* new version of allout.el - patch and ChangeLog
@ 2005-09-30 17:24 Ken Manheimer
2005-09-30 21:06 ` Sascha Wilde
[not found] ` <E1ELj0L-0000Pn-3T@fencepost.gnu.org>
0 siblings, 2 replies; 156+ messages in thread
From: Ken Manheimer @ 2005-09-30 17:24 UTC (permalink / raw)
[-- Attachment #1: Type: text/plain, Size: 1881 bytes --]
attached is a patch and ChangeLog for a substantial new version of
allout.el, emacs' alternative (and much more extensive) outliner. i
think it's ready to revise the distributed version.
this version adds topic encryption, using GPG. it also includes
several fixes and enhancements, described in the ChangeLog entry
below is the synopsis of just the encryption features, from the ChangeLog entry.
- new subsystem supporting easy gpg topic encryption/decryption.
salient features:
- both public- and symmetric-key modes are supported.
- encryption being on a per-topic basis means you can
intersperse encrypted and clear-text data in a single file
to your heart's content.
- user-provided symmetric-key hints, with consistency
verification to help user avoid confusion
- time-limited key reuse, a la (and using) mailcrypt's
mc-passwd-timeout
- write-file-hook and auto-save-hook activities to support auto
encryption of pending topics on save; provision to skip
currently-edited topic to avoid editing disturbance
topic encryption functionality depends on both mailcrypt and
crypt++ packages. (non-encryption allout functionality is not
disrupted if either mailcrypt or crypt++ are absent.)
`allout-toggle-current-subtree-encryption' is the central
routine.
there are a five new encryption customization variables:
- allout-topic-encryption-bullet
- allout-default-encryption-scheme
- allout-key-verifier-handling
- allout-key-hint-handling
- allout-encrypt-unencrypted-on-saves
topic encryption is included in mouse menu
docstring for `allout-toggle-current-subtree-encryption'
and customization variables provide detailed description.
ken manheimer
ken.manheimer@gmail.com
[-- Attachment #2: allout-patch.txt --]
[-- Type: text/plain, Size: 115417 bytes --]
--- allout.el.~1.61.~ 2005-08-06 18:13:41.000000000 -0400
+++ allout.el 2005-09-30 13:09:03.000000000 -0400
@@ -3,10 +3,11 @@
;; Copyright (C) 1992, 1993, 1994, 2001, 2002, 2003, 2004,
;; 2005 Free Software Foundation, Inc.
-;; Author: Ken Manheimer <klm@zope.com>
-;; Maintainer: Ken Manheimer <klm@zope.com>
+;; Author: Ken Manheimer <ken dot manheimer at gmail dot com>
+;; Maintainer: Ken Manheimer <ken dot manheimer at gmail dot com>
;; Created: Dec 1991 - first release to usenet
-;; Keywords: outlines mode wp languages
+;; Version: $Id: allout.el,v 1.67 2005/09/30 17:15:24 klm Exp $||
+;; Keywords: outlines wp languages
;; This file is part of GNU Emacs.
@@ -34,43 +35,68 @@
;; programming languages. (For an example, see the allout code
;; itself, which is organized in ;; an outline framework.)
;;
-;; In addition to outline navigation and exposure, allout includes:
+;; Some features:
;;
-;; - topic-oriented repositioning, cut, and paste
-;; - integral outline exposure-layout
-;; - incremental search with dynamic exposure and reconcealment of hidden text
+;; - classic outline-mode topic-oriented navigation and exposure adjustment
+;; - topic-oriented editing including coherent topic and subtopic
+;; creation, promotion, demotion, cut/paste across depths, etc
+;; - incremental search with dynamic exposure and reconcealment of text
+;; - customizable bullet format enbles programming-language specific
+;; outlining, for ultimate code-folding editing. (allout code itself is
+;; formatted as an outline - do ESC-x eval-current-buffer in allout.el
+;; to try it out.)
+;; - configurable per-file initial exposure settings
+;; - symmetric-key and key-pair topic encryption, plus reliable key
+;; verification and user-supplied hint maintenance. (see
+;; allout-toggle-current-subtree-encryption docstring.)
;; - automatic topic-number maintenance
-;; - "Hot-spot" operation, for single-keystroke maneuvering and
-;; exposure control. (See the `allout-mode' docstring.)
+;; - "hot-spot" operation, for single-keystroke maneuvering and
+;; exposure control (see the allout-mode docstring)
+;; - easy rendering of exposed portions into numbered, latex, indented, etc
+;; outline styles
;;
-;; and many other features.
+;; and more.
;;
;; The outline menubar additions provide quick reference to many of
-;; the features, and see the docstring of the function `allout-init'
-;; for instructions on priming your Emacs session for automatic
-;; activation of `allout-mode'.
+;; the features, and see the docstring of the variable `allout-init'
+;; for instructions on priming your emacs session for automatic
+;; activation of allout-mode.
;;
;; See the docstring of the variables `allout-layout' and
;; `allout-auto-activation' for details on automatic activation of
-;; allout `allout-mode' as a minor mode. (It has changed since allout
+;; `allout-mode' as a minor mode. (It has changed since allout
;; 3.x, for those of you that depend on the old method.)
;;
;; Note - the lines beginning with `;;;_' are outline topic headers.
;; Just `ESC-x eval-current-buffer' to give it a whirl.
-;; Ken Manheimer klm@zope.com
+;; ken manheimer (ken dot manheimer at gmail dot com)
;;; Code:
;;;_* Provide
+;(provide 'outline)
(provide 'allout)
+;;;_* Dependency autoloads
+(eval-when-compile 'cl) ; otherwise, flet compilation fouls
+(autoload 'crypt-encrypt-buffer "crypt++")
+(setq-default crypt-encryption-type 'gpg)
+
+(autoload 'mc-encrypt "mailcrypt"
+ "*Encrypt the current buffer")
+(autoload 'mc-activate-passwd "mailcrypt"
+ "Activate the passphrase matching ID, using PROMPT for a prompt.
+Return the passphrase. If PROMPT is nil, only return value if cached.")
+(autoload 'mc-gpg-process-region "mc-gpg")
+(autoload 'mc-dectivate-passwd "mailcrypt"
+ "*Deactivate the passphrase cache.")
+
;;;_* USER CUSTOMIZATION VARIABLES:
(defgroup allout nil
"Extensive outline mode for use alone and with other modes."
:prefix "allout-"
- :group 'editing
- :version "22.1")
+ :group 'outlines)
;;;_ + Layout, Mode, and Topic Header Configuration
@@ -111,8 +137,8 @@
A list value specifies a default layout for the current buffer, to be
applied upon activation of `allout-mode'. Any non-nil value will
-automatically trigger `allout-mode', provided `allout-init'
-has been called to enable it.
+automatically trigger `allout-mode', provided `allout-init' has been called
+to enable it.
See the docstring for `allout-init' for details on setting up for
auto-mode-activation, and for `allout-expose-topic' for the format of
@@ -171,7 +197,7 @@
:group 'allout)
(make-variable-buffer-local 'allout-primary-bullet)
;;;_ = allout-plain-bullets-string
-(defcustom allout-plain-bullets-string ".:,;"
+(defcustom allout-plain-bullets-string ".,"
"*The bullets normally used in outline topic prefixes.
See `allout-distinctive-bullets-string' for the other kind of
@@ -185,7 +211,7 @@
:group 'allout)
(make-variable-buffer-local 'allout-plain-bullets-string)
;;;_ = allout-distinctive-bullets-string
-(defcustom allout-distinctive-bullets-string "*+-=>([{}&!?#%\"X@$~_\\"
+(defcustom allout-distinctive-bullets-string "*+-=>()[{}&!?#%\"X@$~_\\:;^"
"*Persistent outline header bullets used to distinguish special topics.
These bullets are used to distinguish topics from the run-of-the-mill
@@ -198,12 +224,13 @@
`?' question topics
`\(' parenthetic comment \(with a matching close paren inside)
`[' meta-note \(with a matching close ] inside)
- `\"' a quote
+ `\"' a quotation
`=' value settings
`~' \"more or less\"
+ `^' see above
-... just for example. (`#' typically has a special meaning to the
-software, according to the value of `allout-numbered-bullet'.)
+ ... for example. (`#' typically has a special meaning to the software,
+according to the value of `allout-numbered-bullet'.)
See `allout-plain-bullets-string' for the selection of
alternating bullets.
@@ -337,7 +364,6 @@
Set this var to the bullet you want to use for file cross-references."
:type '(choice (const nil) string)
:group 'allout)
-
;;;_ = allout-presentation-padding
(defcustom allout-presentation-padding 2
"*Presentation-format white-space padding factor, for greater indent."
@@ -381,7 +407,7 @@
:type 'string
:group 'allout)
;;;_ - allout-title
-(defcustom allout-title '(or buffer-file-name (current-buffer-name))
+(defcustom allout-title '(or buffer-file-name (buffer-name))
"*Expression to be evaluated to determine the title for LaTeX
formatted copy."
:type 'sexp
@@ -397,6 +423,94 @@
:type 'string
:group 'allout)
+;;;_ + Topic encryption
+;;;_ = allout-topic-encryption-bullet
+(defcustom allout-topic-encryption-bullet "~"
+ "*Bullet signifying encryption of the entry's body."
+ :type '(choice (const nil) string)
+ :group 'allout)
+;;;_ = allout-default-encryption-scheme
+(defcustom allout-default-encryption-scheme 'mc-scheme-gpg
+ "*Default allout outline topic encryption mode.
+
+See mailcrypt variable `mc-schemes' and mailcrypt docs for encryption schemes."
+ :type 'symbol
+ :group 'allout)
+;;;_ = allout-key-verifier-handling
+(defcustom allout-key-verifier-handling 'situate
+ "*Dictate outline encryption key verifier handling.
+
+The key verifier is string associated with a file that is encrypted with
+the file's current symmetric encryption key. It is used, if present, to
+confirm that the key entered by the user is the same as the established
+one, or explicitly presenting the user with the choice to go with a
+new key when a difference is encountered.
+
+The range of values are:
+
+ situate - include key verifier string as text in the file's local-vars
+ section
+ transient - establish the value as a variable in the file's buffer, but
+ don't preserve it as a file variable.
+ disabled - don't establish or do verification.
+
+See the docstring for the `allout-enable-file-variable-adjustment'
+variable for details about allout ajustment of file variables."
+ :type '(choice (const situate)
+ (const transient)
+ (const disabled))
+ :group 'allout)
+(make-variable-buffer-local 'allout-key-verifier-handling)
+;;;_ = allout-key-hint-handling
+(defcustom allout-key-hint-handling 'always
+ "*Dictate outline encryption key reminder handling:
+
+ always - always show reminder when prompting
+ needed - show reminder on key entry failure
+ manage - never present reminder, but still manage a file-var entry for it
+ disabled - don't even manage the file variable entry
+
+See the docstring for the `allout-enable-file-variable-adjustment'
+variable for details about allout ajustment of file variables."
+ :type '(choice (const always)
+ (const needed)
+ (const manage)
+ (const disabled))
+ :group 'allout)
+(make-variable-buffer-local 'allout-key-hint-handling)
+;;;_ = allout-encrypt-unencrypted-on-saves
+(defcustom allout-encrypt-unencrypted-on-saves 'except-current
+ "*When saving, should topics pending encryption be encrypted?
+
+The idea is to prevent file-system exposure of any un-encrypted stuff, and
+mostly covers both deliberate file writes and auto-saves.
+
+ - Yes: encrypt all topics pending encryption, even if it's the one
+ currently being edited. \(In that case, the currently edited topic
+ will be automatically decrypted before any user interaction, so they
+ can continue editing but the copy on the file system will be
+ encrypted.)
+ Auto-saves will use the \"All except current topic\" mode if this
+ one is selected, to avoid practical difficulties - see below.
+ - All except current topic: skip the topic currently being edited, even if
+ it's pending encryption. This may expose the current topic on the
+ file sytem, but avoids the nuisance of prompts for the encryption
+ key in the middle of editing for, eg, autosaves.
+ This mode is used for auto-saves for both this option and \"Yes\".
+ - No: leave it to the user to encrypt any unencrypted topics.
+
+For practical reasons, auto-saves always use the 'except-current policy
+when auto-encryption is enabled. \(Otherwise, spurious key prompts and
+unavoidable timing collisions are too disruptive.) If security for a file
+requires that even the current topic is never auto-saved in the clear,
+disable auto-saves for that file."
+
+ :type '(choice (const :tag "Yes" t)
+ (const :tag "All except current topic" except-current)
+ (const :tag "No" nil))
+ :group 'allout)
+(make-variable-buffer-local 'allout-encrypt-unencrypted-on-saves)
+
;;;_ + Miscellaneous customization
;;;_ = allout-command-prefix
@@ -422,13 +536,15 @@
("\C-f" allout-forward-current-level)
("\C-b" allout-backward-current-level)
("\C-a" allout-beginning-of-current-entry)
- ("\C-e" allout-end-of-current-entry)
+ ("\C-e" allout-end-of-entry)
; Exposure commands:
("\C-i" allout-show-children)
("\C-s" allout-show-current-subtree)
("\C-h" allout-hide-current-subtree)
+ ("h" allout-hide-current-subtree)
("\C-o" allout-show-current-entry)
("!" allout-show-all)
+ ("x" allout-toggle-current-subtree-encryption)
; Alteration commands:
(" " allout-open-sibtopic)
("." allout-open-subtopic)
@@ -489,19 +605,22 @@
(make-variable-buffer-local 'allout-reindent-bodies)
-;;;_ = allout-inhibit-protection
-(defcustom allout-inhibit-protection nil
- "*Non-nil disables warnings and confirmation-checks for concealed-text edits.
-
-Outline mode uses Emacs change-triggered functions to detect unruly
-changes to concealed regions. Set this var non-nil to disable the
-protection, potentially increasing text-entry responsiveness a bit.
-
-This var takes effect at `allout-mode' activation, so you may have to
-deactivate and then reactivate the mode if you want to toggle the
-behavior."
+;;;_ = allout-enable-file-variable-adjustment
+(defcustom allout-enable-file-variable-adjustment t
+ "*If non-nil, some allout outline actions can edit Emacs file variables text.
+
+This can range from changes to existing entries, addition of new ones,
+and creation of a new local variables section when necessary.
+
+Emacs file variables adjustments are also inhibited if `enable-local-variables'
+is nil.
+
+Operations potentially causing edits include allout encryption routines.
+See the docstring for `allout-toggle-current-subtree-encryption' for
+details."
:type 'boolean
:group 'allout)
+(make-variable-buffer-local 'allout-enable-file-variable-adjustment)
;;;_* CODE - no user customizations below.
@@ -728,12 +847,17 @@
(car (cdr cell)))))))
keymap-list)
map))
-
+;;;_ = allout-prior-bindings - being deprecated.
+(defvar allout-prior-bindings nil
+ "Variable for use in V18, with allout-added-bindings, for
+resurrecting, on mode deactivation, bindings that existed before
+activation. Being deprecated.")
+;;;_ = allout-added-bindings - being deprecated
+(defvar allout-added-bindings nil
+ "Variable for use in V18, with allout-prior-bindings, for
+resurrecting, on mode deactivation, bindings that existed before
+activation. Being deprecated.")
;;;_ : Menu bar
-(defvar allout-mode-exposure-menu)
-(defvar allout-mode-editing-menu)
-(defvar allout-mode-navigation-menu)
-(defvar allout-mode-misc-menu)
(defun produce-allout-mode-menubar-entries ()
(require 'easymenu)
(easy-menu-define allout-mode-exposure-menu
@@ -759,7 +883,11 @@
["Shift Topic Out" allout-shift-out t]
["Rebullet Topic" allout-rebullet-topic t]
["Rebullet Heading" allout-rebullet-current-heading t]
- ["Number Siblings" allout-number-siblings t]))
+ ["Number Siblings" allout-number-siblings t]
+ "----"
+ ["Toggle Topic Encryption"
+ allout-toggle-current-subtree-encryption
+ (> (allout-current-depth) 1)]))
(easy-menu-define allout-mode-navigation-menu
allout-mode-map
"Allout outline navigation menu."
@@ -775,7 +903,7 @@
"----"
["Beginning of Entry"
allout-beginning-of-current-entry t]
- ["End of Entry" allout-end-of-current-entry t]
+ ["End of Entry" allout-end-of-entry t]
["End of Subtree" allout-end-of-current-subtree t]))
(easy-menu-define allout-mode-misc-menu
allout-mode-map
@@ -855,13 +983,6 @@
(setq allout-mode-prior-settings rebuild)))))
)
;;;_ : Mode-specific incidentals
-;;;_ = allout-during-write-cue nil
-(defvar allout-during-write-cue nil
- "Used to inhibit outline change-protection during file write.
-
-See also `allout-post-command-business', `allout-write-file-hook',
-`allout-before-change-protect', and `allout-post-command-business'
-functions.")
;;;_ = allout-pre-was-isearching nil
(defvar allout-pre-was-isearching nil
"Cue for isearch-dynamic-exposure mechanism, implemented in
@@ -869,22 +990,28 @@
(make-variable-buffer-local 'allout-pre-was-isearching)
;;;_ = allout-isearch-prior-pos nil
(defvar allout-isearch-prior-pos nil
- "Cue for isearch-dynamic-exposure tracking, used by `allout-isearch-expose'.")
+ "Cue for isearch-dynamic-exposure tracking, used by
+`allout-isearch-expose'.")
(make-variable-buffer-local 'allout-isearch-prior-pos)
-;;;_ = allout-override-protect nil
-(defvar allout-override-protect nil
- "Used in `allout-mode' for regulate of concealed-text protection mechanism.
-
-Allout outline mode regulates alteration of concealed text to protect
-against inadvertent, unnoticed changes. This is for use by specific,
-native outline functions to temporarily override that protection.
-It's automatically reset to nil after every buffer modification.")
-(make-variable-buffer-local 'allout-override-protect)
+;;;_ = allout-isearch-did-quit
+(defvar allout-isearch-did-quit nil
+ "Distinguishes isearch conclusion and cancellation.
+
+Maintained by allout-isearch-abort \(which is wrapped around the real
+isearch-abort), and monitored by allout-isearch-expose for action.")
+(make-variable-buffer-local 'allout-isearch-did-quit)
;;;_ > allout-unprotected (expr)
-(defmacro allout-unprotected (expression)
- "Evaluate EXPRESSION with `allout-override-protect' let-bound to t."
- `(let ((allout-override-protect t))
- ,expression))
+(defmacro allout-unprotected (expr)
+ "Enable internal outline operations to alter read-only text."
+ `(let ((was-inhibit-r-o inhibit-read-only))
+ (unwind-protect
+ (progn
+ (setq inhibit-read-only t)
+ ,expr)
+ (setq inhibit-read-only was-inhibit-r-o)
+ )
+ )
+ )
;;;_ = allout-undo-aggregation
(defvar allout-undo-aggregation 30
"Amount of successive self-insert actions to bunch together per undo.
@@ -897,14 +1024,109 @@
"Horrible hack used to prevent invalid multiple triggering of outline
mode from prop-line file-var activation. Used by `allout-mode' function
to track repeats.")
-;;;_ > allout-write-file-hook ()
-(defun allout-write-file-hook ()
- "In `allout-mode', run as a `write-contents-functions' activity.
-
-Currently just sets `allout-during-write-cue', so outline change-protection
-knows to keep inactive during file write."
- (setq allout-during-write-cue t)
- nil)
+;;;_ = allout-file-key-verifier-string
+(defvar allout-file-key-verifier-string nil
+ "Name for use as a file variable for verifying encryption key across
+sessions.")
+(make-variable-buffer-local 'allout-file-key-verifier-string)
+;;;_ = allout-encryption-scheme
+(defvar allout-encryption-scheme nil
+ "*Allout outline topic encryption scheme pending for the current buffer.
+
+Intended as a file-specific (buffer local) setting, it defaults to the
+value of allout-default-encryption-scheme if nil.")
+(make-variable-buffer-local 'allout-encryption-scheme)
+;;;_ = allout-key-verifier-string
+(defvar allout-key-verifier-string nil
+ "Setting used to test solicited encryption keys against that already
+associated with a file.
+
+It consists of an encrypted random string useful only to verify that a key
+entered by the user is effective for decryption. The key itself is \*not*
+recorded in the file anywhere, and the encrypted contents are random binary
+characters to avoid exposing greater susceptibility to search attacks.
+
+The verifier string is retained as an Emacs file variable, as well as in
+the emacs buffer state, if file variable adjustments are enabled. See
+`allout-enable-file-variable-adjustment' for details about that.")
+(make-variable-buffer-local 'allout-key-verifier-string)
+(setq-default allout-key-verifier-string nil)
+;;;_ = allout-key-hint-string
+(defvar allout-key-hint-string ""
+ "Variable used to retain a reminder string for a file's encryption key.
+
+See the description of `allout-key-hint-handling' for details about how
+the reminder is deployed.
+
+The hint is retained as an Emacs file variable, as well as in the emacs buffer
+state, if file variable adjustments are enabled. See
+`allout-enable-file-variable-adjustment' for details about that.")
+(make-variable-buffer-local 'allout-key-hint-string)
+(setq-default allout-key-hint-string "")
+;;;_ = allout-after-save-decrypt
+(defvar allout-after-save-decrypt nil
+ "Internal variable, is nil or has the value of two points:
+
+ - the location of a topic to be decrypted after saving is done
+ - where to situate the cursor after the decryption is performed
+
+This is used to decrypt the topic that was currently being edited, if it
+was encrypted automatically as part of a file write or autosave.")
+(make-variable-buffer-local 'allout-after-save-decrypt)
+;;;_ > allout-write-file-hook-handler ()
+(defun allout-write-file-hook-handler ()
+ "Implement `allout-encrypt-unencrypted-on-saves' policy for file writes."
+
+ (if (or (not (boundp 'allout-encrypt-unencrypted-on-saves))
+ (not allout-encrypt-unencrypted-on-saves))
+ nil
+ (let ((except-mark (and (equal allout-encrypt-unencrypted-on-saves
+ 'except-current)
+ (point-marker))))
+ (if (save-excursion (goto-char (point-min))
+ (allout-next-topic-pending-encryption except-mark))
+ (progn
+ (message "auto-encrypting pending topics")
+ (sit-for 2)
+ (condition-case failure
+ (setq allout-after-save-decrypt
+ (allout-encrypt-decrypted except-mark))
+ (error (progn
+ (message
+ "allout-write-file-hook-handler suppressing error %s"
+ failure)
+ (sit-for 2))))))
+ ))
+ nil)
+;;;_ > allout-auto-save-hook-handler ()
+(defun allout-auto-save-hook-handler ()
+ "Implement `allout-encrypt-unencrypted-on-saves' policy for auto saves."
