英文:
Verify gpg signature in Go openpgp
问题
我正在玩写一个Go程序,用于下载和验证文件。
我希望能够避免强制用户安装gnupg(如果可能的话)。
是否可以使用Go的openpgp库或其他Go库来验证使用gpg签名(asc文件)描述的下载文件,就像这里或这里所描述的那样?
如果有任何示例演示如何使用openpgp来验证带有asc签名的文件,将不胜感激。
英文:
I'm playing with writing a Go program that downloads and verifies files.
I am hoping to avoid forcing the user to install gnupg (if possible).
Is it possible to verify a downloaded file with a gpg signature (asc file) as described here or here using Go's openpgp lib or some other Go library?
Any examples demonstrating how to use openpgp to verify a file with an asc signature would be appreciated.
答案1
得分: 4
我能够使用以下代码验证一个gpg签名:
package main
import (
	"fmt"
	"golang.org/x/crypto/openpgp"
	"os"
)
func main() {
	keyRingReader, err := os.Open("signer-pubkey.asc")
	if err != nil {
		fmt.Println(err)
		return
	}
	signature, err := os.Open("signature.asc")
	if err != nil {
		fmt.Println(err)
		return
	}
	verification_target, err := os.Open("mysql-5.7.9-win32.zip")
	if err != nil {
		fmt.Println(err)
		return
	}
	keyring, err := openpgp.ReadArmoredKeyRing(keyRingReader)
	if err != nil {
		fmt.Println("Read Armored Key Ring: " + err.Error())
		return
	}
	entity, err := openpgp.CheckArmoredDetachedSignature(keyring, verification_target, signature)
	if err != nil {
		fmt.Println("Check Detached Signature: " + err.Error())
		return
	}
	fmt.Println(entity)
}
完整代码:https://gist.github.com/lsowen/d420a64821414cd2adfb
英文:
I was able to verify a gpg signature using the following code:
package main
import (
        "fmt"
        "golang.org/x/crypto/openpgp"
        "os"
)
func main() {
        keyRingReader, err := os.Open("signer-pubkey.asc")
        if err != nil {
                fmt.Println(err)
                return
        }
        signature, err := os.Open("signature.asc")
        if err != nil {
                fmt.Println(err)
                return
        }
        verification_target, err := os.Open("mysql-5.7.9-win32.zip")
        if err != nil {
                fmt.Println(err)
                return
        }
        keyring, err := openpgp.ReadArmoredKeyRing(keyRingReader)
        if err != nil {
                fmt.Println("Read Armored Key Ring: " + err.Error())
                return
        }
        entity, err := openpgp.CheckArmoredDetachedSignature(keyring, verification_target, signature)
        if err != nil {
                fmt.Println("Check Detached Signature: " + err.Error())
                return
        }
        fmt.Println(entity)
}
Full code: https://gist.github.com/lsowen/d420a64821414cd2adfb
通过集体智慧和协作来改善编程学习和解决问题的方式。致力于成为全球开发者共同参与的知识库,让每个人都能够通过互相帮助和分享经验来进步。


评论