over the lazy dog The quick brown fox jumps
the lazy dog The quick brown fox jumps over
lazy dog The quick brown fox jumps over the
dog The quick brown fox jumps over the lazy
libcommons-openpgp-java/src/test/resources/pubring.gpg 0000644 0001750 0001750 00000001655 10345414027 022225 0 ustar paul paul CQA ?
sgN١.֔]fsIl6K?5}(CM *9
˩HAfȲ[𦲇̈́ %bI*sU'K*) On_Vp> !n!p>
933 'WMG6@OO\/"g|18
XYAîP r 7 ~[Ny YUlV&&IK; NslL<˹8Kcommons-openpgp (Commons OpenPGP Test Key) ^ CQA
N2k$ =~1.ZtI e@ L.4#F
CQB llJ{9nV/Qдwulj(y ԪA<1`?+3Tu^|_MF@tdKF84nfOP i*b`[zh/!& jC&s -F#Ӑ^ft e5v )r˂k2 8nG4y|-K% 8FšJ15^RwgsW50lDy.
0|J=۹u%GψI CQB
N2kz {T@\Jw16 mN1ScXpzspa libcommons-openpgp-java/src/test/resources/test-signature.bpg 0000644 0001750 0001750 00000000101 10345510012 023500 0 ustar paul paul ? CN2k9 !n!p>
933 'WMG6@OO\/"g|18
XYAîP r 7 ~[Ny YUlV&&IK; NslL<˹89N@`K̯qmJS+.Hy!/`9J- z}>nKcommons-openpgp (Commons OpenPGP Test Key) ^ CQA
N2k$ RMl +p JMV_t ÙsMXCQB llJ{9nV/Qдwulj(y ԪA<1`?+3Tu^|_MF@tdKF84nfOP i*b`[zh/!& jC&s -F#Ӑ^ft e5v )r˂k2 8nG4y|-K% 8FšJ15^RwgsW50lDy.
0|J=۹u%G9N@`4 Ͷ=E sQ:iqFNH pj/S /'y-?Q5I CQB
N2kz l5/P ?_v S2qV libcommons-openpgp-java/src/test/resources/test-signature.asc 0000644 0001750 0001750 00000000272 10345414027 023520 0 ustar paul paul -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Cygwin)
iD8DBQBDlVJdTusOMqfRa9QRAuxXAJ9k0G+f2tbO6eTuBQS1uim44aADVwCgxS3i
MH8RP0v17V5sM1WN8ih97n8=
=gPJ5
-----END PGP SIGNATURE-----
libcommons-openpgp-java/src/test/java/ 0000755 0001750 0001750 00000000000 10620447142 016760 5 ustar paul paul libcommons-openpgp-java/src/test/java/org/ 0000755 0001750 0001750 00000000000 10620447142 017547 5 ustar paul paul libcommons-openpgp-java/src/test/java/org/apache/ 0000755 0001750 0001750 00000000000 10620447142 020770 5 ustar paul paul libcommons-openpgp-java/src/test/java/org/apache/commons/ 0000755 0001750 0001750 00000000000 10620447142 022443 5 ustar paul paul libcommons-openpgp-java/src/test/java/org/apache/commons/openpgp/ 0000755 0001750 0001750 00000000000 10620447143 024114 5 ustar paul paul libcommons-openpgp-java/src/test/java/org/apache/commons/openpgp/BouncyCastleOpenPgpSignerTest.java 0000644 0001750 0001750 00000006246 10533243442 032662 0 ustar paul paul package org.apache.commons.openpgp;
/*
* Licensed to the Apache Software Foundation (ASF) under one or more
* contributor license agreements. See the NOTICE file distributed with
* this work for additional information regarding copyright ownership.
* The ASF licenses this file to You under the Apache License, Version 2.0
* (the "License"); you may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
import junit.framework.TestCase;
import java.io.ByteArrayInputStream;
import java.io.ByteArrayOutputStream;
import java.io.IOException;
/**
* Test the open pgp signer.
*
* @author Brett Porter
* @todo test text input as well as binary - apparently it fails cross platform
*/
public class BouncyCastleOpenPgpSignerTest
extends TestCase
{
private OpenPgpSigner signer = new BouncyCastleOpenPgpSigner();
private OpenPgpSignatureVerifier verifier = new BouncyCastleOpenPgpSignatureVerifier();
private String keyId = "A7D16BD4";
private KeyRing keyRing;
private static final String PASSWORD = "cop";
protected void setUp()
throws Exception
{
super.setUp();
keyRing = new BouncyCastleKeyRing( getClass().getResourceAsStream( "/secring.gpg" ),
getClass().getResourceAsStream( "/pubring.gpg" ), PASSWORD.toCharArray() );
}
public void testSignDataDetachedBinary()
throws OpenPgpException, IOException
{
ByteArrayOutputStream signature = new ByteArrayOutputStream();
signer.detachedSign( getClass().getResourceAsStream( "/test-input" ), signature, keyId, keyRing, false );
// TODO: can we get it to verify an ascii armored one?