+
+ (if allout-encrypt-unencrypted-on-saves
+ ;; Always implement 'except-current policy when enabled.
+ (let ((allout-encrypt-unencrypted-on-saves 'except-current))
+ (allout-write-file-hook-handler))))
+;;;_ > allout-after-saves-handler ()
+(defun allout-after-saves-handler ()
+ "Decrypt topic encrypted for save, if it's currently being edited.
+
+Ie, if it was pending encryption and contained the point in its body before
+the save.
+
+We use values stored in `allout-after-save-decrypt' to locate the topic
+and the place for the cursor after the decryption is done."
+ (if (not (and (allout-mode-p)
+ (boundp 'allout-after-save-decrypt)
+ allout-after-save-decrypt))
+ t
+ (goto-char (car allout-after-save-decrypt))
+ (let ((was-modified (buffer-modified-p)))
+ (allout-toggle-current-subtree-encryption)
+ (if (not was-modified)
+ (set-buffer-modified-p nil)))
+ (goto-char (cadr allout-after-save-decrypt))
+ (setq allout-after-save-decrypt nil))
+ )
;;;_ #2 Mode activation
;;;_ = allout-mode
@@ -916,11 +1138,10 @@
'allout-mode)
;;;_ = allout-explicitly-deactivated
(defvar allout-explicitly-deactivated nil
- "Non-nil if `allout-mode' was last deliberately deactivated.
+ "If t, `allout-mode's last deactivation was deliberate.
So `allout-post-command-business' should not reactivate it...")
(make-variable-buffer-local 'allout-explicitly-deactivated)
;;;_ > allout-init (&optional mode)
-;;;###autoload
(defun allout-init (&optional mode)
"Prime `allout-mode' to enable/disable auto-activation, wrt `allout-layout'.
@@ -939,9 +1160,9 @@
the `allout-layout' variable. (See `allout-layout' and
`allout-expose-topic' docstrings for more details on auto layout).
-`allout-init' works by setting up (or removing)
-`allout-find-file-hook' in `find-file-hook', and giving
-`allout-auto-activation' a suitable setting.
+`allout-init' works by setting up (or removing) the allout-mode
+find-file-hook, and giving `allout-auto-activation' a suitable
+setting.
To prime your Emacs session for full auto-outline operation, include
the following two lines in your Emacs init file:
@@ -949,32 +1170,35 @@
\(require 'allout)
\(allout-init t)"
- (interactive
- (let ((m (completing-read
- (concat "Select outline auto setup mode "
- "(empty for report, ? for options) ")
- '(("nil")("full")("activate")("deactivate")
- ("ask") ("report") (""))
- nil
- t)))
- (if (string= m "") 'report
- (intern-soft m))))
+ (interactive)
+ (if (interactive-p)
+ (progn
+ (setq mode
+ (completing-read
+ (concat "Select outline auto setup mode "
+ "(empty for report, ? for options) ")
+ '(("nil")("full")("activate")("deactivate")
+ ("ask") ("report") (""))
+ nil
+ t))
+ (if (string= mode "")
+ (setq mode 'report)
+ (setq mode (intern-soft mode)))))
(let
;; convenience aliases, for consistent ref to respective vars:
((hook 'allout-find-file-hook)
(curr-mode 'allout-auto-activation))
(cond ((not mode)
- (setq find-file-hook (delq hook find-file-hook))
+ (setq find-file-hooks (delq hook find-file-hooks))
(if (interactive-p)
(message "Allout outline mode auto-activation inhibited.")))
((eq mode 'report)
- (if (memq hook find-file-hook)
- ;; Just punt and use the reports from each of the modes:
- (allout-init (symbol-value curr-mode))
- (allout-init nil)
- (message "Allout outline mode auto-activation inhibited.")))
- (t (add-hook 'find-file-hook hook)
+ (if (not (memq hook find-file-hooks))
+ (allout-init nil)
+ ;; Just punt and use the reports from each of the modes:
+ (allout-init (symbol-value curr-mode))))
+ (t (add-hook 'find-file-hooks hook)
(set curr-mode ; `set', not `setq'!
(cond ((eq mode 'activate)
(message
@@ -1022,10 +1246,11 @@
In addition to outline navigation and exposure, allout includes:
- - topic-oriented repositioning, cut, and paste
+ - topic-oriented repositioning, promotion/demotion, cut, and paste
- integral outline exposure-layout
- incremental search with dynamic exposure and reconcealment of hidden text
- automatic topic-number maintenance
+ - easy topic encryption and decryption
- \"Hot-spot\" operation, for single-keystroke maneuvering and
exposure control. \(See the allout-mode docstring.)
@@ -1035,7 +1260,7 @@
special `allout-mode' features and terminology. See also the outline
menubar additions for quick reference to many of the features, and see
the docstring of the function `allout-init' for instructions on
-priming your Emacs session for automatic activation of `allout-mode'.
+priming your emacs session for automatic activation of `allout-mode'.
The bindings are dictated by the `allout-keybindings-list' and
@@ -1048,7 +1273,7 @@
C-c C-u allout-up-current-level | C-c C-s allout-show-current-subtree
C-c C-f allout-forward-current-level | C-c C-o allout-show-current-entry
C-c C-b allout-backward-current-level | ^U C-c C-s allout-show-all
-C-c C-e allout-end-of-current-entry | allout-hide-current-leaves
+C-c C-e allout-end-of-entry | allout-hide-current-leaves
C-c C-a allout-beginning-of-current-entry, alternately, goes to hot-spot
Topic Header Production:
@@ -1064,7 +1289,7 @@
C-c<CR> allout-rebullet-topic Reconcile bullets of topic and its offspring
- distinctive bullets are not changed, others
alternated according to nesting depth.
-C-c * allout-rebullet-current-heading Prompt for alternate bullet for
+C-c b allout-rebullet-current-heading Prompt for alternate bullet for
current topic.
C-c # allout-number-siblings Number bullets of topic and siblings - the
offspring are not affected. With repeat
@@ -1087,8 +1312,8 @@
C-c C-SPC allout-mark-topic
C-c = c allout-copy-exposed-to-buffer
Duplicate outline, sans concealed text, to
- buffer with name derived from derived from
- that of current buffer - \"*XXX exposed*\".
+ buffer with name derived from derived from that
+ of current buffer - \"*BUFFERNAME exposed*\".
C-c = p allout-flatten-exposed-to-buffer
Like above 'copy-exposed', but convert topic
prefixes to section.subsection... numeric
@@ -1096,6 +1321,19 @@
ESC ESC (allout-init t) Setup Emacs session for outline mode
auto-activation.
+ Encrypted Entries
+
+Outline mode supports easily togglable gpg encryption of topics, with
+niceities like support for symmetric and key-pair modes, key timeout, key
+consistency checking, user-provided hinting for symmetric key mode, and
+auto-encryption of topics pending encryption on save. The aim is to enable
+reliable topic privacy while preventing accidents like neglected
+encryption, encryption with a mistaken key, forgetting which key was used,
+and other practical pitfalls.
+
+See the `allout-toggle-current-subtree-encryption' function and
+`allout-encrypt-unencrypted-on-saves' customization variable for details.
+
HOT-SPOT Operation
Hot-spot operation provides a means for easy, single-keystroke outline
@@ -1148,11 +1386,11 @@
HEADER: The first line of a topic, include the topic PREFIX and header
text.
-PREFIX: The leading text of a topic which distinguishes it from
- normal text. It has a strict form, which consists of a
- prefix-lead string, padding, and a bullet. The bullet may be
- followed by a number, indicating the ordinal number of the
- topic among its siblings, a space, and then the header text.
+PREFIX: The leading text of a topic which distinguishes it from normal
+ text. It has a strict form, which consists of a prefix-lead
+ string, padding, and a bullet. The bullet may be followed by a
+ number, indicating the ordinal number of the topic among its
+ siblings, a space, and then the header text.
The relative length of the PREFIX determines the nesting depth
of the topic.
@@ -1223,7 +1461,7 @@
;; off on second invocation, so we detect it as best we can, and
;; skip everything.
((and same-complex-command ; Still in same complex command
- ; as last time `allout-mode' invoked.
+ ; as last time `allout-mode' invoked.
active ; Already activated.
(not explicit-activation) ; Prop-line file-vars don't have args.
(string-match "^19.1[89]" ; Bug only known to be in v19.18 and
@@ -1238,6 +1476,19 @@
; active state or *de*activation
; specifically requested:
(setq allout-explicitly-deactivated t)
+ (if (string-match "^18\." emacs-version)
+ ; Revoke those keys that remain
+ ; as we set them:
+ (let ((curr-loc (current-local-map)))
+ (mapcar (function
+ (lambda (cell)
+ (if (eq (lookup-key curr-loc (car cell))
+ (car (cdr cell)))
+ (define-key curr-loc (car cell)
+ (assq (car cell) allout-prior-bindings)))))
+ allout-added-bindings)
+ (allout-resumptions 'allout-added-bindings)
+ (allout-resumptions 'allout-prior-bindings)))
(if allout-old-style-prefixes
(progn
@@ -1246,9 +1497,12 @@
(allout-resumptions 'selective-display)
(if (and (boundp 'before-change-functions) before-change-functions)
(allout-resumptions 'before-change-functions))
- (setq write-contents-functions
- (delq 'allout-write-file-hook
- write-contents-functions))
+ (setq local-write-file-hooks
+ (delq 'allout-write-file-hook-handler
+ local-write-file-hooks))
+ (setq auto-save-hook
+ (delq 'allout-auto-save-hook-handler
+ auto-save-hook))
(allout-resumptions 'paragraph-start)
(allout-resumptions 'paragraph-separate)
(allout-resumptions (if (string-match "^18" emacs-version)
@@ -1288,25 +1542,27 @@
(cons '(allout-mode . allout-mode-map)
minor-mode-map-alist))))
+ ; V18 minor-mode key bindings:
+ ; Stash record of added bindings
+ ; for later revocation:
+ (allout-resumptions 'allout-added-bindings
+ (list allout-keybindings-list))
+ (allout-resumptions 'allout-prior-bindings
+ (list (current-local-map)))
; and add them:
(use-local-map (produce-allout-mode-map allout-keybindings-list
(current-local-map)))
)
; selective-display is the
- ; Emacs conditional exposure
+ ; emacs conditional exposure
; mechanism:
(allout-resumptions 'selective-display '(t))
- (if allout-inhibit-protection
- t
- (allout-resumptions 'before-change-functions
- '(allout-before-change-protect)))
(add-hook 'pre-command-hook 'allout-pre-command-business)
(add-hook 'post-command-hook 'allout-post-command-business)
- ; Temporarily set by any outline
- ; functions that can be trusted to
- ; deal properly with concealed text.
- (add-hook 'write-contents-functions 'allout-write-file-hook)
+ (add-hook 'local-write-file-hooks 'allout-write-file-hook-handler)
+ (make-variable-buffer-local 'auto-save-hook)
+ (add-hook 'auto-save-hook 'allout-auto-save-hook-handler)
; Custom auto-fill func, to support
; respect for topic headline,
; hanging-indents, etc:
@@ -1337,7 +1593,8 @@
(if allout-layout
(setq do-layout t))
- (if allout-isearch-dynamic-expose
+ (if (and allout-isearch-dynamic-expose
+ (not (fboundp 'allout-real-isearch-abort)))
(allout-enwrap-isearch))
(run-hooks 'allout-mode-hook)
@@ -1376,7 +1633,6 @@
) ; let*
) ; defun
;;;_ > allout-minor-mode
-;;; XXX released verion doesn't do this?
(defalias 'allout-minor-mode 'allout-mode)
;;;_ #3 Internal Position State-Tracking - "allout-recent-*" funcs
@@ -1400,12 +1656,12 @@
"Buffer point last returned by `allout-end-of-current-subtree'.")
(make-variable-buffer-local 'allout-recent-end-of-subtree)
;;;_ > allout-prefix-data (beg end)
-(defmacro allout-prefix-data (beginning end)
+(defmacro allout-prefix-data (beg end)
"Register allout-prefix state data - BEGINNING and END of prefix.
For reference by `allout-recent' funcs. Returns BEGINNING."
`(setq allout-recent-prefix-end ,end
- allout-recent-prefix-beginning ,beginning))
+ allout-recent-prefix-beginning ,beg))
;;;_ > allout-recent-depth ()
(defmacro allout-recent-depth ()
"Return depth of last heading encountered by an outline maneuvering function.
@@ -1598,7 +1854,7 @@
(or (match-end 2) allout-recent-prefix-end))))))
;;;_ - Subtree Charting
-;;;_ " These routines either produce or assess charts, which are
+;;;_ #1 These routines either produce or assess charts, which are
;;; nested lists of the locations of topics within a subtree.
;;;
;;; Use of charts enables efficient navigation of subtrees, by
@@ -1607,14 +1863,17 @@
;;; for assessment or adjustment of the subtree, without redundant
;;; traversal of the structure.
-;;;_ > allout-chart-subtree (&optional levels orig-depth prev-depth)
+;;;_ #2 allout-chart-subtree (&optional levels orig-depth prev-depth)
(defun allout-chart-subtree (&optional levels orig-depth prev-depth)
"Produce a location \"chart\" of subtopics of the containing topic.
Optional argument LEVELS specifies the depth \(relative to start
-depth) for the chart.
+depth) for the chart. Subsequent optional args are not for public
+use.
+
+Point is left at the end of the subtree.
-Charts are used to capture outline structure, so that outline altering
+Charts are used to capture outline structure, so that allout-altering
routines need assess the structure only once, and then use the chart
for their elaborate manipulations.
@@ -1625,11 +1884,9 @@
The chart for a topics' offspring precedes the entry for the topic
itself.
-\(fn &optional LEVELS)"
-
- ;; The other function parameters are for internal recursion, and should
- ;; not be specified by external callers. ORIG-DEPTH is depth of topic at
- ;; starting point, and PREV-DEPTH is depth of prior topic."
+The other function parameters are for internal recursion, and should
+not be specified by external callers. ORIG-DEPTH is depth of topic at
+starting point, and PREV-DEPTH is depth of prior topic."
(let ((original (not orig-depth)) ; `orig-depth' set only in recursion.
chart curr-depth)
@@ -1696,7 +1953,7 @@
chart ; (nreverse chart) not necessary,
; and maybe not preferable.
))
-;;;_ > allout-chart-siblings (&optional start end)
+;;;_ #3 allout-chart-siblings (&optional start end)
(defun allout-chart-siblings (&optional start end)
"Produce a list of locations of this and succeeding sibling topics.
Effectively a top-level chart of siblings. See `allout-chart-subtree'
@@ -1707,7 +1964,7 @@
(while (allout-next-sibling)
(setq chart (cons (point) chart)))
(if chart (setq chart (nreverse chart)))))))
-;;;_ > allout-chart-to-reveal (chart depth)
+;;;_ #4 allout-chart-to-reveal (chart depth)
(defun allout-chart-to-reveal (chart depth)
"Return a flat list of hidden points in subtree CHART, up to DEPTH.
@@ -1731,7 +1988,7 @@
(setq result (cons here result)))
(setq chart (cdr chart))))
result))
-;;;_ X allout-chart-spec (chart spec &optional exposing)
+;;;_ #5 allout-chart-spec (chart spec &optional exposing)
;; (defun allout-chart-spec (chart spec &optional exposing)
;; "Not yet \(if ever) implemented.
@@ -1835,11 +2092,18 @@
(if (re-search-forward allout-line-boundary-regexp nil 'move)
(prog1 (goto-char (match-beginning 0))
(allout-prefix-data (match-beginning 2)(match-end 2)))))
-;;;_ > allout-end-of-current-subtree ()
-(defun allout-end-of-current-subtree ()
- "Put point at the end of the last leaf in the currently visible topic."
- (interactive)
- (allout-back-to-current-heading)
+;;;_ > allout-end-of-subtree (&optional current)
+(defun allout-end-of-subtree (&optional current)
+ "Put point at the end of the last leaf in the containing topic.
+
+If optional CURRENT is true (default false), then put point at the end of
+the containing visible topic.
+
+Returns the value of point."
+ (interactive "P")
+ (if current
+ (allout-back-to-current-heading)
+ (allout-goto-prefix))
(let ((level (allout-recent-depth)))
(allout-next-heading)
(while (and (not (eobp))
@@ -1851,9 +2115,16 @@
'(?\n ?\r))
(forward-char -1))
(setq allout-recent-end-of-subtree (point))))
+;;;_ > allout-end-of-current-subtree ()
+(defun allout-end-of-current-subtree ()
+ "Put point at end of last leaf in currently visible containing topic.
+
+Returns the value of point."
+ (interactive)
+ (allout-end-of-subtree t))
;;;_ > allout-beginning-of-current-entry ()
(defun allout-beginning-of-current-entry ()
- "When not already there, position point at beginning of current topic's body.
+ "When not already there, position point at beginning of current topic header.
If already there, move cursor to bullet for hot-spot operation.
\(See `allout-mode' doc string for details on hot-spot operation.)"
@@ -1863,11 +2134,10 @@
(if (and (interactive-p)
(= (point) start-point))
(goto-char (allout-current-bullet-pos)))))
-;;;_ > allout-end-of-current-entry ()
-(defun allout-end-of-current-entry ()
+;;;_ > allout-end-of-entry ()
+(defun allout-end-of-entry ()
"Position the point at the end of the current topics' entry."
(interactive)
- (allout-show-entry)
(prog1 (allout-pre-next-preface)
(if (and (not (bobp))(looking-at "^$"))
(forward-char -1))))
@@ -1875,9 +2145,27 @@
(defun allout-end-of-current-heading ()
(interactive)
(allout-beginning-of-current-entry)
- (forward-line -1)
- (end-of-line))
+ (re-search-forward "[\n\r]" nil t)
+ (forward-char -1))
(defalias 'allout-end-of-heading 'allout-end-of-current-heading)
+;;;_ > allout-get-body-text ()
+(defun allout-get-body-text ()
+ "Return the unmangled body text of the topic immediately containing point."
+ (save-excursion
+ (allout-end-of-prefix)
+ (if (not (re-search-forward "[\n\r]" nil t))
+ nil
+ (backward-char 1)
+ (let ((pre-body (point)))
+ (if (not pre-body)
+ nil
+ (allout-end-of-entry)
+ (if (not (= pre-body (point)))
+ (buffer-substring-no-properties (1+ pre-body) (point))))
+ )
+ )
+ )
+ )
;;;_ - Depth-wise
;;;_ > allout-ascend-to-depth (depth)
@@ -1892,12 +2180,16 @@
(if (= (allout-recent-depth) depth)
(progn (goto-char allout-recent-prefix-beginning)
depth)
- (goto-char last-good)))))
+ (goto-char last-good)
+ nil))
+ (if (interactive-p) (allout-end-of-prefix))))
;;;_ > allout-ascend ()
(defun allout-ascend ()
"Ascend one level, returning t if successful, nil if not."
- (if (allout-beginning-of-level)
- (allout-previous-heading)))
+ (prog1
+ (if (allout-beginning-of-level)
+ (allout-previous-heading))
+ (if (interactive-p) (allout-end-of-prefix))))
;;;_ > allout-descend-to-depth (depth)
(defun allout-descend-to-depth (depth)
"Descend to depth DEPTH within current topic.
@@ -1917,13 +2209,13 @@
nil))
)
;;;_ > allout-up-current-level (arg &optional dont-complain)
-(defun allout-up-current-level (arg &optional dont-complain interactive)
+(defun allout-up-current-level (arg &optional dont-complain)
"Move out ARG levels from current visible topic.
Positions on heading line of containing topic. Error if unable to
ascend that far, or nil if unable to ascend but optional arg
DONT-COMPLAIN is non-nil."
- (interactive "p\np")
+ (interactive "p")
(allout-back-to-current-heading)
(let ((present-level (allout-recent-depth))
(last-good (point))
@@ -1944,12 +2236,12 @@
(if (or failed
(> arg 0))
(progn (goto-char last-good)
- (if interactive (allout-end-of-prefix))
+ (if (interactive-p) (allout-end-of-prefix))
(if (not dont-complain)
(error "Can't ascend past outermost level")
- (if interactive (allout-end-of-prefix))
+ (if (interactive-p) (allout-end-of-prefix))
nil))
- (if interactive (allout-end-of-prefix))
+ (if (interactive-p) (allout-end-of-prefix))
allout-recent-prefix-beginning)))
;;;_ - Linear
@@ -1981,7 +2273,7 @@
nil))))
;;;_ > allout-previous-sibling (&optional depth backward)
(defun allout-previous-sibling (&optional depth backward)
- "Like `allout-forward-current-level', but backwards & respect invisible topics.
+ "Like `allout-forward-current-level' backwards, respecting invisible topics.
Optional DEPTH specifies depth to traverse, default current depth.
@@ -2015,7 +2307,7 @@
(let ((depth (allout-depth)))
(while (allout-previous-sibling depth nil))
(prog1 (allout-recent-depth)
- (allout-end-of-prefix))))
+ (if (interactive-p) (allout-end-of-prefix)))))
;;;_ > allout-next-visible-heading (arg)
(defun allout-next-visible-heading (arg)
"Move to the next ARG'th visible heading line, backward if arg is negative.
@@ -2053,13 +2345,13 @@
(interactive "p")
(allout-next-visible-heading (- arg)))
;;;_ > allout-forward-current-level (arg)
-(defun allout-forward-current-level (arg &optional interactive)
+(defun allout-forward-current-level (arg)
"Position point at the next heading of the same level.
Takes optional repeat-count, goes backward if count is negative.
Returns resulting position, else nil if none found."
- (interactive "p\np")
+ (interactive "p")
(let ((start-depth (allout-current-depth))
(start-point (point))
(start-arg arg)
@@ -2087,7 +2379,7 @@
(= (allout-recent-depth) start-depth)))
allout-recent-prefix-beginning
(goto-char last-good)
- (if (not interactive)
+ (if (not (interactive-p))
nil
(allout-end-of-prefix)
(error "Hit %s level %d topic, traversed %d of %d requested"
@@ -2096,10 +2388,10 @@
(- (abs start-arg) arg)
(abs start-arg))))))
;;;_ > allout-backward-current-level (arg)
-(defun allout-backward-current-level (arg &optional interactive)
+(defun allout-backward-current-level (arg)
"Inverse of `allout-forward-current-level'."
