matthias/mayan-edms
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Workaround problem with gpg embedded signatures corrupting the source file by using clearsign=False by default.

Browse Source
This commit is contained in:
Roberto Rosario
2016-04-01 23:28:34 -04:00
parent 9a0dd8c192
commit c6fb008562
2 changed files with 9 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
mayan/apps/django_gpg/models.py
View File

@@ -125,7 +125,14 @@ class Key(models.Model):
def __str__(self):
return '{} - {}'.format(self.key_id, self.user_id)
def sign_file(self, file_object, passphrase=None, clearsign=True, detached=False, binary=False, output=None):
def sign_file(self, file_object, passphrase=None, clearsign=False, detached=False, binary=False, output=None):
# WARNING: using clearsign=True and subsequent decryption corrupts the
# file. Appears to be a problem in python-gnupg or gpg itself.
# https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=55647
# "The problems differ from run to run and file to
# file, and appear to be due to random data being inserted in the
# output data stream."
temporary_directory = tempfile.mkdtemp()
os.chmod(temporary_directory, 0x1C0)

2
mayan/apps/document_signatures/tests/test_models.py
View File

@@ -342,4 +342,4 @@ class EmbeddedSignaturesTestCase(TestCase):
new_hash = hashlib.sha256(file_object.read()).hexdigest()
self.assertEqual(original_size, new_size)
self.assertEqual(origianl_hash, new_hash)
self.assertEqual(original_hash, new_hash)