SignatureStatus status = verifier.verifyDetachedSignature( getClass().getResourceAsStream( "/test-input" ),
new ByteArrayInputStream( signature.toByteArray() ),
keyRing, false );
assertNotNull( "check we got a status", status );
assertTrue( "check it was successful", status.isValid() );
}
public void testVerifySignatureDetachedBinary()
throws IOException, OpenPgpException
{
// TODO: can we get it to verify an ascii armored one?
SignatureStatus status = verifier.verifyDetachedSignature( getClass().getResourceAsStream( "/test-input" ),
getClass().getResourceAsStream(
"/test-signature.bpg" ), keyRing, false );
assertNotNull( "check we got a status", status );
assertTrue( "check it was successful", status.isValid() );
}
}
libcommons-openpgp-java/NOTICE.txt 0000644 0001750 0001750 00000000270 10533243563 016016 0 ustar paul paul Apache Jakarta Commons OpenPGP
Copyright 2005-2006 The Apache Software Foundation
This product includes software developed by
The Apache Software Foundation (http://www.apache.org/).
libcommons-openpgp-java/LICENSE.txt 0000644 0001750 0001750 00000026766 10250074051 016127 0 ustar paul paul /*
* Apache License
* Version 2.0, January 2004
* http://www.apache.org/licenses/
*
* TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
*
* 1. Definitions.
*
* "License" shall mean the terms and conditions for use, reproduction,
* and distribution as defined by Sections 1 through 9 of this document.
*
* "Licensor" shall mean the copyright owner or entity authorized by
* the copyright owner that is granting the License.
*
* "Legal Entity" shall mean the union of the acting entity and all
* other entities that control, are controlled by, or are under common
* control with that entity. For the purposes of this definition,
* "control" means (i) the power, direct or indirect, to cause the
* direction or management of such entity, whether by contract or
* otherwise, or (ii) ownership of fifty percent (50%) or more of the
* outstanding shares, or (iii) beneficial ownership of such entity.
*
* "You" (or "Your") shall mean an individual or Legal Entity
* exercising permissions granted by this License.
*
* "Source" form shall mean the preferred form for making modifications,
* including but not limited to software source code, documentation
* source, and configuration files.
*
* "Object" form shall mean any form resulting from mechanical
* transformation or translation of a Source form, including but
* not limited to compiled object code, generated documentation,
* and conversions to other media types.
*
* "Work" shall mean the work of authorship, whether in Source or
* Object form, made available under the License, as indicated by a
* copyright notice that is included in or attached to the work
* (an example is provided in the Appendix below).
*
* "Derivative Works" shall mean any work, whether in Source or Object
* form, that is based on (or derived from) the Work and for which the
* editorial revisions, annotations, elaborations, or other modifications
* represent, as a whole, an original work of authorship. For the purposes
* of this License, Derivative Works shall not include works that remain
* separable from, or merely link (or bind by name) to the interfaces of,
* the Work and Derivative Works thereof.
*
* "Contribution" shall mean any work of authorship, including
* the original version of the Work and any modifications or additions
* to that Work or Derivative Works thereof, that is intentionally
* submitted to Licensor for inclusion in the Work by the copyright owner
* or by an individual or Legal Entity authorized to submit on behalf of
* the copyright owner. For the purposes of this definition, "submitted"
* means any form of electronic, verbal, or written communication sent
* to the Licensor or its representatives, including but not limited to
* communication on electronic mailing lists, source code control systems,
* and issue tracking systems that are managed by, or on behalf of, the
* Licensor for the purpose of discussing and improving the Work, but
* excluding communication that is conspicuously marked or otherwise
* designated in writing by the copyright owner as "Not a Contribution."
*
* "Contributor" shall mean Licensor and any individual or Legal Entity
* on behalf of whom a Contribution has been received by Licensor and
* subsequently incorporated within the Work.
*
* 2. Grant of Copyright License. Subject to the terms and conditions of
* this License, each Contributor hereby grants to You a perpetual,
* worldwide, non-exclusive, no-charge, royalty-free, irrevocable
* copyright license to reproduce, prepare Derivative Works of,
* publicly display, publicly perform, sublicense, and distribute the
* Work and such Derivative Works in Source or Object form.
*
* 3. Grant of Patent License. Subject to the terms and conditions of
* this License, each Contributor hereby grants to You a perpetual,
* worldwide, non-exclusive, no-charge, royalty-free, irrevocable
* (except as stated in this section) patent license to make, have made,
* use, offer to sell, sell, import, and otherwise transfer the Work,
* where such license applies only to those patent claims licensable
* by such Contributor that are necessarily infringed by their
* Contribution(s) alone or by combination of their Contribution(s)
* with the Work to which such Contribution(s) was submitted. If You
* institute patent litigation against any entity (including a
* cross-claim or counterclaim in a lawsuit) alleging that the Work
* or a Contribution incorporated within the Work constitutes direct
* or contributory patent infringement, then any patent licenses
* granted to You under this License for that Work shall terminate
* as of the date such litigation is filed.