- (interactive "p\np")
- (if interactive
+ (interactive "p")
+ (if (interactive-p)
(let ((current-prefix-arg (* -1 arg)))
(call-interactively 'allout-forward-current-level))
(allout-forward-current-level (* -1 arg))))
@@ -2107,153 +2399,34 @@
;;;_ #5 Alteration
;;;_ - Fundamental
-;;;_ > allout-before-change-protect (beg end)
-(defun allout-before-change-protect (beg end)
- "Outline before-change hook, regulates changes to concealed text.
-
-Reveal concealed text that would be changed by current command, and
-offer user choice to commit or forego the change. Unchanged text is
-reconcealed. User has option to have changed text reconcealed.
-
-Undo commands are specially treated - the user is not prompted for
-choice, the undoes are always committed (based on presumption that the
-things being undone were already subject to this regulation routine),
-and undoes always leave the changed stuff exposed.
-
-Changes to concealed regions are ignored while file is being written.
-\(This is for the sake of functions that do change the file during
-writes, like crypt and zip modes.)
-
-Locally bound in outline buffers to `before-change-functions', which
-in Emacs 19 is run before any change to the buffer.
-
-Any functions which set [`this-command' to `undo', or which set]
-`allout-override-protect' non-nil (as does, eg, allout-flag-chars)
-are exempt from this restriction."
- (if (and (allout-mode-p)
- ; allout-override-protect
- ; set by functions that know what
- ; they're doing, eg outline internals:
- (not allout-override-protect)
- (not allout-during-write-cue)
- (save-match-data ; Preserve operation position state.
- ; Both beginning and end chars must
- ; be exposed:
- (save-excursion (if (memq this-command '(newline open-line))
- ;; Compensate for stupid Emacs {new,
- ;; open-}line display optimization:
- (setq beg (1+ beg)
- end (1+ end)))
- (goto-char beg)
- (or (allout-hidden-p)
- (and (not (= beg end))
- (goto-char end)
- (allout-hidden-p))))))
- (save-match-data
- (if (equal this-command 'undo)
- ;; Allow undo without inhibition.
- ;; - Undoing new and open-line hits stupid Emacs redisplay
- ;; optimization (em 19 cmds.c, ~ line 200).
- ;; - Presumably, undoing what was properly protected when
- ;; done.
- ;; - Undo may be users' only recourse in protection faults.
- ;; So, expose what getting changed:
- (progn (message "Undo! - exposing concealed target...")
- (if (allout-hidden-p)
- (allout-show-children))
- (message "Undo!"))
- (let (response
- (rehide-completely (save-excursion (allout-goto-prefix)
- (allout-hidden-p)))
- rehide-place)
-
- (save-excursion
- (if (condition-case err
- ;; Condition case to catch keyboard quits during reads.
- (progn
- ; Give them a peek where
- (save-excursion
- (if (eolp) (setq rehide-place
- (allout-goto-prefix)))
- (allout-show-entry))
- ; Present the message, but...
- ; leave the cursor at the location
- ; until they respond:
- ; Then interpret the response:
- (while
- (progn
- (message (concat "Change inside concealed"
- " region - do it? "
- "(n or 'y'/'r'eclose)"))
- (setq response (read-char))
- (not
- (cond ((memq response '(?r ?R))
- (setq response 'reclose))
- ((memq response '(?y ?Y ? ))
- (setq response t))
- ((memq response '(?n ?N 127))
- (setq response nil)
- t)
- ((eq response ??)
- (message
- "`r' means `yes, then reclose'")
- nil)
- (t (message "Please answer y, n, or r")
- (sit-for 1)
- nil)))))
- response)
- ('quit nil))
- ; Continue:
- (if (eq response 'reclose)
- (save-excursion
- (if rehide-place (goto-char rehide-place))
- (if rehide-completely
- (allout-hide-current-entry-completely)
- (allout-hide-current-entry)))
- (if (allout-ascend-to-depth (1- (allout-recent-depth)))
- (allout-show-children)
- (allout-show-to-offshoot)))
- ; Prevent:
- (if rehide-completely
- (save-excursion
- (if rehide-place (goto-char rehide-place))
- (allout-hide-current-entry-completely))
- (allout-hide-current-entry))
- (error "Change within concealed region prevented"))))))
- ) ; if
- ) ; defun
;;;_ = allout-post-goto-bullet
(defvar allout-post-goto-bullet nil
"Outline internal var, for `allout-pre-command-business' hot-spot operation.
When set, tells post-processing to reposition on topic bullet, and
-then unset it. Set by `allout-pre-command-business' when implementing
+then unset it. Set by allout-pre-command-business when implementing
hot-spot operation, where literal characters typed over a topic bullet
are mapped to the command of the corresponding control-key on the
-`allout-mode-map'.")
+allout-mode-map.")
(make-variable-buffer-local 'allout-post-goto-bullet)
;;;_ > allout-post-command-business ()
(defun allout-post-command-business ()
- "Outline `post-command-hook' function.
-
-- Null `allout-override-protect', so it's not left open.
+ "Outline post-command-hook function.
-- Implement (and clear) `allout-post-goto-bullet', for hot-spot
+- Implement (and clear) allout-post-goto-bullet, for hot-spot
outline commands.
-- Massages `buffer-undo-list' so successive, standard character self-inserts
- are aggregated. This kludge compensates for lack of undo bunching when
- `before-change-functions' is used."
+- Decrypt topic currently being edited if it was encrypted for a save.
+
+- Massage buffer-undo-list so successive, standard character self-inserts are
+ aggregated. This kludge compensates for lack of undo bunching when
+ before-change-functions is used."
; Apply any external change func:
(if (not (allout-mode-p)) ; In allout-mode.
nil
- (setq allout-override-protect nil)
(if allout-isearch-dynamic-expose
(allout-isearch-rectification))
- (if allout-during-write-cue
- ;; Was used by allout-before-change-protect, done with it now:
- (setq allout-during-write-cue nil))
;; Undo bunching business:
(if (and (listp buffer-undo-list) ; Undo history being kept.
(equal this-command 'self-insert-command)
@@ -2282,6 +2455,11 @@
(setq buffer-undo-list
(cons (cons prev-from cur-to)
(cdr (cdr (cdr buffer-undo-list))))))))
+
+ (if (and (boundp 'allout-after-save-decrypt)
+ allout-after-save-decrypt)
+ (allout-after-saves-handler))
+
;; Implement -post-goto-bullet, if set: (must be after undo business)
(if (and allout-post-goto-bullet
(allout-current-bullet-pos))
@@ -2304,8 +2482,9 @@
char. When in this mode you can use regular cursor-positioning
command/keystrokes to relocate the cursor off of a bullet character to
return to regular interpretation of self-insert characters."
+
(if (not (allout-mode-p))
- ;; Shouldn't be invoked if not in allout allout-mode, but just in case:
+ ;; Shouldn't be invoked if not in allout-mode, but just in case:
nil
;; Register isearch status:
(if (and (boundp 'isearch-mode) isearch-mode)
@@ -2317,7 +2496,9 @@
(let* ((this-key-num (cond
((numberp last-command-char)
last-command-char)
- ((fboundp 'char-to-int)
+ ;; Only xemacs has characterp.
+ ((and (fboundp 'characterp)
+ (characterp last-command-char))
(char-to-int last-command-char))
(t 0)))
mapped-binding)
@@ -2340,7 +2521,7 @@
this-command mapped-binding)))))))
;;;_ > allout-find-file-hook ()
(defun allout-find-file-hook ()
- "Activate `allout-mode' when `allout-auto-activation' & `allout-layout' are non-nil.
+ "Activate `allout-mode' when `allout-auto-activation', `allout-layout' non-nil.
See `allout-init' for setup instructions."
(if (and allout-auto-activation
@@ -2353,7 +2534,7 @@
Called as part of `allout-post-command-business'."
- (let ((isearching isearch-mode))
+ (let ((isearching (and (boundp 'isearch-mode) isearch-mode)))
(cond ((and isearching (not allout-pre-was-isearching))
(allout-isearch-expose 'start))
((and isearching allout-pre-was-isearching)
@@ -2361,24 +2542,11 @@
((and (not isearching) allout-pre-was-isearching)
(allout-isearch-expose 'final))
;; Not and wasn't isearching:
- (t (setq allout-isearch-prior-pos nil)))))
+ (t (setq allout-isearch-prior-pos nil)
+ (setq allout-isearch-did-quit nil)))))
;;;_ = allout-isearch-was-font-lock
(defvar allout-isearch-was-font-lock
(and (boundp 'font-lock-mode) font-lock-mode))
-
-;;;_ > allout-flag-region (from to flag)
-(defmacro allout-flag-region (from to flag)
- "Hide or show lines from FROM to TO, via Emacs `selective-display' FLAG char.
-Ie, text following flag C-m \(carriage-return) is hidden until the
-next C-j (newline) char.
-
-Returns the endpoint of the region."
- `(let ((buffer-read-only nil)
- (allout-override-protect t))
- (subst-char-in-region ,from ,to
- (if (= ,flag ?\n) ?\r ?\n)
- ,flag t)))
-
;;;_ > allout-isearch-expose (mode)
(defun allout-isearch-expose (mode)
"MODE is either 'clear, 'start, 'continue, or 'final."
@@ -2403,21 +2571,56 @@
(setq allout-isearch-prior-pos nil)
(if (not (eq mode 'final))
(setq allout-isearch-prior-pos (cons (point) (allout-show-entry)))
- (if isearch-mode-end-hook-quit
+ (if allout-isearch-did-quit
nil
(setq allout-isearch-prior-pos nil)
- (allout-show-children)))))
+ (allout-show-children))))
+ (setq allout-isearch-did-quit nil))
;;;_ > allout-enwrap-isearch ()
(defun allout-enwrap-isearch ()
- "Impose `isearch-abort' wrapper for dynamic exposure in isearch.
+ "Impose `allout-mode' isearch-abort wrapper for dynamic exposure in isearch.
The function checks to ensure that the rebinding is done only once."
- (add-hook 'isearch-mode-end-hook 'allout-isearch-rectification))
+
+ (add-hook 'isearch-mode-end-hook 'allout-isearch-rectification)
+ (if (fboundp 'allout-real-isearch-abort)
+ ;;
+ nil
+ ; Ensure load of isearch-mode:
+ (if (or (and (fboundp 'isearch-mode)
+ (fboundp 'isearch-abort))
+ (condition-case error
+ (load-library "isearch-mode")
+ ('file-error (message
+ "Skipping isearch-mode provisions - %s '%s'"
+ (car (cdr error))
+ (car (cdr (cdr error))))
+ (sit-for 1)
+ ;; Inhibit subsequent tries and return nil:
+ (setq allout-isearch-dynamic-expose nil))))
+ ;; Isearch-mode loaded, encapsulate specific entry points for
+ ;; outline dynamic-exposure business:
+ (progn
+ ;; stash crucial isearch-mode funcs under known, private
+ ;; names, then register wrapper functions under the old
+ ;; names, in their stead:
+ (fset 'allout-real-isearch-abort (symbol-function 'isearch-abort))
+ (fset 'isearch-abort 'allout-isearch-abort)))))
+;;;_ > allout-isearch-abort ()
+(defun allout-isearch-abort ()
+ "Wrapper for allout-real-isearch-abort \(which see), to register
+actual quits."
+ (interactive)
+ (setq allout-isearch-did-quit nil)
+ (condition-case what
+ (allout-real-isearch-abort)
+ ('quit (setq allout-isearch-did-quit t)
+ (signal 'quit nil))))
;;; Prevent unnecessary font-lock while isearching!
(defvar isearch-was-font-locking nil)
(defun isearch-inhibit-font-lock ()
- "Inhibit `font-lock-mode' while isearching - for use on `isearch-mode-hook'."
+ "Inhibit `font-lock' while isearching - for use on `isearch-mode-hook'."
(if (and (allout-mode-p) (boundp 'font-lock-mode) font-lock-mode)
(setq isearch-was-font-locking t
font-lock-mode nil)))
@@ -2465,6 +2668,14 @@
(if prefix
(allout-get-prefix-bullet prefix)
(allout-get-bullet)))))
+;;;_ > allout-encrypted-type-prefix (&optional prefix)
+(defun allout-encrypted-type-prefix (&optional prefix)
+ "True if current header prefix bullet is for an encrypted entry \(body)."
+ (and allout-topic-encryption-bullet
+ (string= allout-topic-encryption-bullet
+ (if prefix
+ (allout-get-prefix-bullet prefix)
+ (allout-get-bullet)))))
;;;_ > allout-bullet-for-depth (&optional depth)
(defun allout-bullet-for-depth (&optional depth)
"Return outline topic bullet suited to optional DEPTH, or current depth."
@@ -2625,15 +2836,15 @@
((allout-sibling-index))))))
)
)
-;;;_ > allout-open-topic (relative-depth &optional before use-sib-bullet)
-(defun allout-open-topic (relative-depth &optional before use-sib-bullet)
- "Open a new topic at depth RELATIVE-DEPTH.
+;;;_ > allout-open-topic (relative-depth &optional before use_recent_bullet)
+(defun allout-open-topic (relative-depth &optional before use_recent_bullet)
+ "Open a new topic at depth DEPTH.
New topic is situated after current one, unless optional flag BEFORE
is non-nil, or unless current line is complete empty (not even
whitespace), in which case open is done on current line.
-If USE-SIB-BULLET is true, use the bullet of the prior sibling.
+If USE_RECENT_BULLET is true, offer to use the bullet of the prior sibling.
Nuances:
@@ -2660,9 +2871,11 @@
(let* ((depth (+ (allout-current-depth) relative-depth))
(opening-on-blank (if (looking-at "^\$")
(not (setq before nil))))
- opening-numbered ; Will get while computing ref-topic, below
- ref-depth ; Will get while computing ref-topic, below
- ref-bullet ; Will get while computing ref-topic, next
+ ;; bunch o vars set while computing ref-topic
+ opening-numbered
+ opening-encrypted
+ ref-depth
+ ref-bullet
(ref-topic (save-excursion
(cond ((< relative-depth 0)
(allout-ascend-to-depth depth))
@@ -2680,6 +2893,13 @@
(allout-descend-to-depth depth))
(if (allout-numbered-type-prefix)
allout-numbered-bullet))))
+ (setq opening-encrypted
+ (save-excursion
+ (and allout-topic-encryption-bullet
+ (or (<= relative-depth 0)
+ (allout-descend-to-depth depth))
+ (if (allout-numbered-type-prefix)
+ allout-numbered-bullet))))
(point)))
dbl-space
doing-beginning)
@@ -2718,19 +2938,24 @@
(if (not (bobp))
(allout-previous-heading)))
(if (and before (bobp))
- (allout-unprotected (open-line 1))))
+ (allout-unprotected (allout-open-line-not-read-only))))
(if (<= relative-depth 0)
;; Not going inwards, don't snug up:
(if doing-beginning
- (allout-unprotected (open-line (if dbl-space 2 1)))
+ (allout-unprotected
+ (if (not dbl-space)
+ (allout-open-line-not-read-only)
+ (allout-open-line-not-read-only)
+ (allout-open-line-not-read-only)))
(if before
(progn (end-of-line)
(allout-pre-next-preface)
(while (= ?\r (following-char))
(forward-char 1))
(if (not (looking-at "^$"))
- (allout-unprotected (open-line 1))))
+ (allout-unprotected
+ (allout-open-line-not-read-only))))
(allout-end-of-current-subtree)))
;; Going inwards - double-space if first offspring is,
;; otherwise snug up.
@@ -2748,38 +2973,47 @@
(progn (forward-line -1)
(looking-at "^\\s-*$"))))
(progn (forward-line 1)
- (allout-unprotected (open-line 1))))
+ (allout-unprotected
+ (allout-open-line-not-read-only))
+ (forward-line 1)))
(end-of-line))
;;(if doing-beginning (goto-char doing-beginning))
(if (not (bobp))
+ ;; We insert a newline char rather than using open-line to
+ ;; avoid rear-stickiness inheritence of read-only property.
(progn (if (and (not (> depth ref-depth))
(not before))
- (allout-unprotected (open-line 1))
+ (allout-unprotected
+ (allout-open-line-not-read-only))
(if (> depth ref-depth)
- (allout-unprotected (newline 1))
+ (allout-unprotected
+ (allout-open-line-not-read-only))
(if dbl-space
- (allout-unprotected (open-line 1))
+ (allout-unprotected
+ (allout-open-line-not-read-only))
(if (not before)
(allout-unprotected (newline 1))))))
(if dbl-space
- (allout-unprotected (newline 1)))
+ (allout-unprotected (newline 1)))
(if (and (not (eobp))
(not (bolp)))
(forward-char 1))))
))
(insert (concat (allout-make-topic-prefix opening-numbered
- t
- depth)
- " "))
+ t
+ depth)
+ " "))
;;(if doing-beginning (save-excursion (newline (if dbl-space 2 1))))
- (allout-rebullet-heading (and use-sib-bullet ref-bullet);;; solicit
+ (allout-rebullet-heading (and use_recent_bullet ;;; solicit
+ ref-bullet)
depth ;;; depth
nil ;;; number-control
nil ;;; index
- t) (end-of-line)
+ t)
+ (end-of-line)
)
)
;;;_ . open-topic contingencies
@@ -2795,6 +3029,13 @@
;;;_ ; buffer boundaries - special provisions for beginning and end ob
;;;_ ; level 1 topics have special provisions also - double space.
;;;_ ; location of new topic
+;;;_ > allout-open-line-not-read-only ()
+(defun allout-open-line-not-read-only ()
+ "Open line and remove inherited read-only text prop from new char, if any."
+ (open-line 1)
+ (if (plist-get (text-properties-at (point)) 'read-only)
+ (allout-unprotected
+ (remove-text-properties (point) (+ 1 (point)) '(read-only nil)))))
;;;_ > allout-open-subtopic (arg)
(defun allout-open-subtopic (arg)
"Open new topic header at deeper level than the current one.
@@ -2802,7 +3043,7 @@
Negative universal arg means to open deeper, but place the new topic
prior to the current one."
(interactive "p")
- (allout-open-topic 1 (> 0 arg)))
+ (allout-open-topic 1 (> 0 arg) (< 1 arg)))
;;;_ > allout-open-sibtopic (arg)
(defun allout-open-sibtopic (arg)
"Open new topic header at same level as the current one.
@@ -2812,7 +3053,7 @@
Negative universal arg means to place the new topic prior to the current
one."
(interactive "p")
- (allout-open-topic 0 (> 0 arg) (< 1 arg)))
+ (allout-open-topic 0 (> 0 arg) (not (= 1 arg))))
;;;_ > allout-open-supertopic (arg)
(defun allout-open-supertopic (arg)
"Open new topic header at shallower level than the current one.
@@ -2821,7 +3062,7 @@
topic prior to the current one."
(interactive "p")
- (allout-open-topic -1 (> 0 arg)))
+ (allout-open-topic -1 (> 0 arg) (< 1 arg)))
;;;_ - Outline Alteration
;;;_ : Topic Modification
@@ -2877,15 +3118,15 @@
(setq old-indent-begin (match-beginning 1)
old-indent-end (match-end 1))
(not (looking-at allout-regexp)))
- (if (> 0 (setq excess (- (current-column)
- old-margin)))
+ (if (> 0 (setq excess (- (- old-indent-end old-indent-begin)
+ old-margin)))
;; Text starts left of old margin - don't adjust:
nil
;; Text was hanging at or right of old left margin -
;; reindent it, preserving its existing indentation
;; beyond the old margin:
(delete-region old-indent-begin old-indent-end)
- (indent-to (+ new-margin excess)))))))))
+ (indent-to (+ new-margin excess (current-column))))))))))
;;;_ > allout-rebullet-current-heading (arg)
(defun allout-rebullet-current-heading (arg)
"Solicit new bullet for current visible heading."
@@ -2922,28 +3163,30 @@
"Adjust bullet of current topic prefix.
+All args are optional.
+
If SOLICIT is non-nil, then the choice of bullet is solicited from
user. If it's a character, then that character is offered as the
default, otherwise the one suited to the context \(according to
distinction or depth) is offered. If non-nil, then the
context-specific bullet is just used.
-Second arg NEW-DEPTH forces the topic prefix to that depth, regardless
+Second arg DEPTH forces the topic prefix to that depth, regardless
of the topic's current depth.
Third arg NUMBER-CONTROL can force the prefix to or away from
numbered form. It has effect only if `allout-numbered-bullet' is
non-nil and soliciting was not explicitly invoked (via first arg).
Its effect, numbering or denumbering, then depends on the setting
-of the fourth arg, INDEX.
+of the forth arg, INDEX.
-If NUMBER-CONTROL is non-nil and fourth arg INDEX is nil, then the
+If NUMBER-CONTROL is non-nil and forth arg INDEX is nil, then the
prefix of the topic is forced to be non-numbered. Null index and
non-nil NUMBER-CONTROL forces denumbering. Non-nil INDEX (and
non-nil NUMBER-CONTROL) forces a numbered-prefix form. If non-nil
INDEX is a number, then that number is used for the numbered
prefix. Non-nil and non-number means that the index for the
-numbered prefix will be derived by `allout-make-topic-prefix'.
+numbered prefix will be derived by allout-make-topic-prefix.
Fifth arg DO-SUCCESSORS t means re-resolve count on succeeding
siblings.
@@ -2986,9 +3229,10 @@
; Put in new prefix:
(allout-unprotected (insert new-prefix))
- ;; Reindent the body if elected and margin changed:
+ ;; Reindent the body if elected, margin changed, and not encrypted body:
(if (and allout-reindent-bodies
- (not (= new-depth current-depth)))
+ (not (= new-depth current-depth))
+ (not (allout-encrypted-topic-p)))
(allout-reindent-body current-depth new-depth))
;; Recursively rectify successive siblings of orig topic if
@@ -3010,7 +3254,7 @@
) ; defun
;;;_ > allout-rebullet-topic (arg)
(defun allout-rebullet-topic (arg)
- "Like `allout-rebullet-topic-grunt', but start from topic visible at point.
+ "Rebullet the visible topic containing point and all contained subtopics.
Descends into invisible as well as visible topics, however.
@@ -3036,18 +3280,18 @@
starting-point
index
do-successors)
+ "Like `allout-rebullet-topic', but on nearest containing topic
+\(visible or not).
- "Rebullet the topic at point, visible or invisible, and all
-contained subtopics. See `allout-rebullet-heading' for rebulleting
-behavior.
