1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
|
program gpggraph;
{$R *.res}
uses
mystringlistunit, classes, sysutils, graphunit, lowlevelunit;
const
gpgCommand = 'gpg --no-auto-check-trustdb --fast-list-mode --fixed-list-mode';
var
lKeys,kKeys: tMyStringList;
baum: tKnotens;
wurzel: tKnoten;
spitzen: array of tKnoten;
i,j,k: longint;
cK: tKnoten;
s: string;
f: textfile;
begin
lKeys:=tMyStringList.create;
kKeys:=tMyStringList.create;
write('Kernel-Schlüssel inkl. Signaturen laden ...');
kKeys.loadFromPipe(gpgCommand+' --list-sigs --homedir /var/cache/kernelKeys/.gnupg');
write(' und bereinigen ...');
kKeys.grep('^(pub|sig)');
write(' und umformen ...');
kKeys.replace('^pub .*/([0-9A-F]{8}) .*$','pub $1');
kKeys.replace('^sig .* ([0-9A-F]{8}) .*$','sig $1');
write(' und noch mal bereinigen ...');
kKeys.uniq('-');
write(' und in Graphen umwandeln ...');
baum:=tKnotens.create;
i:=0;
j:=0;
while i<kKeys.count do begin
if leftStr(kKeys[i],4)='pub ' then begin
inc(j);
if j>=500 then begin
write('.');
j:=0;
end;
if rightStr(kKeys[i],8)='65D0FD58' then begin
inc(i);
continue;
end;
cK:=baum.findeKnoten(rightStr(kKeys[i],8));
inc(i);
while (i<kKeys.count) and (leftStr(kKeys[i],4)='sig ') do begin
cK.addSig(baum,rightStr(kKeys[i],8));
inc(i);
end;
end
else
inc(i);
end;
kKeys.clear;
writeln(' fertig');
write('lokale Schlüssel laden ...');
lKeys.loadFromPipe(gpgCommand+' --list-keys');
lKeys.grep('^pub');
lKeys.replace('^\S+\s+[^ /]+/([0-9A-F]{8}) .*$','0x$1');
lKeys.sort;
lKeys.uniq('-');
write(' und Kernel-Schlüssel laden ...');
baum.gibAlles(kKeys);
write(' und Duplikate finden ...');
lKeys.append(kKeys);
kKeys.clear;
lKeys.sort;
lKeys.uniq('d');
lKeys.grep('^0x(CAFAA3E1|00411886|76E21CBB|65D0FD58|329DD07E|4FF14263|BA50A935|CB944925)$',true); // ignoriere diese Schlüssel lokal, weil ich den Leuten nicht (direkt) vertraue
kKeys.loadFromPipe(gpgCommand+' --list-keys '+lKeys.text);
lKeys.clear;
kKeys.grep('^pub');
kKeys.grep('expired|revoked',true);
kKeys.replace('^\S+\s+[^ /]+/([0-9A-F]{8}) .*$','$1');
kKeys.sort;
wurzel:=baum.findeKnoten('00411886'); // Torvalds Schlüssel
setlength(spitzen,kKeys.count);
for i:=0 to length(spitzen)-1 do
spitzen[i]:=baum.findeKnoten(kKeys[i]); // lokal bekannte Schlüssel
writeln(' fertig');
kKeys.clear;
writeln;
for i:=0 to length(spitzen)-1 do begin
write('0x'+spitzen[i].idStr+': '+inttostr(kKeys.count));
j:=baum.wasLiegtZwischen(wurzel,spitzen[i],0,kKeys);
writeln(' -> '+inttostr(kKeys.count)+' ('+inttostr(j)+')');
kKeys.sort;
kKeys.uniq('-');
end;
writeln(kKeys.count);
j:=-1;
assignfile(f,'');
for i:=0 to kKeys.count-1 do begin
s:=kKeys[i];
k:=strtoint(erstesArgument(s,':'));
if j<>k then begin
if j<>-1 then closefile(f);
j:=k;
assignfile(f,extractfilepath(paramstr(0))+'out.'+inttostr(j));
rewrite(f);
end;
writeln(f,s);
end;
if j<>-1 then closefile(f);
lKeys.free;
kKeys.free;
end.
|