*
* 4. Redistribution. You may reproduce and distribute copies of the
* Work or Derivative Works thereof in any medium, with or without
* modifications, and in Source or Object form, provided that You
* meet the following conditions:
*
* (a) You must give any other recipients of the Work or
* Derivative Works a copy of this License; and
*
* (b) You must cause any modified files to carry prominent notices
* stating that You changed the files; and
*
* (c) You must retain, in the Source form of any Derivative Works
* that You distribute, all copyright, patent, trademark, and
* attribution notices from the Source form of the Work,
* excluding those notices that do not pertain to any part of
* the Derivative Works; and
*
* (d) If the Work includes a "NOTICE" text file as part of its
* distribution, then any Derivative Works that You distribute must
* include a readable copy of the attribution notices contained
* within such NOTICE file, excluding those notices that do not
* pertain to any part of the Derivative Works, in at least one
* of the following places: within a NOTICE text file distributed
* as part of the Derivative Works; within the Source form or
* documentation, if provided along with the Derivative Works; or,
* within a display generated by the Derivative Works, if and
* wherever such third-party notices normally appear. The contents
* of the NOTICE file are for informational purposes only and
* do not modify the License. You may add Your own attribution
* notices within Derivative Works that You distribute, alongside
* or as an addendum to the NOTICE text from the Work, provided
* that such additional attribution notices cannot be construed
* as modifying the License.
*
* You may add Your own copyright statement to Your modifications and
* may provide additional or different license terms and conditions
* for use, reproduction, or distribution of Your modifications, or
* for any such Derivative Works as a whole, provided Your use,
* reproduction, and distribution of the Work otherwise complies with
* the conditions stated in this License.
*
* 5. Submission of Contributions. Unless You explicitly state otherwise,
* any Contribution intentionally submitted for inclusion in the Work
* by You to the Licensor shall be under the terms and conditions of
* this License, without any additional terms or conditions.
* Notwithstanding the above, nothing herein shall supersede or modify
* the terms of any separate license agreement you may have executed
* with Licensor regarding such Contributions.
*
* 6. Trademarks. This License does not grant permission to use the trade
* names, trademarks, service marks, or product names of the Licensor,
* except as required for reasonable and customary use in describing the
* origin of the Work and reproducing the content of the NOTICE file.
*
* 7. Disclaimer of Warranty. Unless required by applicable law or
* agreed to in writing, Licensor provides the Work (and each
* Contributor provides its Contributions) on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
* implied, including, without limitation, any warranties or conditions
* of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
* PARTICULAR PURPOSE. You are solely responsible for determining the
* appropriateness of using or redistributing the Work and assume any
* risks associated with Your exercise of permissions under this License.
*
* 8. Limitation of Liability. In no event and under no legal theory,
* whether in tort (including negligence), contract, or otherwise,
* unless required by applicable law (such as deliberate and grossly
* negligent acts) or agreed to in writing, shall any Contributor be
* liable to You for damages, including any direct, indirect, special,
* incidental, or consequential damages of any character arising as a
* result of this License or out of the use or inability to use the
* Work (including but not limited to damages for loss of goodwill,
* work stoppage, computer failure or malfunction, or any and all
* other commercial damages or losses), even if such Contributor
* has been advised of the possibility of such damages.
*
* 9. Accepting Warranty or Additional Liability. While redistributing
* the Work or Derivative Works thereof, You may choose to offer,
* and charge a fee for, acceptance of support, warranty, indemnity,
* or other liability obligations and/or rights consistent with this
* License. However, in accepting such obligations, You may act only
* on Your own behalf and on Your sole responsibility, not on behalf
* of any other Contributor, and only if You agree to indemnify,
* defend, and hold each Contributor harmless for any liability
* incurred by, or claims asserted against, such Contributor by reason
* of your accepting any such warranty or additional liability.
*
* END OF TERMS AND CONDITIONS
*
* APPENDIX: How to apply the Apache License to your work.
*
* To apply the Apache License to your work, attach the following
* boilerplate notice, with the fields enclosed by brackets "[]"
* replaced with your own identifying information. (Don't include
* the brackets!) The text should be enclosed in the appropriate
* comment syntax for the file format. We also recommend that a
* file or class name and description of purpose be included on the
* same "printed page" as the copyright notice for easier
* identification within third-party archives.
*
* Copyright [yyyy] [name of copyright owner]
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
libcommons-openpgp-java/README 0000644 0001750 0001750 00000000721 10447044607 015157 0 ustar paul paul This component is supposed to provide a small library to support PGP
signing, verifying of PGP signatures and maybe even PGP key management
and encryption/decryption.
Interested parties right now are the Ant and Maven projects (for
signing tasks, mainly), Maven Wagon and the Repository team.
The idea is to start with an implementation based on BouncyCastle's
library, but provide an interface that may allow to plug in different
providers like cryptix as well.
libcommons-openpgp-java/build.xml 0000644 0001750 0001750 00000005460 10345645123 016122 0 ustar paul paul
At least one test has failed.