+See `allout-rebullet-heading' for rebulleting behavior.
-Arg RELATIVE-DEPTH means to shift the depth of the entire
-topic that amount.
+All arguments are optional.
-\(fn &optional RELATIVE-DEPTH)"
+First arg RELATIVE-DEPTH means to shift the depth of the entire
+topic that amount.
- ;; All args except the first one are for internal recursive use by the
- ;; function itself.
+The rest of the args are for internal recursive use by the function
+itself. The are STARTING-DEPTH, STARTING-POINT, and INDEX."
(let* ((relative-depth (or relative-depth 0))
(new-depth (allout-depth))
@@ -3177,13 +3421,42 @@
(setq more (allout-next-sibling depth nil))))))
;;;_ > allout-shift-in (arg)
(defun allout-shift-in (arg)
- "Increase depth of current heading and any topics collapsed within it."
+ "Increase depth of current heading and any topics collapsed within it.
+
+We disallow shifts that would result in the topic having a depth more than
+one level greater than the immediately previous topic, to avoid containment
+discontinuity. The first topic in the file can be adjusted to any positive
+depth, however."
(interactive "p")
+ (if (> arg 0)
+ (save-excursion
+ (allout-back-to-current-heading)
+ (if (not (bobp))
+ (let* ((current-depth (allout-recent-depth))
+ (start-point (point))
+ (predecessor-depth (progn
+ (forward-char -1)
+ (allout-goto-prefix)
+ (if (< (point) start-point)
+ (allout-recent-depth)
+ 0))))
+ (if (and (> predecessor-depth 0)
+ (> (+ current-depth arg)
+ (1+ predecessor-depth)))
+ (error (concat "May not shift deeper than offspring depth"
+ " of previous topic")))))))
(allout-rebullet-topic arg))
;;;_ > allout-shift-out (arg)
(defun allout-shift-out (arg)
- "Decrease depth of current heading and any topics collapsed within it."
+ "Decrease depth of current heading and any topics collapsed within it.
+
+We disallow shifts that would result in the topic having a depth more than
+one level greater than the immediately previous topic, to avoid containment
+discontinuity. The first topic in the file can be adjusted to any positive
+depth, however."
(interactive "p")
+ (if (< arg 0)
+ (allout-shift-in (* arg -1)))
(allout-rebullet-topic (* arg -1)))
;;;_ : Surgery (kill-ring) functions with special provisions for outlines:
;;;_ > allout-kill-line (&optional arg)
@@ -3191,24 +3464,56 @@
"Kill line, adjusting subsequent lines suitably for outline mode."
(interactive "*P")
- (if (not (and (allout-mode-p) ; active outline mode,
- allout-numbered-bullet ; numbers may need adjustment,
- (bolp) ; may be clipping topic head,
- (looking-at allout-regexp))) ; are clipping topic head.
- ;; Above conditions do not obtain - just do a regular kill:
- (kill-line arg)
- ;; Ah, have to watch out for adjustments:
- (let* ((depth (allout-depth)))
- ; Do the kill:
- (kill-line arg)
+
+ (let ((start-point (point))
+ (leading-kill-ring-entry (car kill-ring))
+ binding)
+
+ (condition-case err
+
+ (if (not (and (allout-mode-p) ; active outline mode,
+ allout-numbered-bullet ; numbers may need adjustment,
+ (bolp) ; may be clipping topic head,
+ (looking-at allout-regexp))) ; are clipping topic head.
+ ;; Above conditions do not obtain - just do a regular kill:
+ (kill-line arg)
+ ;; Ah, have to watch out for adjustments:
+ (let* ((depth (allout-depth))
+ (start-point (point))
+ binding)
+ ; Do the kill, presenting option
+ ; for read-only text:
+ (kill-line arg)
; Provide some feedback:
- (sit-for 0)
- (save-excursion
+ (sit-for 0)
+ (save-excursion
; Start with the topic
; following killed line:
- (if (not (looking-at allout-regexp))
- (allout-next-heading))
- (allout-renumber-to-depth depth)))))
+ (if (not (looking-at allout-regexp))
+ (allout-next-heading))
+ (allout-renumber-to-depth depth))))
+ ;; condition case handler:
+ (text-read-only
+ (goto-char start-point)
+ (setq binding (where-is-internal 'allout-kill-topic nil t))
+ (cond ((not binding) (setq binding ""))
+ ((arrayp binding)
+ (setq binding (mapconcat 'key-description (list binding) ", ")))
+ (t (setq binding (format "%s" binding))))
+ ;; ensure prior kill-ring leader is properly restored:
+ (if (eq leading-kill-ring-entry (cadr kill-ring))
+ ;; Aborted kill got pushed on front - ditch it:
+ (pop kill-ring)
+ ;; Aborted kill got appended to prior - resurrect prior:
+ (setcar kill-ring leading-kill-ring-entry))
+ ;; make last-command skip this failed command, so kill-appending
+ ;; conditions track:
+ (setq this-command last-command)
+ (error (concat "read-only text hit - use %s allout-kill-topic to"
+ " discard collapsed stuff")
+ binding)))
+ )
+ )
;;;_ > allout-kill-topic ()
(defun allout-kill-topic ()
"Kill topic together with subtopics.
@@ -3236,14 +3541,14 @@
(>= (allout-recent-depth) depth))))
(forward-char 1)))
- (kill-region beg (point))
+ (allout-unprotected (kill-region beg (point)))
(sit-for 0)
(save-excursion
(allout-renumber-to-depth depth))))
;;;_ > allout-yank-processing ()
(defun allout-yank-processing (&optional arg)
- "Incidental outline specific business to be done just after text yanks.
+ "Incidental outline-specific business to be done just after text yanks.
Does depth adjustment of yanked topics, when:
@@ -3259,7 +3564,7 @@
The point is left in front of yanked, adjusted topics, rather than
at the end (and vice-versa with the mark). Non-adjusted yanks,
-however, are left exactly like normal, not outline specific yanks."
+however, are left exactly like normal, non-allout-specific yanks."
(interactive "*P")
; Get to beginning, leaving
@@ -3463,6 +3768,60 @@
;;;_ #6 Exposure Control
;;;_ - Fundamental
+;;;_ > allout-flag-region (from to flag)
+(defun allout-flag-region (from to flag)
+ "Hide or show lines from FROM to TO, via Emacs selective-display FLAG char.
+Ie, text following flag C-m \(carriage-return) is hidden until the
+next C-j (newline) char.
+
+Returns the endpoint of the region."
+ ;; "OFR-" prefixes to avoid collisions with vars in code calling the macro.
+ ;; ie, elisp macro vars are not 'hygenic', so distinct names are necessary.
+ (let ((was-inhibit-r-o inhibit-read-only)
+ (was-undo-list buffer-undo-list)
+ (was-modified (buffer-modified-p))
+ trans)
+ (unwind-protect
+ (save-excursion
+ (setq inhibit-read-only t)
+ (setq buffer-undo-list t)
+ (if (> from to)
+ (setq trans from from to to trans))
+ (subst-char-in-region from to
+ (if (= flag ?\n) ?\r ?\n)
+ flag t)
+ ;; adjust character read-protection on all the affected lines.
+ ;; we handle the region line-by-line.
+ (goto-char to)
+ (end-of-line)
+ (setq to (min (+ 2 (point)) (point-max)))
+ (goto-char from)
+ (beginning-of-line)
+ (while (< (point) to)
+ ;; handle from start of exposed to beginning of hidden, or eol:
+ (remove-text-properties (point)
+ (progn (if (re-search-forward "[\r\n]"
+ nil t)
+ (forward-char -1))
+ (point))
+ '(read-only nil))
+ ;; handle from start of hidden, if any, to eol:
+ (if (and (not (eobp)) (= (char-after (point)) ?\r))
+ (put-text-property (point) (progn (end-of-line) (point))
+ 'read-only t))
+ ;; Handle the end-of-line to beginning of next line:
+ (if (not (eobp))
+ (progn (forward-char 1)
+ (remove-text-properties (1- (point)) (point)
+ '(read-only nil)))))
+ )
+ (if (not was-modified)
+ (set-buffer-modified-p nil))
+ (setq inhibit-read-only was-inhibit-r-o)
+ (setq buffer-undo-list was-undo-list)
+ )
+ )
+ )
;;;_ > allout-flag-current-subtree (flag)
(defun allout-flag-current-subtree (flag)
"Hide or show subtree of currently-visible topic.
@@ -3471,9 +3830,9 @@
(save-excursion
(allout-back-to-current-heading)
- (allout-flag-region (point)
- (progn (allout-end-of-current-subtree) (1- (point)))
- flag)))
+ (let ((from (point))
+ (to (progn (allout-end-of-current-subtree) (1- (point)))))
+ (allout-flag-region from to flag))))
;;;_ - Topic-specific
;;;_ > allout-show-entry ()
@@ -3482,7 +3841,7 @@
This is a way to give restricted peek at a concealed locality without the
expense of exposing its context, but can leave the outline with aberrant
-exposure. `allout-hide-current-entry-completely' or `allout-show-to-offshoot'
+exposure. `allout-hide-current-entry-completely' or `allout-show-offshoot'
should be used after the peek to rectify the exposure."
(interactive)
@@ -3602,7 +3961,7 @@
(allout-back-to-current-heading)
(save-excursion
(allout-flag-region (point)
- (progn (allout-end-of-current-entry) (point))
+ (progn (allout-end-of-entry) (point))
?\r)))
;;;_ > allout-show-current-entry (&optional arg)
(defun allout-show-current-entry (&optional arg)
@@ -3614,8 +3973,9 @@
(allout-hide-current-entry)
(save-excursion
(allout-flag-region (point)
- (progn (allout-end-of-current-entry) (point))
- ?\n))))
+ (progn (allout-end-of-entry) (point))
+ ?\n)
+ )))
;;;_ > allout-hide-current-entry-completely ()
; ... allout-hide-current-entry-completely also for isearch dynamic exposure:
(defun allout-hide-current-entry-completely ()
@@ -3846,7 +4206,11 @@
max-pos)))
;;;_ > allout-old-expose-topic (spec &rest followers)
(defun allout-old-expose-topic (spec &rest followers)
- "Dictate wholesale exposure scheme for current topic, according to SPEC.
+
+ "Deprecated. Use `allout-expose-topic' \(with different schema
+format) instead.
+
+Dictate wholesale exposure scheme for current topic, according to SPEC.
SPEC is either a number or a list. Optional successive args
dictate exposure for subsequent siblings of current topic.
@@ -3918,9 +4282,6 @@
(allout-old-expose-topic (car followers))
(setq followers (cdr followers)))
max-pos))
-(make-obsolete 'allout-old-expose-topic
- "use `allout-expose-topic' (with different schema format) instead."
- "19.23")
;;;_ > allout-new-exposure '()
(defmacro allout-new-exposure (&rest spec)
"Literal frontend for `allout-expose-topic', doesn't evaluate arguments.
@@ -3929,6 +4290,8 @@
Cursor is left at start position.
+Use this instead of obsolete `allout-exposure'.
+
Examples:
\(allout-new-exposure (-1 () () () 1) 0)
Close current topic at current level so only the immediate
@@ -4151,13 +4514,20 @@
(cdr format)))))))
;; Put the list with first at front, to last at back:
(nreverse result))))
+;;;_ > my-region-active-p ()
+(defmacro my-region-active-p ()
+ (if (fboundp 'region-active-p)
+ '(region-active-p)
+ 'mark-active))
;;;_ > allout-process-exposed (&optional func from to frombuf
;;; tobuf format)
(defun allout-process-exposed (&optional func from to frombuf tobuf
- format start-num)
+ format &optional start-num)
"Map function on exposed parts of current topic; results to another buffer.
-Apply FUNC to exposed portions FROM position TO position in buffer
+All args are options; default values itemized below.
+
+Apply FUNCTION to exposed portions FROM position TO position in buffer
FROMBUF to buffer TOBUF. Sixth optional arg, FORMAT, designates an
alternate presentation form:
@@ -4170,7 +4540,7 @@
except for distinctive bullets.
Defaults:
- FUNC: `allout-insert-listified'
+ FUNCTION: `allout-insert-listified'
FROM: region start, if region active, else start of buffer
TO: region end, if region active, else end of buffer
FROMBUF: current buffer
@@ -4219,9 +4589,7 @@
\`(depth prefix text)'
-or
-
- \`(depth prefix text bullet-plus)'
+or \`(depth prefix text bullet-plus)'
If `bullet-plus' is specified, it is inserted just after the entire prefix."
(setq listified (cdr listified))
@@ -4237,7 +4605,7 @@
(while text
(insert (car text))
(if (setq text (cdr text))
- (insert "\n")))
+ (insert-string "\n")))
(insert "\n")))
;;;_ > allout-copy-exposed-to-buffer (&optional arg tobuf format)
(defun allout-copy-exposed-to-buffer (&optional arg tobuf format)
@@ -4440,14 +4808,14 @@
body-content bop)
; Do the head line:
(insert (concat "\\OneHeadLine{\\verb\1 "
- (allout-latex-verb-quote bullet)
- "\1}{"
- depth
- "}{\\verb\1 "
- (if head-line
- (allout-latex-verb-quote head-line)
- "")
- "\1}\n"))
+ (allout-latex-verb-quote bullet)
+ "\1}{"
+ depth
+ "}{\\verb\1 "
+ (if head-line
+ (allout-latex-verb-quote head-line)
+ "")
+ "\1}\n"))
(if (not body-lines)
nil
;;(insert "\\beginlines\n")
@@ -4509,7 +4877,614 @@
(pop-to-buffer buf)
(goto-char start-pt)))
-;;;_ #8 miscellaneous
+;;;_ #8 Encryption
+;;;_ > allout-toggle-current-subtree-encryption (&optional fetch-key)
+(defun allout-toggle-current-subtree-encryption (&optional fetch-key)
+ "Encrypt clear text or decrypt encoded contents of a topic.
+
+Contents includes body and subtopics.
+
+Currently only GnuPG encryption is supported.
+
+\**NOTE WELL** that the encrypted text must be ascii-armored. For gnupg
+encryption, include the option ``armor'' in your ~/.gnupg/gpg.conf file.
+
+Both symmetric-key and key-pair encryption is implemented. Symmetric is
+the default, use a single \(x4) universal argument for keypair mode.
+
+Encrypted topic's bullet is set to a `~' to signal that the contents of the
+topic \(body and subtopics, but not heading) is pending encryption or
+encrypted. An `*' asterisk immediately after the bullet signals that the
+body is encrypted, its absence means it's meant to be encrypted but is not
+- it's \"disclosed\". When a file with disclosed topics is saved, the user
+prompted for an ok to \(symmetric-key) encrypt the disclosed topics. NOTE
+WELL that you must explicitly \(re)encrypt key-pair encrypted topics if you
+want them to continue to be in key-pair mode.
+
+Level-1 topics, with prefix consisting solely of an `*' asterisk, cannot be
+encrypted. If you want to encrypt the contents of a top-level topic, use
+\\[allout-shift-in] to increase its depth.
+
+Failed transformation does not change the an entry being encrypted -
+instead, the key is re-solicited and the transformation is retried.
+\\[keyboard-quit] to abort.
+
+Decryption does symmetric or key-pair key mode depending on how the text
+was encrypted. The encryption key is solicited if not currently available
+from the key cache from a recent prior encryption action.
+
+Optional FETCH-KEY universal argument is used for two purposes - to provoke
+key-pair instead of symmetric encryption, or to provoke clearing of the key
+cache so keys are freshly fetched.
+
+ - Without any universal arguments, then the appropriate key for the is
+ obtained from the cache, if available, else from the user.
+
+ - If FETCH-KEY is the result of one universal argument - ie, equal to 4 -
+ then key-pair encryption is used.
+
+ - With repeated universal argument - equal to 16 - then the key cache is
+ cleared before any encryption transformations, to force prompting of the
+ user for the key.
+
+The solicited key is retained for reuse in a buffer-specific cache for some
+set period of time \(default, 60 seconds), after which the string is
+nulled. `mailcrypt' provides the key caching functionality. You can
+adjust the key cache timeout by ajdusting the setting of the elisp variable
+`mc-passwd-timeout'.
+
+If the file previously had no associated key, or had a different key than
+specified, the user is prompted to repeat the new one for corroboration. A
+random string encrypted by the new key is set on the buffer-specific
+variable `allout-key-verifier-string', for confirmation of the key when
+next obtained, before encrypting or decrypting anything with it. This
+helps avoid mistakenly shifting between keys.
+
+If allout customization var `allout-key-verifier-handling' is non-nil, an
+entry for `allout-key-verifier-string' and its value is added to an Emacs
+'local variables' section at the end of the file, which is created if
+necessary. That setting is for retention of the key verifier across emacs
+sessions.
+
+Similarly, `allout-key-hint-string' stores a user-provided reminder about
+their key, and `allout-key-hint-handling' specifies when the hint is
+presented, or if key hints are disabled. If enabled \(see the
+`allout-key-hint-handling' docstring for details), the hint string is
+stored in the local-variables section of the file, and solicited whenever
+the key is changed."
+
+;;; This routine handles allout-specific business, dispatching
+;;; encryption-specific business to allout-encrypt-string.
+
+ (interactive "P")
+ (save-excursion
+ (allout-end-of-prefix t)
+
+ (if (= (allout-recent-depth) 1)
+ (error (concat "Cannot encrypt or decrypt level 1 topics -"
+ " shift it in to make it encryptable")))
+
+ (if (and fetch-key
+ (not (equal fetch-key '(4))))
+ (mc-deactivate-passwd))
+
+ (let* ((allout-buffer (current-buffer))
+ ;; Asses location:
+ (after-bullet-pos (point))
+ (was-encrypted
+ (progn (if (= (point-max) after-bullet-pos)
+ (error "no body to encrypt"))
+ (looking-at "\\*")))
+ (was-collapsed (if (not (re-search-forward "[\n\r]" nil t))
+ nil
+ (backward-char 1)
+ (looking-at "\r")))
+ (subtree-beg (1+ (point)))
+ (subtree-end (allout-end-of-subtree))
+ (subject-text (buffer-substring-no-properties subtree-beg
+ subtree-end))
+ (subtree-end-char (char-after (1- subtree-end)))
+ (subtree-trailling-char (char-after subtree-end))
+ (place-holder (if (or (string= "" subject-text)
+ (string= "\n" subject-text))
+ (error "No topic contents to %scrypt"
+ (if was-encrypted "de" "en"))))
+ ;; Assess key parameters:
+ (key-type (or
+ ;; detect the type by which it is already encrypted
+ (and was-encrypted
+ (allout-encrypted-text-type subject-text))
+ (and (member fetch-key '(4 (4)))
+ (yes-or-no-p "Use key-pair encryption instead? ")
+ 'keypair)
+ 'symmetric))
+ (fetch-key (and fetch-key (not (member fetch-key '(16 (16))))))
+ result-text)
+
+ (setq result-text
+ (allout-encrypt-string subject-text was-encrypted
+ (current-buffer) key-type fetch-key))
+
+ ;; Replace the subtree with the processed product.
+ (allout-unprotected
+ (progn
+ (set-buffer allout-buffer)
+ (delete-region subtree-beg subtree-end)
+ (insert result-text)
+ (if was-collapsed
+ (allout-flag-region subtree-beg (1- (point)) ?\r))
+ ;; adjust trailling-blank-lines to preserve topic spacing:
+ (if (not was-encrypted)
+ (if (and (member subtree-end-char '(?\r ?\n))
+ (member subtree-trailling-char '(?\r ?\n)))
+ (insert subtree-trailling-char)))
+ ;; Ensure that the item has an encrypted-entry bullet:
+ (if (not (string= (buffer-substring-no-properties
+ (1- after-bullet-pos) after-bullet-pos)
+ allout-topic-encryption-bullet))
+ (progn (goto-char (1- after-bullet-pos))
+ (delete-char 1)
+ (insert allout-topic-encryption-bullet)))
+ (if was-encrypted
+ ;; Remove the is-encrypted bullet qualifier:
+ (progn (goto-char after-bullet-pos)
+ (delete-char 1))
+ ;; Add the is-encrypted bullet qualifier:
+ (goto-char after-bullet-pos)
+ (insert "*"))
+ )
+ )
+ )
+ )
+ )
+;;;_ > allout-encrypt-string (text decrypt allout-buffer key-type rekey
+;;; &optional retried verifying)
+(defun allout-encrypt-string (text decrypt allout-buffer key-type rekey
+ &optional retried verifying)
+ "Encrypt or decrypt a string TEXT using KEY.
+
+If optional DECRYPT is true (default false), then decrypt instead of
+encrypt.
+
+Optional REKEY (default false) provokes clearing of the key cache to force
+fresh prompting for the key.
+
+Optional RETRIED is for internal use - conveys the number of failed keys have
+been solicited in sequence leading to this current call.
+
+Optional VERIFYING is for internal use, signifying processing of text
+solely for verification of the cached key.
+
+Returns the resulting string, or nil if the transformation fails."
+
+ ;; Ensure that we have an alternate handle on the real mc-activate-passwd:
+ (if (not (fboundp 'real-mc-activate-passwd))
+ ;; Force loads of the primary mailcrypt packages, so flet below holds.
+ (progn (require 'mailcrypt)
+ (load "mc-toplev")
+ (fset 'real-mc-activate-passwd
+ (symbol-function 'mc-activate-passwd))))
+
+ (if (and rekey (not verifying)) (mc-deactivate-passwd))
+
+ (catch 'encryption-failed
+ (save-excursion
+
+ (let* ((mc-default-scheme (or allout-encryption-scheme
+ allout-default-encryption-scheme))
+ (id (format "%s-%s" key-type
+ (or (buffer-file-name allout-buffer)
+ (buffer-name allout-buffer))))
+ (cached (real-mc-activate-passwd id nil))
+ (comment "Processed by allout driving mailcrypt")
+ key work-buffer result result-text encryption-process-status)
+
+ (unwind-protect
+
+ ;; Interject our mc-activate-passwd wrapper:
+ (flet ((mc-activate-passwd (id &optional prompt)
+ (allout-mc-activate-passwd id prompt)))
+
+ (setq work-buffer
+ (set-buffer (allout-encryption-produce-work-buffer text)))
+
+ (cond
+
+ ;; symmetric:
+ ((equal key-type 'symmetric)
+ (setq key (if verifying
+ (real-mc-activate-passwd id nil)
+ (allout-mc-activate-passwd id)))
+ (setq encryption-process-status
+ (crypt-encrypt-buffer key decrypt))
+ (if (zerop encryption-process-status)
+ t
+ (if verifying
+ (throw 'encryption-failed nil)
+ (mc-deactivate-passwd)
+ (error "Symmetric-key encryption failed (%s) - wrong key?"
+ encryption-process-status))))
+
+ ;; encrypt 'keypair:
+ ((not decrypt)
+ (condition-case result
+ (mailcrypt-encrypt 1)
+ (error (mc-deactivate-passwd)
+ (error "encryption failed: %s"
+ (cadr result)))))
+
+ ;; decrypt 'keypair:
+ (t (condition-case result
+ (mc-decrypt)
+ (error (mc-deactivate-passwd)
+ (error "decryption failed: %s"
+ (cadr result))))))
+
+ (setq result-text (if (or (equal key-type 'keypair)
+ (not decrypt))
+ (buffer-substring 1 (1- (point-max)))
+ (buffer-string)))
+ ;; validate result - non-empty
+ (cond ((not result-text)
+ (if verifying
+ nil
+ ;; Transformation was fruitless - retry with new key.
+ (mc-deactivate-passwd)
+ (allout-encrypt-string text allout-buffer decrypt nil
+ (if retried (1+ retried) 1)
+ verifying)))
+
+ ;; Barf if encryption yields extraordinary control chars:
+ ((and (not decrypt)
+ (string-match "[\C-a\C-k\C-o-\C-z\C-@]" result-text))
+ (error (concat "encryption produced unusable"
+ " non-armored text - reconfigure!")))
+
+ ;; valid result and just verifying or non-symmetric:
+ ((or verifying (not (equal key-type 'symmetric)))
+ result-text)
+
+ ;; valid result and regular symmetric - situate validator:
+ (t
+ ;; valid result and verifier needs to be situated in
+ ;; allout-buffer:
+ (set-buffer allout-buffer)
+ (if (and (or rekey (not cached))
+ (not (allout-verify-key key allout-buffer)))
+ (allout-situate-encryption-key-verifier key id))
+ result-text)
+ )
+ )
+
+ ;; unwind-protect emergence:
+ (if work-buffer
+ (kill-buffer work-buffer))
+ )
+ )
+ )
+ )
+ )
+;;;_ > allout-mc-activate-passwd (id &optional prompt)
+(defun allout-mc-activate-passwd (id &optional prompt)
+ "Substituted for mc-activate-passwd during allout outline encryption.
+
+We add key-verification to vanilla mc-activate-passwd.
+
+We depend in some cases on values of the following allout-encrypt-string
+internal or prevailing variables:
+ - key-type - 'symmetric or 'keypair
+ - id - id associated with current key in key cache
+ - allout-buffer - where subject text resides
+ - retried - number of current attempts to obtain this key
+ - rekey - user asked to present a new key - needs to be confirmed"
+
+;; - if we're doing non-symmetric key, just do normal mc-activate-passwd
+;; - otherwise, if we are have a cached version of the key, then assume
+;; it's verified and return it
+;; - otherwise, prompt for a key, and:
+;; - if we have a key verifier \(a string value which should decrypt
+;; against a symmetric key), validate against the verifier
+;; - if successful, return the verified key
+;; - if unsuccessful:
+;; - offer to use the new key
+;; - if accepted, do confirm process
+;; - if refused, try again until we get a correctly spelled one or the
+;; user quits
+;; - if no key verifier, resolicit the key to get corroboration and return
+;; the corroborated key if spelled identically, or error if not.
+
+ (if (not (equal key-type 'symmetric))
+ ;; do regular mc-activate-passwd on non-symmetric key
+ (real-mc-activate-passwd id prompt)
+
+ ;; Symmetric hereon:
+
+ (save-excursion
+ (set-buffer allout-buffer)
+ (let* ((hint (if (and (not (string= allout-key-hint-string ""))
+ (or (equal allout-key-hint-handling 'always)
+ (and (equal allout-key-hint-handling 'needed)
+ retried)))
+ (format " [%s]" allout-key-hint-string)
+ ""))
+ (retry-message (if retried (format " (%s retry)" retried) ""))
+ (prompt-sans-hint (format "'%s' symmetric key%s: "
+ (buffer-name allout-buffer)
+ retry-message))
+ (full-prompt (format "'%s' symmetric key%s%s: "
+ (buffer-name allout-buffer)
+ hint retry-message))
+ (prompt full-prompt)
+ (verifier-string (allout-get-encryption-key-verifier))
+ ;; force retention of cached passwords for five minutes while
+ ;; we're in this particular routine:
+ (mc-passwd-timeout 300)
+ (cached (real-mc-activate-passwd id nil))
+ (got (or cached (real-mc-activate-passwd id full-prompt)))
+ confirmation)
+
+ (if (not got)
+ nil
+
+ ;; Duplicate our handle on the key so it's not clobbered by
+ ;; deactivate-passwd memory clearing:
+ (setq got (format "%s" got))
+
+ (cond (verifier-string
+ (if (and (not (allout-encrypt-string
+ verifier-string 'decrypt allout-buffer
+ 'symmetric nil 0 'verifying))
+ (if (yes-or-no-p
+ (concat "Key differs from established"
+ " - use new one instead? "))
+ ;; deactivate password for subsequent
+ ;; confirmation:
+ (progn (mc-deactivate-passwd)
+ (setq prompt prompt-sans-hint)
+ nil)
+ t))
+ (progn (mc-deactivate-passwd)
+ (error "Wrong key."))))
+ ;; Force confirmation by repetition for new key:
+ ((or rekey (not cached)) (mc-deactivate-passwd))))
+ ;; we have a key and it's either verified and cached.
+ ;; confirmation vs new input - doing mc-activate-passwd will do the
+ ;; right thing, in either case:
+ (setq confirmation
+ (real-mc-activate-passwd id (concat prompt
+ " ... confirm spelling: ")))
+ (prog1
+ (if (equal got confirmation)
+ confirmation
+ (if (yes-or-no-p (concat "spelling of original and"
+ " confirmation differ - retry? "))
+ (progn (setq retried (if retried (1+ retried) 1))
+ (mc-deactivate-passwd)
+ ;; recurse to this routine:
+ (mc-activate-passwd id prompt-sans-hint))
+ (mc-deactivate-passwd)
+ (error "Confirmation failed.")))
+ ;; reduce opportunity for memory cherry-picking by zeroing duplicate:
+ (dotimes (i (length got))
+ (aset got i 0))
+ )
+ )
+ )
+ )
+ )
+;;;_ > allout-encryption-produce-work-buffer (text)
+(defun allout-encryption-produce-work-buffer (text)
+ "Establish a new buffer filled with TEXT, for outline encrypion processing.
+
+TEXT is massaged so outline collapsing, if any, is removed."
+ (let ((work-buffer (generate-new-buffer " *allout encryption*")))
+ (save-excursion
+ (set-buffer work-buffer)
+ (insert (subst-char-in-string ?\r ?\n text)))
+ work-buffer))
+;;;_ > allout-encrypted-topic-p ()
+(defun allout-encrypted-topic-p ()
+ "True if the current topic is encryptable and encrypted."
+ (save-excursion
+ (allout-end-of-prefix t)
+ (and (string= (buffer-substring-no-properties (1- (point)) (point))
+ allout-topic-encryption-bullet)
+ (looking-at "\\*"))
+ )
+ )
+;;;_ > allout-encrypted-text-type (text)
+;;; XXX gpg-specific, not generic!
+(defun allout-encrypted-text-type (text)
+ "For gpg encrypted text, return 'symmetric or 'keypair."
+
+ ;; Ensure mc-gpg-path has a value:
+ (if (not (boundp 'mc-gpg-path))
+ (load-library "mc-gpg"))
+
+ (save-excursion
+ (let* ((work-buffer (set-buffer
+ (allout-encryption-produce-work-buffer text)))
+ (result (mc-gpg-process-region (point-min) (point-max)
+ nil mc-gpg-path
+ '("--batch" "--decrypt")
+ 'mc-gpg-decrypt-parser
+ work-buffer nil)))
+ (cond ((equal (nth 0 result) 'symmetric)
+ 'symmetric)
+ ((equal (nth 0 result) t)
+ 'keypair)
+ (t (error "Unrecognized/unsupported encryption type %S"
+ (nth 0 result))))
+ )
+ )
+ )
+;;;_ > allout-create-encryption-key-verifier (key id)
+(defun allout-create-encryption-key-verifier (key id)
+ "Encrypt a random message for later validation of symmetric key."
+ ;; use 20 random ascii characters, across the entire ascii range.
+ (random t)
+ (let ((spew (make-string 20 ?\0)))
+ (dotimes (i (length spew))
+ (aset spew i (1+ (random 254))))
+ (allout-encrypt-string spew nil nil 'symmetric nil nil t))
+ )
+;;;_ > allout-situate-encryption-key-verifier (key id)
+(defun allout-situate-encryption-key-verifier (key id)
+ "Establish key verifier string on file variable.
+
+We also prompt for and situate a new reminder, if reminders are enabled.
+
+We massage the string to simplify programmatic adjustment. File variable
+is `allout-file-key-verifier-string'."
+ (let ((verifier-string
+ ;; Collapse to a single line and enclose in string quotes:
+ (subst-char-in-string ?\n ?\C-a
+ (allout-create-encryption-key-verifier
+ key id)))
+ (reminder (if (not (equal allout-key-hint-handling 'disabled))
+ (read-from-minibuffer
+ "Key hint to jog your memory next time: "
+ allout-key-hint-string))))
+ (setq allout-key-verifier-string verifier-string)
+ (allout-adjust-file-variable "allout-key-verifier-string"
+ verifier-string)
+ (cond ((equal allout-key-hint-handling 'disabled)
+ nil)
+ ((not (string= reminder allout-key-hint-string))
+ (setq allout-key-hint-string reminder)
+ (allout-adjust-file-variable "allout-key-hint-string"
+ reminder)))
+ )
+ )
+;;;_ > allout-get-encryption-key-verifier ()
+(defun allout-get-encryption-key-verifier ()
+ "Return the text of the encrypt key verifier, unmassaged, or nil if none.
+
+Derived from value of `allout-file-key-verifier-string'."
+
+ (let ((verifier-string (and (boundp 'allout-key-verifier-string)
+ allout-key-verifier-string)))
+ (if verifier-string
+ ;; Return it uncollapsed
+ (subst-char-in-string ?\C-a ?\n verifier-string)
+ nil)
+ )
+ )
+;;;_ > allout-verify-key (key)
+(defun allout-verify-key (key allout-buffer)
+ "True if key successfully decrypts key verifier, nil otherwise.
+
+\"Otherwise\" includes absence of key verifier."
+ (save-excursion
+ (set-buffer allout-buffer)
+ (and (boundp 'allout-key-verifier-string)
+ allout-key-verifier-string
+ (allout-encrypt-string (allout-get-encryption-key-verifier)
+ 'decrypt allout-buffer 'symmetric
+ nil nil 'verifying)
+ t)))
+;;;_ > allout-next-topic-pending-encryption (&optional except-mark)
+(defun allout-next-topic-pending-encryption (&optional except-mark)
+ "Return the point of the next topic pending encryption, or nil if none.
+
+EXCEPT-MARK identifies a point whose containing topics should be excluded
+from encryption. This supports 'except-current mode of
+`allout-encrypt-unencrypted-on-saves'.
+
+Such a topic has the allout-topic-encryption-bullet without an
+immediately following '*' that would mark the topic as being encrypted. It
+must also have content."
+ (let (done got content-beg)
+ (while (not done)
+
+ (if (not (re-search-forward
+ (format "\\(\\`\\|[\n\r]\\)%s *%s[^*]"
+ (regexp-quote allout-header-prefix)
+ (regexp-quote allout-topic-encryption-bullet))
+ nil t))
+ (setq got nil
+ done t)
+ (goto-char (setq got (match-beginning 0)))
+ (if (looking-at "[\n\r]")
+ (forward-char 1))
+ (setq got (point)))
+
+ (cond ((not got)
+ (setq done t))
+
+ ((not (re-search-forward "[\n\r]"))
+ (setq got nil
+ done t))
+
+ ((eobp)
+ (setq got nil
+ done t))
+
+ (t
+ (setq content-beg (point))
+ (backward-char 1)
+ (allout-end-of-subtree)
+ (if (or (<= (point) content-beg)
+ (and except-mark
+ (<= content-beg except-mark)
+ (>= (point) except-mark)))
+ ;; Continue looking
+ (setq got nil)
+ ;; Got it!
+ (setq done t)))
+ )
+ )
+ (if got
+ (goto-char got))
+ )
+ )
+;;;_ > allout-encrypt-decrypted (&optional except-mark)
+(defun allout-encrypt-decrypted (&optional except-mark)
+ "Encrypt topics pending encryption except those containing exemption point.
+
+EXCEPT-MARK identifies a point whose containing topics should be excluded
+from encryption. This supports 'except-current mode of
+`allout-encrypt-unencrypted-on-saves'.
+
+If a topic that is currently being edited was encrypted, we return a list
+containing the location of the topic and the location of the cursor just
+before the topic was encrypted. This can be used, eg, to decrypt the topic
+and exactly resituate the cursor if this is being done as part of a file
+save. See `allout-encrypt-unencrypted-on-saves' for more info."
+
+ (interactive "p")
+ (save-excursion
+ (let ((current-mark (point-marker))
+ was-modified
+ editing-topic editing-point)
+ (goto-char (point-min))
+ (while (allout-next-topic-pending-encryption except-mark)
+ (setq was-modified (buffer-modified-p))
+ (if (save-excursion
+ (and (boundp 'allout-encrypt-unencrypted-on-saves)
+ allout-encrypt-unencrypted-on-saves
+ (setq bo-subtree (re-search-forward "[\n\r]"))
+ ;; Not collapsed:
+ (string= (match-string 0) "\n")
+ (>= current-mark (point))
+ (allout-end-of-current-subtree)
+ (<= current-mark (point))))
+ (setq editing-topic (point)
+ ;; we had to wait for this 'til now so prior topics are
+ ;; encrypted, any relevant text shifts are in place:
+ editing-point (marker-position current-mark)))
+ (allout-toggle-current-subtree-encryption)
+ (if (not was-modified)
+ (set-buffer-modified-p nil))
+ )
+ (if (not was-modified)
+ (set-buffer-modified-p nil))
+ (if editing-topic (list editing-topic editing-point))
+ )
+ )
+ )
+
+;;;_ #9 miscellaneous
;;;_ > allout-mark-topic ()
(defun allout-mark-topic ()
"Put the region around topic currently containing point."
@@ -4538,22 +5513,100 @@
t
(allout-open-topic 2)
(insert (concat "Dummy outline topic header - see"
- "`allout-mode' docstring: `^Hm'."))
- (forward-line 1)
+ "`allout-mode' docstring: `^Hm'."))
+ (allout-adjust-file-variable
+ "allout-layout" (format "%s" (or allout-layout '(-1 : 0)))))))
+;;;_ > allout-file-vars-section-data ()
+(defun allout-file-vars-section-data ()
+ "Return data identifying the file-vars section, or nil if none.
+
+Returns list `(beginning-point prefix-string suffix-string)'."
+ ;; minimally gleaned from emacs 21.4 files.el hack-local-variables function.
+ (let (beg prefix suffix)
+ (save-excursion
(goto-char (point-max))
- (open-line 1)
- (allout-open-topic 0)
- (insert "Local emacs vars.\n")
- (allout-open-topic 1)
- (insert "(`allout-layout' is for allout.el allout-mode)\n")
- (allout-open-topic 0)
- (insert "Local variables:\n")
- (allout-open-topic 0)
- (insert (format "allout-layout: %s\n"
- (or allout-layout
- '(-1 : 0))))
- (allout-open-topic 0)
- (insert "End:\n"))))
+ (search-backward "\n\^L" (max (- (point-max) 3000) (point-min)) 'move)
+ (if (let ((case-fold-search t))
+ (not (search-forward "Local Variables:" nil t)))
+ nil
+ (setq beg (- (point) 16))
+ (setq suffix (buffer-substring-no-properties
+ (point)
+ (progn (if (re-search-forward "[\n\r]" nil t)
+ (forward-char -1))
+ (point))))
+ (setq prefix (buffer-substring-no-properties
+ (progn (if (re-search-backward "[\n\r]" nil t)
+ (forward-char 1))
+ (point))
+ beg))
+ (list beg prefix suffix))
+ )
+ )
+ )
+;;;_ > allout-adjust-file-variable (varname value)
+(defun allout-adjust-file-variable (varname value)
+ "Adjust the setting of an emacs file variable named VARNAME to VALUE.
+
+This activity is inhibited if either `enable-local-variables'
+`allout-enable-file-variable-adjustment' are nil.
+
+When enabled, an entry for the variable is created if not already present,
+or changed if established with a different value. The section for the file
+variables, itself, is created if not already present. When created, the
+section lines \(including the section line) exist as second-level topics in
+a top-level topic at the end of the file.
+
+enable-local-variables must be true for any of this to happen."
+ (if (not (and enable-local-variables
+ allout-enable-file-variable-adjustment))
+ nil
+ (save-excursion
+ (let ((section-data (allout-file-vars-section-data))
+ beg prefix suffix)
+ (if section-data
+ (setq beg (car section-data)
+ prefix (cadr section-data)
+ suffix (car (cddr section-data)))
+ ;; create the section
+ (goto-char (point-max))
+ (open-line 1)
+ (allout-open-topic 0)
+ (end-of-line)
+ (insert "Local emacs vars.\n")
+ (allout-open-topic 1)
+ (setq beg (point)
+ suffix ""
+ prefix (buffer-substring-no-properties (progn
+ (beginning-of-line)
+ (point))
+ beg))
+ (goto-char beg)
+ (insert "Local variables:\n")
+ (allout-open-topic 0)
+ (insert "End:\n")
+ )
+ ;; look for existing entry or create one, leaving point for insertion
+ ;; of new value:
+ (goto-char beg)
+ (allout-show-to-offshoot)
+ (if (search-forward (concat "\n" prefix varname ":") nil t)
+ (let* ((value-beg (point))
+ (line-end (progn (if (re-search-forward "[\n\r]" nil t)
+ (forward-char -1))
+ (point)))
+ (value-end (- line-end (length suffix))))
+ (if (> value-end value-beg)
+ (delete-region value-beg value-end)))
+ (end-of-line)
+ (open-line 1)
+ (forward-line 1)
+ (insert (concat prefix varname ":")))
+ (insert (format " %S%s" value suffix))
+ )
+ )
+ )
+ )
;;;_ > solicit-char-in-string (prompt string &optional do-defaulting)
(defun solicit-char-in-string (prompt string &optional do-defaulting)
"Solicit (with first arg PROMPT) choice of a character from string STRING.
@@ -4594,8 +5647,7 @@
Representations of actual backslashes - '\\\\\\\\' - are left as a
single backslash.
-\(fn REGEXP)"
-;; Optional arg SUCCESSIVE-BACKSLASHES is used internally for recursion.
+Optional arg SUCCESSIVE-BACKSLASHES is used internally for recursion."
(if (string= regexp "")
""
@@ -4611,11 +5663,6 @@
(regexp-sans-escapes (substring regexp 1)))
;; Exclude first char, but maintain count:
(regexp-sans-escapes (substring regexp 1) successive-backslashes))))
-;;;_ > my-region-active-p ()
-(defmacro my-region-active-p ()
- (if (fboundp 'region-active-p)
- '(region-active-p)
- 'mark-active))
;;;_ - add-hook definition for divergent emacsen
;;;_ > add-hook (hook function &optional append)
(if (not (fboundp 'add-hook))
@@ -4640,13 +5687,13 @@
(defun my-mark-marker (&optional force buffer)
"Accommodate the different signature for `mark-marker' across Emacsen.
-XEmacs takes two optional args, while GNU Emacs does not,
+XEmacs takes two optional args, while mainline GNU Emacs does not,
so pass them along when appropriate."
- (if (featurep 'xemacs)
+ (if (string-match " XEmacs " emacs-version)
(mark-marker force buffer)
(mark-marker)))
-;;;_ #9 Under development
+;;;_ #10 Under development
;;;_ > allout-bullet-isearch (&optional bullet)
(defun allout-bullet-isearch (&optional bullet)
"Isearch \(regexp) for topic with bullet BULLET."
@@ -4676,5 +5723,4 @@
;;;allout-layout: (0 : -1 -1 0)
;;;End:
-;;; arch-tag: cf38fbc3-c044-450f-8bff-afed8ba5681c
;;; allout.el ends here
[-- Attachment #3: allout-ChangeLog.txt --]
[-- Type: text/plain, Size: 3562 bytes --]
2005-09-30 Ken Manheimer <ken.manheimer@gmail.com>
* allout.el: omnibus changes
- new subsystem supporting easy gpg topic encryption/decryption.
salient features:
- both public- and symmetric-key modes are supported.
- encryption being on a per-topic basis means you can
intersperse encrypted and clear-text data in a single file
to your heart's content.
- user-provided symmetric-key hints, with consistency
verification to help user avoid confusion
- time-limited key reuse, a la (and using) mailcrypt's
mc-passwd-timeout
- write-file-hook and auto-save-hook activities to support auto
encryption of pending topics on save; provision to skip
currently-edited topic to avoid editing disturbance
topic encryption functionality depends on both mailcrypt and
crypt++ packages. (non-encryption allout functionality is not
disrupted if either mailcrypt or crypt++ are absent.)
`allout-toggle-current-subtree-encryption' is the central
routine.
there are a five new encryption customization variables:
- allout-topic-encryption-bullet
- allout-default-encryption-scheme
- allout-key-verifier-handling
- allout-key-hint-handling
- allout-encrypt-unencrypted-on-saves
topic encryption is included in mouse menu
docstring for `allout-toggle-current-subtree-encryption'
and customization variables provide detailed description.
- repaired inhibition of concealed-text edits
this helps preserve the structural integrity of outlines, as
well as preventing insidiously invisible accidental edits
(it also noticably slows massive exposure changes, but i
consider the performance acceptable. eg, i have blanket
auto-exposure set for my daily-notes log, which has real-world
intricacy in a 1.1 Mb, 7000 topic outline, and have no problems
working with it on a 200 MhZ windows laptop.)
- disallow manually shifting a topic deeper than the offspring
depth of the previous topic - avoiding confusing "containment
discontinuities"
- fixed retention of body relative hanging indent during
promotion of collapsed bodies
- made it easy to open new topic with same bullet as current
topic - topic creation functions provided with any universal
argument provokes now prompt for bullet, defaulting to the
bullet of the previous topic. very ergonomic.
- plain bullet alternates '.' period and ',' comma only. all
other bullets are relegated to special status (but customizable)
- comments and routine names better distinguish between:
- topic body - the text contained after a header
- topic header - the first line, before the body
- topic entry - the header, body, and offspring
- allout-beginning-of-current-entry now works as advertised
- allout-end-of-current-entry relieved of superfluous
allout-show-entry
- reconciled with distributed allout.el 1.61 (current CVS version
as of 09/30/2005), including interactive-p fixes, typo and
coding style fixes, change of function prefix to "allout-", etc,
and fixed problem created in outline yanking due to the
interactive-p fixes
- relocated some macros
- refined many docstrings, including anything from correcting
typos to conceptual clarification and correction
- corrected commentary 'keywords' to legitimate ones
- updated comentary author info (using my current email address,
obscurified)
[-- Attachment #4: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: new version of allout.el - patch and ChangeLog
2005-09-30 17:24 new version of allout.el - patch and ChangeLog Ken Manheimer
@ 2005-09-30 21:06 ` Sascha Wilde
2005-09-30 21:52 ` Ken Manheimer
[not found] ` <E1ELj0L-0000Pn-3T@fencepost.gnu.org>
1 sibling, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2005-09-30 21:06 UTC (permalink / raw)
Cc: emacs-devel
[-- Attachment #1.1: Type: text/plain, Size: 1027 bytes --]
On Fri, Sep 30, 2005 at 01:24:14PM -0400, Ken Manheimer wrote:
> attached is a patch and ChangeLog for a substantial new version of
> allout.el, emacs' alternative (and much more extensive) outliner.
[...]
> below is the synopsis of just the encryption features, from the ChangeLog entry.
[...]
> - both public- and symmetric-key modes are supported.
> - encryption being on a per-topic basis means you can
> intersperse encrypted and clear-text data in a single file
> to your heart's content.
I think this sounds great, but...
> topic encryption functionality depends on both mailcrypt and
> crypt++ packages. (non-encryption allout functionality is not
> disrupted if either mailcrypt or crypt++ are absent.)
why do you relay on these packages, which aren't part of gnu emacs,
when we have pgg?
cheers
sascha
--
Sascha Wilde -.-. ..- .-. .. --- ... .. - -.--
-.- .. .-.. .-.. . -..
- .... .
-.-. .- -
[-- Attachment #1.2: Type: application/pgp-signature, Size: 189 bytes --]
[-- Attachment #2: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: new version of allout.el - patch and ChangeLog
2005-09-30 21:06 ` Sascha Wilde
@ 2005-09-30 21:52 ` Ken Manheimer
2005-10-01 8:20 ` Andreas Schwab
2005-10-01 16:28 ` Ken Manheimer
0 siblings, 2 replies; 156+ messages in thread
From: Ken Manheimer @ 2005-09-30 21:52 UTC (permalink / raw)
On 9/30/05, Sascha Wilde <wilde@sha-bang.de> wrote:
> On Fri, Sep 30, 2005 at 01:24:14PM -0400, Ken Manheimer wrote:
> [...]
> > - both public- and symmetric-key modes are supported.
> > - encryption being on a per-topic basis means you can
> > intersperse encrypted and clear-text data in a single file
> > to your heart's content.
>
> I think this sounds great, but...
>
> > topic encryption functionality depends on both mailcrypt and
> > crypt++ packages. (non-encryption allout functionality is not
> > disrupted if either mailcrypt or crypt++ are absent.)
>
> why do you relay on these packages, which aren't part of gnu emacs,
> when we have pgg?
good question - i wasn't aware of pgg. can you tell me more about it?
i'd be very happy to find a single package that cleanly provides the
encryption interface that allout needs!
gentoo has an ebuild for it, but it involves xemacs dependencies,
making me think the build is xemacs-specific. i gather, since you're
responding via the emacs-devel list, that it's available for the
mainline emacs - is that right? google points me at only emacs-wiki
stuff (for a search on "emacs gpp") or xemacs-related stuff (for
"xemacs gpp")...
ken
ken.manheimer@gmail.com
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: new version of allout.el - patch and ChangeLog
2005-09-30 21:52 ` Ken Manheimer
@ 2005-10-01 8:20 ` Andreas Schwab
2005-10-01 12:41 ` Reiner Steib
2005-10-01 16:28 ` Ken Manheimer
1 sibling, 1 reply; 156+ messages in thread
From: Andreas Schwab @ 2005-10-01 8:20 UTC (permalink / raw)
Cc: emacs-devel
Ken Manheimer <ken.manheimer@gmail.com> writes:
> good question - i wasn't aware of pgg. can you tell me more about it?
pgg has been developed as part of Gnus. It hasn't been distributed as
part of Emacs before, but Emacs 22 will contain it as part of the Gnus
subsystem.
> google points me at only emacs-wiki stuff (for a search on "emacs gpp")
> or xemacs-related stuff (for "xemacs gpp")...
http://www.gnupg.org/(en)/related_software/frontends.html#fend_mua-PGG
Andreas.
--
Andreas Schwab, SuSE Labs, schwab@suse.de
SuSE Linux Products GmbH, Maxfeldstraße 5, 90409 Nürnberg, Germany
Key fingerprint = 58CA 54C7 6D53 942B 1756 01D3 44D5 214B 8276 4ED5
"And now for something completely different."
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: new version of allout.el - patch and ChangeLog
2005-10-01 8:20 ` Andreas Schwab
@ 2005-10-01 12:41 ` Reiner Steib
2005-10-01 23:54 ` James Cloos
0 siblings, 1 reply; 156+ messages in thread
From: Reiner Steib @ 2005-10-01 12:41 UTC (permalink / raw)
On Sat, Oct 01 2005, Andreas Schwab wrote:
> Ken Manheimer <ken.manheimer@gmail.com> writes:
>
>> good question - i wasn't aware of pgg. can you tell me more about it?
If you have Emacs 22 (CVS) or Gnus 5.10 installed, you should also
have the manual: (info "(pgg)Top").
> pgg has been developed as part of Gnus.
PGG has been developed as a separate package (by Daiki Ueno, AFAICS).
It has later been include in Gnus (Gnus 5.10).
> It hasn't been distributed as part of Emacs before, but Emacs 22
> will contain it as part of the Gnus subsystem.
Bye, Reiner.
--
,,,
(o o)
---ooO-(_)-Ooo--- | PGP key available | http://rsteib.home.pages.de/
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: new version of allout.el - patch and ChangeLog
2005-09-30 21:52 ` Ken Manheimer
2005-10-01 8:20 ` Andreas Schwab
@ 2005-10-01 16:28 ` Ken Manheimer
2005-10-02 10:48 ` Sascha Wilde
2005-10-02 17:08 ` new version of allout.el - patch and ChangeLog Richard M. Stallman
1 sibling, 2 replies; 156+ messages in thread
From: Ken Manheimer @ 2005-10-01 16:28 UTC (permalink / raw)
Cc: Sascha Wilde, Andreas Schwab
On 9/30/05, Ken Manheimer <ken.manheimer@gmail.com> wrote:
> On 9/30/05, Sascha Wilde <wilde@sha-bang.de> wrote:
> > On Fri, Sep 30, 2005 at 01:24:14PM -0400, Ken Manheimer wrote:
> > [...]
> > > topic encryption functionality depends on both mailcrypt and
> > > crypt++ packages. (non-encryption allout functionality is not
> > > disrupted if either mailcrypt or crypt++ are absent.)
> >
> > why do you relay on these packages, which aren't part of gnu emacs,
> > when we have pgg?
>
> good question - i wasn't aware of pgg. can you tell me more about it?
> i'd be very happy to find a single package that cleanly provides the
> encryption interface that allout needs!
andreas pointed me at pgg's bundling in gnus, for which gentoo has an
ebuild. i emerged it and got access to gpp and the info file. it
looks nice - clean - but appears to have the same drawback, for my
purposes, as mailcrypt. it will decrypt messages encoded with a
symmetric key, but provides no api for encrypting with a symmetric
key. that lack is a show-stopper for my purposes.
that mailcrypt and pgg would concentrate on public-key mode makes a
lot of sense, considering the ultimate purpose is encryption and/or
signing of messages to be exchanged between remote parties - email,
news, software packaging, etc. my primary concern for encryption in
allout is with conveniently securing notes for oneself. the lattitude
of symmetric keys offers much better convenience in that context.
i actually inquired on the mailcrypt developers list about the lack of
provision for symmetric-key encryption, and the general concensus was
that it just was an oversight, not a deliberate avoidance. i presume
(as i suggest above) because it's not useful for the message-exchange
realm.
it may well be that pgg is preferable, somehow, to mailcrypt - they
both offer similar functionality, including key caching, as well as
the lack of an interface for encrypting with a symmetric key. but the
changeover won't gain me anything i can yet see - i'll still need to
also use crypt++ for the symmetric key encoding. and the cost in
effort of switching from working code would not be trivial, so
until/unless i see a compelling gain, or someone else does the
integration (and convinces me that pgg is more widespread than
mailcrypt), i'm think i'm fine with mailcrypt.
ken
ken.manheimer@gmail.com
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: new version of allout.el - patch and ChangeLog
[not found] ` <E1ELj0L-0000Pn-3T@fencepost.gnu.org>
@ 2005-10-01 22:33 ` Ken Manheimer
2005-10-20 13:57 ` Ken Manheimer
0 siblings, 1 reply; 156+ messages in thread
From: Ken Manheimer @ 2005-10-01 22:33 UTC (permalink / raw)
Cc: emacs-devel
[-- Attachment #1: Type: text/plain, Size: 988 bytes --]
On 10/1/05, Richard M. Stallman <rms@gnu.org> wrote:
> Thanks very much for sending this update. Now is a good time to
> install it.
great! i'll be glad to see these improvements out there in the world...
> Could you be so kind as to itemize the change log, describing which
> functions/defuns have been changed, and how? We need that in order
> to install the change.
>
> Also, we need to have an item for etc/NEWS. Would you please write one?
i've attached new versions of the patch and ChangeLog, and an etc/NEWS snippet.
please use the new version of the patch, rather than the one i sent
yesterday. it includes an xemacs compatibility provision for a
problem i hadn't noticed until after i sent the patch out yesterday.
it also includes several small adjustments i noticed while doing the
detailed enumeration of the functions that were changed.
i'm cc'ing emacs-devel, figuring that's where the material will be used.
ken
ken.manheimer@gmail.com
[-- Attachment #2: allout-patch.txt --]
[-- Type: text/plain, Size: 113749 bytes --]
--- allout.el.~1.61.~ 2005-08-06 18:13:41.000000000 -0400
+++ allout.el 2005-10-01 17:47:12.000000000 -0400
@@ -3,10 +3,11 @@
;; Copyright (C) 1992, 1993, 1994, 2001, 2002, 2003, 2004,
;; 2005 Free Software Foundation, Inc.
-;; Author: Ken Manheimer <klm@zope.com>
-;; Maintainer: Ken Manheimer <klm@zope.com>
+;; Author: Ken Manheimer <ken dot manheimer at gmail dot com>
+;; Maintainer: Ken Manheimer <ken dot manheimer at gmail dot com>
;; Created: Dec 1991 - first release to usenet
-;; Keywords: outlines mode wp languages
+;; Version: $Id: allout.el,v 1.68 2005/09/30 19:48:25 klm Exp $||
+;; Keywords: outlines wp languages
;; This file is part of GNU Emacs.
@@ -34,43 +35,68 @@
;; programming languages. (For an example, see the allout code
;; itself, which is organized in ;; an outline framework.)
;;
-;; In addition to outline navigation and exposure, allout includes:
+;; Some features:
;;
-;; - topic-oriented repositioning, cut, and paste
-;; - integral outline exposure-layout
-;; - incremental search with dynamic exposure and reconcealment of hidden text
+;; - classic outline-mode topic-oriented navigation and exposure adjustment
+;; - topic-oriented editing including coherent topic and subtopic
+;; creation, promotion, demotion, cut/paste across depths, etc
+;; - incremental search with dynamic exposure and reconcealment of text
+;; - customizable bullet format enbles programming-language specific
+;; outlining, for ultimate code-folding editing. (allout code itself is
+;; formatted as an outline - do ESC-x eval-current-buffer in allout.el
+;; to try it out.)
+;; - configurable per-file initial exposure settings
+;; - symmetric-key and key-pair topic encryption, plus reliable key
+;; verification and user-supplied hint maintenance. (see
+;; allout-toggle-current-subtree-encryption docstring.)
;; - automatic topic-number maintenance
-;; - "Hot-spot" operation, for single-keystroke maneuvering and
-;; exposure control. (See the `allout-mode' docstring.)
+;; - "hot-spot" operation, for single-keystroke maneuvering and
+;; exposure control (see the allout-mode docstring)
+;; - easy rendering of exposed portions into numbered, latex, indented, etc
+;; outline styles
;;
-;; and many other features.
+;; and more.
;;
;; The outline menubar additions provide quick reference to many of
-;; the features, and see the docstring of the function `allout-init'
-;; for instructions on priming your Emacs session for automatic
-;; activation of `allout-mode'.
+;; the features, and see the docstring of the variable `allout-init'
+;; for instructions on priming your emacs session for automatic
+;; activation of allout-mode.
;;
;; See the docstring of the variables `allout-layout' and
;; `allout-auto-activation' for details on automatic activation of
-;; allout `allout-mode' as a minor mode. (It has changed since allout
+;; `allout-mode' as a minor mode. (It has changed since allout
;; 3.x, for those of you that depend on the old method.)
;;
;; Note - the lines beginning with `;;;_' are outline topic headers.
;; Just `ESC-x eval-current-buffer' to give it a whirl.
-;; Ken Manheimer klm@zope.com
+;; ken manheimer (ken dot manheimer at gmail dot com)
;;; Code:
;;;_* Provide
+;(provide 'outline)
(provide 'allout)
+;;;_* Dependency autoloads
+(eval-when-compile 'cl) ; otherwise, flet compilation fouls
+(autoload 'crypt-encrypt-buffer "crypt++")
+(setq-default crypt-encryption-type 'gpg)
+
+(autoload 'mc-encrypt "mailcrypt"
+ "*Encrypt the current buffer")
+(autoload 'mc-activate-passwd "mailcrypt"
+ "Activate the passphrase matching ID, using PROMPT for a prompt.
+Return the passphrase. If PROMPT is nil, only return value if cached.")
+(autoload 'mc-gpg-process-region "mc-gpg")
+(autoload 'mc-dectivate-passwd "mailcrypt"
+ "*Deactivate the passphrase cache.")
+
;;;_* USER CUSTOMIZATION VARIABLES:
(defgroup allout nil
"Extensive outline mode for use alone and with other modes."
:prefix "allout-"
- :group 'editing
- :version "22.1")
+ :group 'outlines)
;;;_ + Layout, Mode, and Topic Header Configuration
@@ -111,8 +137,8 @@
A list value specifies a default layout for the current buffer, to be
applied upon activation of `allout-mode'. Any non-nil value will
-automatically trigger `allout-mode', provided `allout-init'
-has been called to enable it.
+automatically trigger `allout-mode' \(provided `allout-init' has been called
+to enable this behavior).
See the docstring for `allout-init' for details on setting up for
auto-mode-activation, and for `allout-expose-topic' for the format of
@@ -171,7 +197,7 @@
:group 'allout)
(make-variable-buffer-local 'allout-primary-bullet)
;;;_ = allout-plain-bullets-string
-(defcustom allout-plain-bullets-string ".:,;"
+(defcustom allout-plain-bullets-string ".,"
"*The bullets normally used in outline topic prefixes.
See `allout-distinctive-bullets-string' for the other kind of
@@ -185,7 +211,7 @@
:group 'allout)
(make-variable-buffer-local 'allout-plain-bullets-string)
;;;_ = allout-distinctive-bullets-string
-(defcustom allout-distinctive-bullets-string "*+-=>([{}&!?#%\"X@$~_\\"
+(defcustom allout-distinctive-bullets-string "*+-=>()[{}&!?#%\"X@$~_\\:;^"
"*Persistent outline header bullets used to distinguish special topics.
These bullets are used to distinguish topics from the run-of-the-mill
@@ -198,12 +224,13 @@
`?' question topics
`\(' parenthetic comment \(with a matching close paren inside)
`[' meta-note \(with a matching close ] inside)
- `\"' a quote
+ `\"' a quotation
`=' value settings
`~' \"more or less\"
+ `^' see above
-... just for example. (`#' typically has a special meaning to the
-software, according to the value of `allout-numbered-bullet'.)
+ ... for example. (`#' typically has a special meaning to the software,
+according to the value of `allout-numbered-bullet'.)
See `allout-plain-bullets-string' for the selection of
alternating bullets.
@@ -337,7 +364,6 @@
Set this var to the bullet you want to use for file cross-references."
:type '(choice (const nil) string)
:group 'allout)
-
;;;_ = allout-presentation-padding
(defcustom allout-presentation-padding 2
"*Presentation-format white-space padding factor, for greater indent."
@@ -381,7 +407,7 @@
:type 'string
:group 'allout)
;;;_ - allout-title
-(defcustom allout-title '(or buffer-file-name (current-buffer-name))
+(defcustom allout-title '(or buffer-file-name (buffer-name))
"*Expression to be evaluated to determine the title for LaTeX
formatted copy."
:type 'sexp
@@ -397,6 +423,94 @@
:type 'string
:group 'allout)
+;;;_ + Topic encryption
+;;;_ = allout-topic-encryption-bullet
+(defcustom allout-topic-encryption-bullet "~"
+ "*Bullet signifying encryption of the entry's body."
+ :type '(choice (const nil) string)
+ :group 'allout)
+;;;_ = allout-default-encryption-scheme
+(defcustom allout-default-encryption-scheme 'mc-scheme-gpg
+ "*Default allout outline topic encryption mode.
+
+See mailcrypt variable `mc-schemes' and mailcrypt docs for encryption schemes."
+ :type 'symbol
+ :group 'allout)
+;;;_ = allout-key-verifier-handling
+(defcustom allout-key-verifier-handling 'situate
+ "*Dictate outline encryption key verifier handling.
+
+The key verifier is string associated with a file that is encrypted with
+the file's current symmetric encryption key. It is used, if present, to
+confirm that the key entered by the user is the same as the established
+one, or explicitly presenting the user with the choice to go with a
+new key when a difference is encountered.
+
+The range of values are:
+
+ situate - include key verifier string as text in the file's local-vars
+ section
+ transient - establish the value as a variable in the file's buffer, but
+ don't preserve it as a file variable.
+ disabled - don't establish or do verification.
+
+See the docstring for the `allout-enable-file-variable-adjustment'
+variable for details about allout ajustment of file variables."
+ :type '(choice (const situate)
+ (const transient)
+ (const disabled))
+ :group 'allout)
+(make-variable-buffer-local 'allout-key-verifier-handling)
+;;;_ = allout-key-hint-handling
+(defcustom allout-key-hint-handling 'always
+ "*Dictate outline encryption key reminder handling:
+
+ always - always show reminder when prompting
+ needed - show reminder on key entry failure
+ manage - never present reminder, but still manage a file-var entry for it
+ disabled - don't even manage the file variable entry
+
+See the docstring for the `allout-enable-file-variable-adjustment'
+variable for details about allout ajustment of file variables."
+ :type '(choice (const always)
+ (const needed)
+ (const manage)
+ (const disabled))
+ :group 'allout)
+(make-variable-buffer-local 'allout-key-hint-handling)
+;;;_ = allout-encrypt-unencrypted-on-saves
+(defcustom allout-encrypt-unencrypted-on-saves 'except-current
+ "*When saving, should topics pending encryption be encrypted?
+
+The idea is to prevent file-system exposure of any un-encrypted stuff, and
+mostly covers both deliberate file writes and auto-saves.
+
+ - Yes: encrypt all topics pending encryption, even if it's the one
+ currently being edited. \(In that case, the currently edited topic
+ will be automatically decrypted before any user interaction, so they
+ can continue editing but the copy on the file system will be
+ encrypted.)
+ Auto-saves will use the \"All except current topic\" mode if this
+ one is selected, to avoid practical difficulties - see below.
+ - All except current topic: skip the topic currently being edited, even if
+ it's pending encryption. This may expose the current topic on the
+ file sytem, but avoids the nuisance of prompts for the encryption
+ key in the middle of editing for, eg, autosaves.
+ This mode is used for auto-saves for both this option and \"Yes\".
+ - No: leave it to the user to encrypt any unencrypted topics.
+
+For practical reasons, auto-saves always use the 'except-current policy
+when auto-encryption is enabled. \(Otherwise, spurious key prompts and
+unavoidable timing collisions are too disruptive.) If security for a file
+requires that even the current topic is never auto-saved in the clear,
+disable auto-saves for that file."
+
+ :type '(choice (const :tag "Yes" t)
+ (const :tag "All except current topic" except-current)
+ (const :tag "No" nil))
+ :group 'allout)
+(make-variable-buffer-local 'allout-encrypt-unencrypted-on-saves)
+
;;;_ + Miscellaneous customization
;;;_ = allout-command-prefix
@@ -422,13 +536,15 @@
("\C-f" allout-forward-current-level)
("\C-b" allout-backward-current-level)
("\C-a" allout-beginning-of-current-entry)
- ("\C-e" allout-end-of-current-entry)
+ ("\C-e" allout-end-of-entry)
; Exposure commands:
("\C-i" allout-show-children)
("\C-s" allout-show-current-subtree)
("\C-h" allout-hide-current-subtree)
+ ("h" allout-hide-current-subtree)
("\C-o" allout-show-current-entry)
("!" allout-show-all)
+ ("x" allout-toggle-current-subtree-encryption)
; Alteration commands:
(" " allout-open-sibtopic)
("." allout-open-subtopic)
@@ -489,19 +605,22 @@
(make-variable-buffer-local 'allout-reindent-bodies)
-;;;_ = allout-inhibit-protection
-(defcustom allout-inhibit-protection nil
- "*Non-nil disables warnings and confirmation-checks for concealed-text edits.
-
-Outline mode uses Emacs change-triggered functions to detect unruly
-changes to concealed regions. Set this var non-nil to disable the
-protection, potentially increasing text-entry responsiveness a bit.
-
-This var takes effect at `allout-mode' activation, so you may have to
-deactivate and then reactivate the mode if you want to toggle the
-behavior."
+;;;_ = allout-enable-file-variable-adjustment
+(defcustom allout-enable-file-variable-adjustment t
+ "*If non-nil, some allout outline actions can edit Emacs file variables text.
+
+This can range from changes to existing entries, addition of new ones,
+and creation of a new local variables section when necessary.
+
+Emacs file variables adjustments are also inhibited if `enable-local-variables'
+is nil.
+
+Operations potentially causing edits include allout encryption routines.
+See the docstring for `allout-toggle-current-subtree-encryption' for
+details."
:type 'boolean
:group 'allout)
+(make-variable-buffer-local 'allout-enable-file-variable-adjustment)
;;;_* CODE - no user customizations below.
@@ -509,7 +628,7 @@
;;;_ : Version
;;;_ = allout-version
(defvar allout-version
- (let ((rcs-rev "$Revision$"))
+ (let ((rcs-rev "$Revision: 1.68 $"))
(condition-case err
(save-match-data
(string-match "Revision: \\([0-9]+\\.[0-9]+\\)" rcs-rev)
@@ -728,7 +847,16 @@
(car (cdr cell)))))))
keymap-list)
map))
-
+;;;_ = allout-prior-bindings - being deprecated.
+(defvar allout-prior-bindings nil
+ "Variable for use in V18, with allout-added-bindings, for
+resurrecting, on mode deactivation, bindings that existed before
+activation. Being deprecated.")
+;;;_ = allout-added-bindings - being deprecated
+(defvar allout-added-bindings nil
+ "Variable for use in V18, with allout-prior-bindings, for
+resurrecting, on mode deactivation, bindings that existed before
+activation. Being deprecated.")
;;;_ : Menu bar
(defvar allout-mode-exposure-menu)
(defvar allout-mode-editing-menu)
@@ -759,7 +887,11 @@
["Shift Topic Out" allout-shift-out t]
["Rebullet Topic" allout-rebullet-topic t]
["Rebullet Heading" allout-rebullet-current-heading t]
- ["Number Siblings" allout-number-siblings t]))
+ ["Number Siblings" allout-number-siblings t]
+ "----"
+ ["Toggle Topic Encryption"
+ allout-toggle-current-subtree-encryption
+ (> (allout-current-depth) 1)]))
(easy-menu-define allout-mode-navigation-menu
allout-mode-map
"Allout outline navigation menu."
@@ -775,7 +907,7 @@
"----"
["Beginning of Entry"
allout-beginning-of-current-entry t]
- ["End of Entry" allout-end-of-current-entry t]
+ ["End of Entry" allout-end-of-entry t]
["End of Subtree" allout-end-of-current-subtree t]))
(easy-menu-define allout-mode-misc-menu
allout-mode-map
@@ -855,13 +987,6 @@
(setq allout-mode-prior-settings rebuild)))))
)
;;;_ : Mode-specific incidentals
-;;;_ = allout-during-write-cue nil
-(defvar allout-during-write-cue nil
- "Used to inhibit outline change-protection during file write.
-
-See also `allout-post-command-business', `allout-write-file-hook',
-`allout-before-change-protect', and `allout-post-command-business'
-functions.")
;;;_ = allout-pre-was-isearching nil
(defvar allout-pre-was-isearching nil
"Cue for isearch-dynamic-exposure mechanism, implemented in
@@ -869,22 +994,28 @@
(make-variable-buffer-local 'allout-pre-was-isearching)
;;;_ = allout-isearch-prior-pos nil
(defvar allout-isearch-prior-pos nil
- "Cue for isearch-dynamic-exposure tracking, used by `allout-isearch-expose'.")
+ "Cue for isearch-dynamic-exposure tracking, used by
+`allout-isearch-expose'.")
(make-variable-buffer-local 'allout-isearch-prior-pos)
-;;;_ = allout-override-protect nil
-(defvar allout-override-protect nil
- "Used in `allout-mode' for regulate of concealed-text protection mechanism.
-
-Allout outline mode regulates alteration of concealed text to protect
-against inadvertent, unnoticed changes. This is for use by specific,
-native outline functions to temporarily override that protection.
-It's automatically reset to nil after every buffer modification.")
-(make-variable-buffer-local 'allout-override-protect)
+;;;_ = allout-isearch-did-quit
+(defvar allout-isearch-did-quit nil
+ "Distinguishes isearch conclusion and cancellation.
+
+Maintained by allout-isearch-abort \(which is wrapped around the real
+isearch-abort), and monitored by allout-isearch-expose for action.")
+(make-variable-buffer-local 'allout-isearch-did-quit)
;;;_ > allout-unprotected (expr)
-(defmacro allout-unprotected (expression)
- "Evaluate EXPRESSION with `allout-override-protect' let-bound to t."
- `(let ((allout-override-protect t))
- ,expression))
+(defmacro allout-unprotected (expr)
+ "Enable internal outline operations to alter read-only text."
+ `(let ((was-inhibit-r-o inhibit-read-only))
+ (unwind-protect
+ (progn
+ (setq inhibit-read-only t)
+ ,expr)
+ (setq inhibit-read-only was-inhibit-r-o)
+ )
+ )
+ )
;;;_ = allout-undo-aggregation
(defvar allout-undo-aggregation 30
"Amount of successive self-insert actions to bunch together per undo.
@@ -897,14 +1028,109 @@
"Horrible hack used to prevent invalid multiple triggering of outline
mode from prop-line file-var activation. Used by `allout-mode' function
to track repeats.")
-;;;_ > allout-write-file-hook ()
-(defun allout-write-file-hook ()
- "In `allout-mode', run as a `write-contents-functions' activity.
-
-Currently just sets `allout-during-write-cue', so outline change-protection
-knows to keep inactive during file write."
- (setq allout-during-write-cue t)
- nil)
+;;;_ = allout-file-key-verifier-string
+(defvar allout-file-key-verifier-string nil
+ "Name for use as a file variable for verifying encryption key across
+sessions.")
+(make-variable-buffer-local 'allout-file-key-verifier-string)
+;;;_ = allout-encryption-scheme
+(defvar allout-encryption-scheme nil
+ "*Allout outline topic encryption scheme pending for the current buffer.
+
+Intended as a file-specific (buffer local) setting, it defaults to the
+value of allout-default-encryption-scheme if nil.")
+(make-variable-buffer-local 'allout-encryption-scheme)
+;;;_ = allout-key-verifier-string
+(defvar allout-key-verifier-string nil
+ "Setting used to test solicited encryption keys against that already
+associated with a file.
+
+It consists of an encrypted random string useful only to verify that a key
+entered by the user is effective for decryption. The key itself is \*not*
+recorded in the file anywhere, and the encrypted contents are random binary
+characters to avoid exposing greater susceptibility to search attacks.
+
+The verifier string is retained as an Emacs file variable, as well as in
+the emacs buffer state, if file variable adjustments are enabled. See
+`allout-enable-file-variable-adjustment' for details about that.")
+(make-variable-buffer-local 'allout-key-verifier-string)
+(setq-default allout-key-verifier-string nil)
+;;;_ = allout-key-hint-string
+(defvar allout-key-hint-string ""
+ "Variable used to retain a reminder string for a file's encryption key.
+
+See the description of `allout-key-hint-handling' for details about how
+the reminder is deployed.
+
+The hint is retained as an Emacs file variable, as well as in the emacs buffer
+state, if file variable adjustments are enabled. See
+`allout-enable-file-variable-adjustment' for details about that.")
+(make-variable-buffer-local 'allout-key-hint-string)
+(setq-default allout-key-hint-string "")
+;;;_ = allout-after-save-decrypt
+(defvar allout-after-save-decrypt nil
+ "Internal variable, is nil or has the value of two points:
+
+ - the location of a topic to be decrypted after saving is done
+ - where to situate the cursor after the decryption is performed
+
+This is used to decrypt the topic that was currently being edited, if it
+was encrypted automatically as part of a file write or autosave.")
+(make-variable-buffer-local 'allout-after-save-decrypt)
+;;;_ > allout-write-file-hook-handler ()
+(defun allout-write-file-hook-handler ()
+ "Implement `allout-encrypt-unencrypted-on-saves' policy for file writes."
+
+ (if (or (not (boundp 'allout-encrypt-unencrypted-on-saves))
+ (not allout-encrypt-unencrypted-on-saves))
+ nil
+ (let ((except-mark (and (equal allout-encrypt-unencrypted-on-saves
+ 'except-current)
+ (point-marker))))
+ (if (save-excursion (goto-char (point-min))
+ (allout-next-topic-pending-encryption except-mark))
+ (progn
+ (message "auto-encrypting pending topics")
+ (sit-for 2)
+ (condition-case failure
+ (setq allout-after-save-decrypt
+ (allout-encrypt-decrypted except-mark))
+ (error (progn
+ (message
+ "allout-write-file-hook-handler suppressing error %s"
+ failure)
+ (sit-for 2))))))
+ ))
+ nil)
+;;;_ > allout-auto-save-hook-handler ()
+(defun allout-auto-save-hook-handler ()
+ "Implement `allout-encrypt-unencrypted-on-saves' policy for auto saves."
+
+ (if allout-encrypt-unencrypted-on-saves
+ ;; Always implement 'except-current policy when enabled.
+ (let ((allout-encrypt-unencrypted-on-saves 'except-current))
+ (allout-write-file-hook-handler))))
+;;;_ > allout-after-saves-handler ()
+(defun allout-after-saves-handler ()
+ "Decrypt topic encrypted for save, if it's currently being edited.
+
+Ie, if it was pending encryption and contained the point in its body before
+the save.
+
+We use values stored in `allout-after-save-decrypt' to locate the topic
+and the place for the cursor after the decryption is done."
+ (if (not (and (allout-mode-p)
+ (boundp 'allout-after-save-decrypt)
+ allout-after-save-decrypt))
+ t
+ (goto-char (car allout-after-save-decrypt))
+ (let ((was-modified (buffer-modified-p)))
+ (allout-toggle-current-subtree-encryption)
+ (if (not was-modified)
+ (set-buffer-modified-p nil)))
+ (goto-char (cadr allout-after-save-decrypt))
+ (setq allout-after-save-decrypt nil))
+ )
;;;_ #2 Mode activation
;;;_ = allout-mode
@@ -916,11 +1142,10 @@
'allout-mode)
;;;_ = allout-explicitly-deactivated
(defvar allout-explicitly-deactivated nil
- "Non-nil if `allout-mode' was last deliberately deactivated.
+ "If t, `allout-mode's last deactivation was deliberate.
So `allout-post-command-business' should not reactivate it...")
(make-variable-buffer-local 'allout-explicitly-deactivated)
;;;_ > allout-init (&optional mode)
-;;;###autoload
(defun allout-init (&optional mode)
"Prime `allout-mode' to enable/disable auto-activation, wrt `allout-layout'.
@@ -939,9 +1164,9 @@
the `allout-layout' variable. (See `allout-layout' and
`allout-expose-topic' docstrings for more details on auto layout).
-`allout-init' works by setting up (or removing)
-`allout-find-file-hook' in `find-file-hook', and giving
-`allout-auto-activation' a suitable setting.
+`allout-init' works by setting up (or removing) the `allout-mode'
+find-file-hook, and giving `allout-auto-activation' a suitable
+setting.
To prime your Emacs session for full auto-outline operation, include
the following two lines in your Emacs init file:
@@ -949,32 +1174,35 @@
\(require 'allout)
\(allout-init t)"
- (interactive
- (let ((m (completing-read
- (concat "Select outline auto setup mode "
- "(empty for report, ? for options) ")
- '(("nil")("full")("activate")("deactivate")
- ("ask") ("report") (""))
- nil
- t)))
- (if (string= m "") 'report
- (intern-soft m))))
+ (interactive)
+ (if (interactive-p)
+ (progn
+ (setq mode
+ (completing-read
+ (concat "Select outline auto setup mode "
+ "(empty for report, ? for options) ")
+ '(("nil")("full")("activate")("deactivate")
+ ("ask") ("report") (""))
+ nil
+ t))
+ (if (string= mode "")
+ (setq mode 'report)
+ (setq mode (intern-soft mode)))))
(let
;; convenience aliases, for consistent ref to respective vars:
((hook 'allout-find-file-hook)
(curr-mode 'allout-auto-activation))
(cond ((not mode)
- (setq find-file-hook (delq hook find-file-hook))
+ (setq find-file-hooks (delq hook find-file-hooks))
(if (interactive-p)
(message "Allout outline mode auto-activation inhibited.")))
((eq mode 'report)
- (if (memq hook find-file-hook)
- ;; Just punt and use the reports from each of the modes:
- (allout-init (symbol-value curr-mode))
- (allout-init nil)
- (message "Allout outline mode auto-activation inhibited.")))
- (t (add-hook 'find-file-hook hook)
+ (if (not (memq hook find-file-hooks))
+ (allout-init nil)
+ ;; Just punt and use the reports from each of the modes:
+ (allout-init (symbol-value curr-mode))))
+ (t (add-hook 'find-file-hooks hook)
(set curr-mode ; `set', not `setq'!
(cond ((eq mode 'activate)
(message
@@ -1022,10 +1250,11 @@
In addition to outline navigation and exposure, allout includes:
- - topic-oriented repositioning, cut, and paste
+ - topic-oriented repositioning, promotion/demotion, cut, and paste
- integral outline exposure-layout
- incremental search with dynamic exposure and reconcealment of hidden text
- automatic topic-number maintenance
+ - easy topic encryption and decryption
- \"Hot-spot\" operation, for single-keystroke maneuvering and
exposure control. \(See the allout-mode docstring.)
@@ -1035,7 +1264,7 @@
special `allout-mode' features and terminology. See also the outline
menubar additions for quick reference to many of the features, and see
the docstring of the function `allout-init' for instructions on
-priming your Emacs session for automatic activation of `allout-mode'.
+priming your emacs session for automatic activation of `allout-mode'.
The bindings are dictated by the `allout-keybindings-list' and
@@ -1048,7 +1277,7 @@
C-c C-u allout-up-current-level | C-c C-s allout-show-current-subtree
C-c C-f allout-forward-current-level | C-c C-o allout-show-current-entry
C-c C-b allout-backward-current-level | ^U C-c C-s allout-show-all
-C-c C-e allout-end-of-current-entry | allout-hide-current-leaves
+C-c C-e allout-end-of-entry | allout-hide-current-leaves
C-c C-a allout-beginning-of-current-entry, alternately, goes to hot-spot
Topic Header Production:
@@ -1064,7 +1293,7 @@
C-c<CR> allout-rebullet-topic Reconcile bullets of topic and its offspring
- distinctive bullets are not changed, others
alternated according to nesting depth.
-C-c * allout-rebullet-current-heading Prompt for alternate bullet for
+C-c b allout-rebullet-current-heading Prompt for alternate bullet for
current topic.
C-c # allout-number-siblings Number bullets of topic and siblings - the
offspring are not affected. With repeat
@@ -1087,8 +1316,8 @@
C-c C-SPC allout-mark-topic
C-c = c allout-copy-exposed-to-buffer
Duplicate outline, sans concealed text, to
- buffer with name derived from derived from
- that of current buffer - \"*XXX exposed*\".
+ buffer with name derived from derived from that
+ of current buffer - \"*BUFFERNAME exposed*\".
C-c = p allout-flatten-exposed-to-buffer
Like above 'copy-exposed', but convert topic
prefixes to section.subsection... numeric
@@ -1096,6 +1325,19 @@
ESC ESC (allout-init t) Setup Emacs session for outline mode
auto-activation.
+ Encrypted Entries
+
+Outline mode supports easily togglable gpg encryption of topics, with
+niceities like support for symmetric and key-pair modes, key timeout, key
+consistency checking, user-provided hinting for symmetric key mode, and
+auto-encryption of topics pending encryption on save. The aim is to enable
+reliable topic privacy while preventing accidents like neglected
+encryption, encryption with a mistaken key, forgetting which key was used,
+and other practical pitfalls.
+
+See the `allout-toggle-current-subtree-encryption' function and
+`allout-encrypt-unencrypted-on-saves' customization variable for details.
+
HOT-SPOT Operation
Hot-spot operation provides a means for easy, single-keystroke outline
@@ -1148,11 +1390,11 @@
HEADER: The first line of a topic, include the topic PREFIX and header
text.
-PREFIX: The leading text of a topic which distinguishes it from
- normal text. It has a strict form, which consists of a
- prefix-lead string, padding, and a bullet. The bullet may be
- followed by a number, indicating the ordinal number of the
- topic among its siblings, a space, and then the header text.
+PREFIX: The leading text of a topic which distinguishes it from normal
+ text. It has a strict form, which consists of a prefix-lead
+ string, padding, and a bullet. The bullet may be followed by a
+ number, indicating the ordinal number of the topic among its
+ siblings, a space, and then the header text.
The relative length of the PREFIX determines the nesting depth
of the topic.
@@ -1223,7 +1465,7 @@
;; off on second invocation, so we detect it as best we can, and
;; skip everything.
((and same-complex-command ; Still in same complex command
- ; as last time `allout-mode' invoked.
+ ; as last time `allout-mode' invoked.
active ; Already activated.
(not explicit-activation) ; Prop-line file-vars don't have args.
(string-match "^19.1[89]" ; Bug only known to be in v19.18 and
@@ -1238,6 +1480,19 @@
; active state or *de*activation
; specifically requested:
(setq allout-explicitly-deactivated t)
+ (if (string-match "^18\." emacs-version)
+ ; Revoke those keys that remain
+ ; as we set them:
+ (let ((curr-loc (current-local-map)))
+ (mapcar (function
+ (lambda (cell)
+ (if (eq (lookup-key curr-loc (car cell))
+ (car (cdr cell)))
+ (define-key curr-loc (car cell)
+ (assq (car cell) allout-prior-bindings)))))
+ allout-added-bindings)
+ (allout-resumptions 'allout-added-bindings)
+ (allout-resumptions 'allout-prior-bindings)))
(if allout-old-style-prefixes
(progn
@@ -1246,9 +1501,12 @@
(allout-resumptions 'selective-display)
(if (and (boundp 'before-change-functions) before-change-functions)
(allout-resumptions 'before-change-functions))
- (setq write-contents-functions
- (delq 'allout-write-file-hook
- write-contents-functions))
+ (setq local-write-file-hooks
+ (delq 'allout-write-file-hook-handler
+ local-write-file-hooks))
+ (setq auto-save-hook
+ (delq 'allout-auto-save-hook-handler
+ auto-save-hook))
(allout-resumptions 'paragraph-start)
(allout-resumptions 'paragraph-separate)
(allout-resumptions (if (string-match "^18" emacs-version)
@@ -1288,25 +1546,27 @@
(cons '(allout-mode . allout-mode-map)
minor-mode-map-alist))))
+ ; V18 minor-mode key bindings:
+ ; Stash record of added bindings
+ ; for later revocation:
+ (allout-resumptions 'allout-added-bindings
+ (list allout-keybindings-list))
+ (allout-resumptions 'allout-prior-bindings
+ (list (current-local-map)))
; and add them:
(use-local-map (produce-allout-mode-map allout-keybindings-list
(current-local-map)))
)
; selective-display is the
- ; Emacs conditional exposure
+ ; emacs conditional exposure
; mechanism:
(allout-resumptions 'selective-display '(t))
- (if allout-inhibit-protection
- t
- (allout-resumptions 'before-change-functions
- '(allout-before-change-protect)))
(add-hook 'pre-command-hook 'allout-pre-command-business)
(add-hook 'post-command-hook 'allout-post-command-business)
- ; Temporarily set by any outline
- ; functions that can be trusted to
- ; deal properly with concealed text.
- (add-hook 'write-contents-functions 'allout-write-file-hook)
+ (add-hook 'local-write-file-hooks 'allout-write-file-hook-handler)
+ (make-variable-buffer-local 'auto-save-hook)
+ (add-hook 'auto-save-hook 'allout-auto-save-hook-handler)
; Custom auto-fill func, to support
; respect for topic headline,
; hanging-indents, etc:
@@ -1337,7 +1597,8 @@
(if allout-layout
(setq do-layout t))
- (if allout-isearch-dynamic-expose
+ (if (and allout-isearch-dynamic-expose
+ (not (fboundp 'allout-real-isearch-abort)))
(allout-enwrap-isearch))
(run-hooks 'allout-mode-hook)
@@ -1376,7 +1637,6 @@
) ; let*
) ; defun
;;;_ > allout-minor-mode
-;;; XXX released verion doesn't do this?
(defalias 'allout-minor-mode 'allout-mode)
;;;_ #3 Internal Position State-Tracking - "allout-recent-*" funcs
@@ -1400,12 +1660,12 @@
"Buffer point last returned by `allout-end-of-current-subtree'.")
(make-variable-buffer-local 'allout-recent-end-of-subtree)
;;;_ > allout-prefix-data (beg end)
-(defmacro allout-prefix-data (beginning end)
+(defmacro allout-prefix-data (beg end)
"Register allout-prefix state data - BEGINNING and END of prefix.
For reference by `allout-recent' funcs. Returns BEGINNING."
`(setq allout-recent-prefix-end ,end
- allout-recent-prefix-beginning ,beginning))
+ allout-recent-prefix-beginning ,beg))
;;;_ > allout-recent-depth ()
(defmacro allout-recent-depth ()
"Return depth of last heading encountered by an outline maneuvering function.
@@ -1612,9 +1872,12 @@
"Produce a location \"chart\" of subtopics of the containing topic.
Optional argument LEVELS specifies the depth \(relative to start
-depth) for the chart.
+depth) for the chart. Subsequent optional args are not for public
+use.
+
+Point is left at the end of the subtree.
-Charts are used to capture outline structure, so that outline altering
+Charts are used to capture outline structure, so that outline-altering
routines need assess the structure only once, and then use the chart
for their elaborate manipulations.
@@ -1625,11 +1888,9 @@
The chart for a topics' offspring precedes the entry for the topic
itself.
-\(fn &optional LEVELS)"
-
- ;; The other function parameters are for internal recursion, and should
- ;; not be specified by external callers. ORIG-DEPTH is depth of topic at
- ;; starting point, and PREV-DEPTH is depth of prior topic."
+The other function parameters are for internal recursion, and should
+not be specified by external callers. ORIG-DEPTH is depth of topic at
+starting point, and PREV-DEPTH is depth of prior topic."
(let ((original (not orig-depth)) ; `orig-depth' set only in recursion.
chart curr-depth)
@@ -1835,11 +2096,18 @@
(if (re-search-forward allout-line-boundary-regexp nil 'move)
(prog1 (goto-char (match-beginning 0))
(allout-prefix-data (match-beginning 2)(match-end 2)))))
-;;;_ > allout-end-of-current-subtree ()
-(defun allout-end-of-current-subtree ()
- "Put point at the end of the last leaf in the currently visible topic."
- (interactive)
- (allout-back-to-current-heading)
+;;;_ > allout-end-of-subtree (&optional current)
+(defun allout-end-of-subtree (&optional current)
+ "Put point at the end of the last leaf in the containing topic.
+
+If optional CURRENT is true (default false), then put point at the end of
+the containing visible topic.
+
+Returns the value of point."
+ (interactive "P")
+ (if current
+ (allout-back-to-current-heading)
+ (allout-goto-prefix))
(let ((level (allout-recent-depth)))
(allout-next-heading)
(while (and (not (eobp))
@@ -1851,9 +2119,16 @@
'(?\n ?\r))
(forward-char -1))
(setq allout-recent-end-of-subtree (point))))
+;;;_ > allout-end-of-current-subtree ()
+(defun allout-end-of-current-subtree ()
+ "Put point at end of last leaf in currently visible containing topic.
+
+Returns the value of point."
+ (interactive)
+ (allout-end-of-subtree t))
;;;_ > allout-beginning-of-current-entry ()
(defun allout-beginning-of-current-entry ()
- "When not already there, position point at beginning of current topic's body.
+ "When not already there, position point at beginning of current topic header.
If already there, move cursor to bullet for hot-spot operation.
\(See `allout-mode' doc string for details on hot-spot operation.)"
@@ -1863,11 +2138,10 @@
(if (and (interactive-p)
(= (point) start-point))
(goto-char (allout-current-bullet-pos)))))
-;;;_ > allout-end-of-current-entry ()
-(defun allout-end-of-current-entry ()
+;;;_ > allout-end-of-entry ()
+(defun allout-end-of-entry ()
"Position the point at the end of the current topics' entry."
(interactive)
- (allout-show-entry)
(prog1 (allout-pre-next-preface)
(if (and (not (bobp))(looking-at "^$"))
(forward-char -1))))
@@ -1875,9 +2149,27 @@
(defun allout-end-of-current-heading ()
(interactive)
(allout-beginning-of-current-entry)
- (forward-line -1)
- (end-of-line))
+ (re-search-forward "[\n\r]" nil t)
+ (forward-char -1))
(defalias 'allout-end-of-heading 'allout-end-of-current-heading)
+;;;_ > allout-get-body-text ()
+(defun allout-get-body-text ()
+ "Return the unmangled body text of the topic immediately containing point."
+ (save-excursion
+ (allout-end-of-prefix)
+ (if (not (re-search-forward "[\n\r]" nil t))
+ nil
+ (backward-char 1)
+ (let ((pre-body (point)))
+ (if (not pre-body)
+ nil
+ (allout-end-of-entry)
+ (if (not (= pre-body (point)))
+ (buffer-substring-no-properties (1+ pre-body) (point))))
+ )
+ )
+ )
+ )
;;;_ - Depth-wise
;;;_ > allout-ascend-to-depth (depth)
@@ -1892,12 +2184,16 @@
(if (= (allout-recent-depth) depth)
(progn (goto-char allout-recent-prefix-beginning)
depth)
- (goto-char last-good)))))
+ (goto-char last-good)
+ nil))
+ (if (interactive-p) (allout-end-of-prefix))))
;;;_ > allout-ascend ()
(defun allout-ascend ()
"Ascend one level, returning t if successful, nil if not."
- (if (allout-beginning-of-level)
- (allout-previous-heading)))
+ (prog1
+ (if (allout-beginning-of-level)
+ (allout-previous-heading))
+ (if (interactive-p) (allout-end-of-prefix))))
;;;_ > allout-descend-to-depth (depth)
(defun allout-descend-to-depth (depth)
"Descend to depth DEPTH within current topic.
@@ -1917,13 +2213,13 @@
nil))
)
;;;_ > allout-up-current-level (arg &optional dont-complain)
-(defun allout-up-current-level (arg &optional dont-complain interactive)
+(defun allout-up-current-level (arg &optional dont-complain)
"Move out ARG levels from current visible topic.
Positions on heading line of containing topic. Error if unable to
ascend that far, or nil if unable to ascend but optional arg
DONT-COMPLAIN is non-nil."
- (interactive "p\np")
+ (interactive "p")
(allout-back-to-current-heading)
(let ((present-level (allout-recent-depth))
(last-good (point))
@@ -1944,12 +2240,12 @@
(if (or failed
(> arg 0))
(progn (goto-char last-good)
- (if interactive (allout-end-of-prefix))
+ (if (interactive-p) (allout-end-of-prefix))
(if (not dont-complain)
(error "Can't ascend past outermost level")
- (if interactive (allout-end-of-prefix))
+ (if (interactive-p) (allout-end-of-prefix))
nil))
- (if interactive (allout-end-of-prefix))
+ (if (interactive-p) (allout-end-of-prefix))
allout-recent-prefix-beginning)))
;;;_ - Linear
@@ -1981,7 +2277,7 @@
nil))))
;;;_ > allout-previous-sibling (&optional depth backward)
(defun allout-previous-sibling (&optional depth backward)
- "Like `allout-forward-current-level', but backwards & respect invisible topics.
+ "Like `allout-forward-current-level' backwards, respecting invisible topics.
Optional DEPTH specifies depth to traverse, default current depth.
@@ -2015,7 +2311,7 @@
(let ((depth (allout-depth)))
(while (allout-previous-sibling depth nil))
(prog1 (allout-recent-depth)
- (allout-end-of-prefix))))
+ (if (interactive-p) (allout-end-of-prefix)))))
;;;_ > allout-next-visible-heading (arg)
(defun allout-next-visible-heading (arg)
"Move to the next ARG'th visible heading line, backward if arg is negative.
@@ -2053,13 +2349,13 @@
(interactive "p")
(allout-next-visible-heading (- arg)))
;;;_ > allout-forward-current-level (arg)
-(defun allout-forward-current-level (arg &optional interactive)
+(defun allout-forward-current-level (arg)
"Position point at the next heading of the same level.
Takes optional repeat-count, goes backward if count is negative.
Returns resulting position, else nil if none found."
- (interactive "p\np")
+ (interactive "p")
(let ((start-depth (allout-current-depth))
(start-point (point))
(start-arg arg)
@@ -2087,7 +2383,7 @@
(= (allout-recent-depth) start-depth)))
allout-recent-prefix-beginning
(goto-char last-good)
- (if (not interactive)
+ (if (not (interactive-p))
nil
(allout-end-of-prefix)
(error "Hit %s level %d topic, traversed %d of %d requested"
@@ -2096,10 +2392,10 @@
(- (abs start-arg) arg)
(abs start-arg))))))
;;;_ > allout-backward-current-level (arg)
-(defun allout-backward-current-level (arg &optional interactive)
+(defun allout-backward-current-level (arg)
"Inverse of `allout-forward-current-level'."
- (interactive "p\np")
- (if interactive
+ (interactive "p")
+ (if (interactive-p)
(let ((current-prefix-arg (* -1 arg)))
(call-interactively 'allout-forward-current-level))
(allout-forward-current-level (* -1 arg))))
@@ -2107,121 +2403,6 @@
;;;_ #5 Alteration
;;;_ - Fundamental
-;;;_ > allout-before-change-protect (beg end)
-(defun allout-before-change-protect (beg end)
- "Outline before-change hook, regulates changes to concealed text.
-
-Reveal concealed text that would be changed by current command, and
-offer user choice to commit or forego the change. Unchanged text is
-reconcealed. User has option to have changed text reconcealed.
-
-Undo commands are specially treated - the user is not prompted for
-choice, the undoes are always committed (based on presumption that the
-things being undone were already subject to this regulation routine),
-and undoes always leave the changed stuff exposed.
-
-Changes to concealed regions are ignored while file is being written.
-\(This is for the sake of functions that do change the file during
-writes, like crypt and zip modes.)
-
-Locally bound in outline buffers to `before-change-functions', which
-in Emacs 19 is run before any change to the buffer.
-
-Any functions which set [`this-command' to `undo', or which set]
-`allout-override-protect' non-nil (as does, eg, allout-flag-chars)
-are exempt from this restriction."
- (if (and (allout-mode-p)
- ; allout-override-protect
- ; set by functions that know what
- ; they're doing, eg outline internals:
- (not allout-override-protect)
- (not allout-during-write-cue)
- (save-match-data ; Preserve operation position state.
- ; Both beginning and end chars must
- ; be exposed:
- (save-excursion (if (memq this-command '(newline open-line))
- ;; Compensate for stupid Emacs {new,
- ;; open-}line display optimization:
- (setq beg (1+ beg)
- end (1+ end)))
- (goto-char beg)
- (or (allout-hidden-p)
- (and (not (= beg end))
- (goto-char end)
- (allout-hidden-p))))))
- (save-match-data
- (if (equal this-command 'undo)
- ;; Allow undo without inhibition.
- ;; - Undoing new and open-line hits stupid Emacs redisplay
- ;; optimization (em 19 cmds.c, ~ line 200).
- ;; - Presumably, undoing what was properly protected when
- ;; done.
- ;; - Undo may be users' only recourse in protection faults.
- ;; So, expose what getting changed:
- (progn (message "Undo! - exposing concealed target...")
- (if (allout-hidden-p)
- (allout-show-children))
- (message "Undo!"))
- (let (response
- (rehide-completely (save-excursion (allout-goto-prefix)
- (allout-hidden-p)))
- rehide-place)
-
- (save-excursion
- (if (condition-case err
- ;; Condition case to catch keyboard quits during reads.
- (progn
- ; Give them a peek where
- (save-excursion
- (if (eolp) (setq rehide-place
- (allout-goto-prefix)))
- (allout-show-entry))
- ; Present the message, but...
- ; leave the cursor at the location
- ; until they respond:
- ; Then interpret the response:
- (while
- (progn
- (message (concat "Change inside concealed"
- " region - do it? "
- "(n or 'y'/'r'eclose)"))
- (setq response (read-char))
- (not
- (cond ((memq response '(?r ?R))
- (setq response 'reclose))
- ((memq response '(?y ?Y ? ))
- (setq response t))
- ((memq response '(?n ?N 127))
- (setq response nil)
- t)
- ((eq response ??)
- (message
- "`r' means `yes, then reclose'")
- nil)
- (t (message "Please answer y, n, or r")
- (sit-for 1)
- nil)))))
- response)
- ('quit nil))
- ; Continue:
- (if (eq response 'reclose)
- (save-excursion
- (if rehide-place (goto-char rehide-place))
- (if rehide-completely
- (allout-hide-current-entry-completely)
- (allout-hide-current-entry)))
- (if (allout-ascend-to-depth (1- (allout-recent-depth)))
- (allout-show-children)
- (allout-show-to-offshoot)))
- ; Prevent:
- (if rehide-completely
- (save-excursion
- (if rehide-place (goto-char rehide-place))
- (allout-hide-current-entry-completely))
- (allout-hide-current-entry))
- (error "Change within concealed region prevented"))))))
- ) ; if
- ) ; defun
;;;_ = allout-post-goto-bullet
(defvar allout-post-goto-bullet nil
"Outline internal var, for `allout-pre-command-business' hot-spot operation.
@@ -2236,24 +2417,20 @@
(defun allout-post-command-business ()
"Outline `post-command-hook' function.
-- Null `allout-override-protect', so it's not left open.
-
- Implement (and clear) `allout-post-goto-bullet', for hot-spot
outline commands.
-- Massages `buffer-undo-list' so successive, standard character self-inserts
- are aggregated. This kludge compensates for lack of undo bunching when
- `before-change-functions' is used."
+- Decrypt topic currently being edited if it was encrypted for a save.
+
+- Massage buffer-undo-list so successive, standard character self-inserts are
+ aggregated. This kludge compensates for lack of undo bunching when
+ before-change-functions is used."
; Apply any external change func:
(if (not (allout-mode-p)) ; In allout-mode.
nil
- (setq allout-override-protect nil)
(if allout-isearch-dynamic-expose
(allout-isearch-rectification))
- (if allout-during-write-cue
- ;; Was used by allout-before-change-protect, done with it now:
- (setq allout-during-write-cue nil))
;; Undo bunching business:
(if (and (listp buffer-undo-list) ; Undo history being kept.
(equal this-command 'self-insert-command)
@@ -2282,6 +2459,11 @@
(setq buffer-undo-list
(cons (cons prev-from cur-to)
(cdr (cdr (cdr buffer-undo-list))))))))
+
+ (if (and (boundp 'allout-after-save-decrypt)
+ allout-after-save-decrypt)
+ (allout-after-saves-handler))
+
;; Implement -post-goto-bullet, if set: (must be after undo business)
(if (and allout-post-goto-bullet
(allout-current-bullet-pos))
@@ -2304,8 +2486,9 @@
char. When in this mode you can use regular cursor-positioning
command/keystrokes to relocate the cursor off of a bullet character to
return to regular interpretation of self-insert characters."
+
(if (not (allout-mode-p))
- ;; Shouldn't be invoked if not in allout allout-mode, but just in case:
+ ;; Shouldn't be invoked if not in allout-mode, but just in case:
nil
;; Register isearch status:
(if (and (boundp 'isearch-mode) isearch-mode)
@@ -2317,7 +2500,9 @@
(let* ((this-key-num (cond
((numberp last-command-char)
last-command-char)
- ((fboundp 'char-to-int)
+ ;; Only xemacs has characterp.
+ ((and (fboundp 'characterp)
+ (characterp last-command-char))
(char-to-int last-command-char))
(t 0)))
mapped-binding)
@@ -2340,7 +2525,7 @@
this-command mapped-binding)))))))
;;;_ > allout-find-file-hook ()
(defun allout-find-file-hook ()
- "Activate `allout-mode' when `allout-auto-activation' & `allout-layout' are non-nil.
+ "Activate `allout-mode' when `allout-auto-activation', `allout-layout' non-nil.
See `allout-init' for setup instructions."
(if (and allout-auto-activation
@@ -2353,7 +2538,7 @@
Called as part of `allout-post-command-business'."
- (let ((isearching isearch-mode))
+ (let ((isearching (and (boundp 'isearch-mode) isearch-mode)))
(cond ((and isearching (not allout-pre-was-isearching))
(allout-isearch-expose 'start))
((and isearching allout-pre-was-isearching)
@@ -2361,24 +2546,11 @@
((and (not isearching) allout-pre-was-isearching)
(allout-isearch-expose 'final))
;; Not and wasn't isearching:
- (t (setq allout-isearch-prior-pos nil)))))
+ (t (setq allout-isearch-prior-pos nil)
+ (setq allout-isearch-did-quit nil)))))
;;;_ = allout-isearch-was-font-lock
(defvar allout-isearch-was-font-lock
(and (boundp 'font-lock-mode) font-lock-mode))
-
-;;;_ > allout-flag-region (from to flag)
-(defmacro allout-flag-region (from to flag)
- "Hide or show lines from FROM to TO, via Emacs `selective-display' FLAG char.
-Ie, text following flag C-m \(carriage-return) is hidden until the
-next C-j (newline) char.
-
-Returns the endpoint of the region."
- `(let ((buffer-read-only nil)
- (allout-override-protect t))
- (subst-char-in-region ,from ,to
- (if (= ,flag ?\n) ?\r ?\n)
- ,flag t)))
-
;;;_ > allout-isearch-expose (mode)
(defun allout-isearch-expose (mode)
"MODE is either 'clear, 'start, 'continue, or 'final."
@@ -2403,21 +2575,56 @@
(setq allout-isearch-prior-pos nil)
(if (not (eq mode 'final))
(setq allout-isearch-prior-pos (cons (point) (allout-show-entry)))
- (if isearch-mode-end-hook-quit
+ (if allout-isearch-did-quit
nil
(setq allout-isearch-prior-pos nil)
- (allout-show-children)))))
+ (allout-show-children))))
+ (setq allout-isearch-did-quit nil))
;;;_ > allout-enwrap-isearch ()
(defun allout-enwrap-isearch ()
- "Impose `isearch-abort' wrapper for dynamic exposure in isearch.
+ "Impose `allout-mode' isearch-abort wrapper for dynamic exposure in isearch.
The function checks to ensure that the rebinding is done only once."
- (add-hook 'isearch-mode-end-hook 'allout-isearch-rectification))
+
+ (add-hook 'isearch-mode-end-hook 'allout-isearch-rectification)
+ (if (fboundp 'allout-real-isearch-abort)
+ ;;
+ nil
+ ; Ensure load of isearch-mode:
+ (if (or (and (fboundp 'isearch-mode)
+ (fboundp 'isearch-abort))
+ (condition-case error
+ (load-library "isearch-mode")
+ ('file-error (message
+ "Skipping isearch-mode provisions - %s '%s'"
+ (car (cdr error))
+ (car (cdr (cdr error))))
+ (sit-for 1)
+ ;; Inhibit subsequent tries and return nil:
+ (setq allout-isearch-dynamic-expose nil))))
+ ;; Isearch-mode loaded, encapsulate specific entry points for
+ ;; outline dynamic-exposure business:
+ (progn
+ ;; stash crucial isearch-mode funcs under known, private
+ ;; names, then register wrapper functions under the old
+ ;; names, in their stead:
+ (fset 'allout-real-isearch-abort (symbol-function 'isearch-abort))
+ (fset 'isearch-abort 'allout-isearch-abort)))))
+;;;_ > allout-isearch-abort ()
+(defun allout-isearch-abort ()
+ "Wrapper for allout-real-isearch-abort \(which see), to register
+actual quits."
+ (interactive)
+ (setq allout-isearch-did-quit nil)
+ (condition-case what
+ (allout-real-isearch-abort)
+ ('quit (setq allout-isearch-did-quit t)
+ (signal 'quit nil))))
;;; Prevent unnecessary font-lock while isearching!
(defvar isearch-was-font-locking nil)
(defun isearch-inhibit-font-lock ()
- "Inhibit `font-lock-mode' while isearching - for use on `isearch-mode-hook'."
+ "Inhibit `font-lock' while isearching - for use on `isearch-mode-hook'."
(if (and (allout-mode-p) (boundp 'font-lock-mode) font-lock-mode)
(setq isearch-was-font-locking t
font-lock-mode nil)))
@@ -2465,6 +2672,14 @@
(if prefix
(allout-get-prefix-bullet prefix)
(allout-get-bullet)))))
+;;;_ > allout-encrypted-type-prefix (&optional prefix)
+(defun allout-encrypted-type-prefix (&optional prefix)
+ "True if current header prefix bullet is for an encrypted entry \(body)."
+ (and allout-topic-encryption-bullet
+ (string= allout-topic-encryption-bullet
+ (if prefix
+ (allout-get-prefix-bullet prefix)
+ (allout-get-bullet)))))
;;;_ > allout-bullet-for-depth (&optional depth)
(defun allout-bullet-for-depth (&optional depth)
"Return outline topic bullet suited to optional DEPTH, or current depth."
@@ -2625,15 +2840,15 @@
((allout-sibling-index))))))
)
)
-;;;_ > allout-open-topic (relative-depth &optional before use-sib-bullet)
-(defun allout-open-topic (relative-depth &optional before use-sib-bullet)
- "Open a new topic at depth RELATIVE-DEPTH.
+;;;_ > allout-open-topic (relative-depth &optional before use_recent_bullet)
+(defun allout-open-topic (relative-depth &optional before use_recent_bullet)
+ "Open a new topic at depth DEPTH.
New topic is situated after current one, unless optional flag BEFORE
is non-nil, or unless current line is complete empty (not even
whitespace), in which case open is done on current line.
-If USE-SIB-BULLET is true, use the bullet of the prior sibling.
+If USE_RECENT_BULLET is true, offer to use the bullet of the prior sibling.
Nuances:
@@ -2660,9 +2875,11 @@
(let* ((depth (+ (allout-current-depth) relative-depth))
(opening-on-blank (if (looking-at "^\$")
(not (setq before nil))))
- opening-numbered ; Will get while computing ref-topic, below
- ref-depth ; Will get while computing ref-topic, below
- ref-bullet ; Will get while computing ref-topic, next
+ ;; bunch o vars set while computing ref-topic
+ opening-numbered
+ opening-encrypted
+ ref-depth
+ ref-bullet
(ref-topic (save-excursion
(cond ((< relative-depth 0)
(allout-ascend-to-depth depth))
@@ -2680,6 +2897,13 @@
(allout-descend-to-depth depth))
(if (allout-numbered-type-prefix)
allout-numbered-bullet))))
+ (setq opening-encrypted
+ (save-excursion
+ (and allout-topic-encryption-bullet
+ (or (<= relative-depth 0)
+ (allout-descend-to-depth depth))
+ (if (allout-numbered-type-prefix)
+ allout-numbered-bullet))))
(point)))
dbl-space
doing-beginning)
@@ -2718,19 +2942,24 @@
(if (not (bobp))
(allout-previous-heading)))
(if (and before (bobp))
- (allout-unprotected (open-line 1))))
+ (allout-unprotected (allout-open-line-not-read-only))))
(if (<= relative-depth 0)
;; Not going inwards, don't snug up:
(if doing-beginning
- (allout-unprotected (open-line (if dbl-space 2 1)))
+ (allout-unprotected
+ (if (not dbl-space)
+ (allout-open-line-not-read-only)
+ (allout-open-line-not-read-only)
+ (allout-open-line-not-read-only)))
(if before
(progn (end-of-line)
(allout-pre-next-preface)
(while (= ?\r (following-char))
(forward-char 1))
(if (not (looking-at "^$"))
- (allout-unprotected (open-line 1))))
+ (allout-unprotected
+ (allout-open-line-not-read-only))))
(allout-end-of-current-subtree)))
;; Going inwards - double-space if first offspring is,
;; otherwise snug up.
@@ -2748,38 +2977,47 @@
(progn (forward-line -1)
(looking-at "^\\s-*$"))))
(progn (forward-line 1)
- (allout-unprotected (open-line 1))))
+ (allout-unprotected
+ (allout-open-line-not-read-only))
+ (forward-line 1)))
(end-of-line))
;;(if doing-beginning (goto-char doing-beginning))
(if (not (bobp))
+ ;; We insert a newline char rather than using open-line to
+ ;; avoid rear-stickiness inheritence of read-only property.
(progn (if (and (not (> depth ref-depth))
(not before))
- (allout-unprotected (open-line 1))
+ (allout-unprotected
+ (allout-open-line-not-read-only))
(if (> depth ref-depth)
- (allout-unprotected (newline 1))
+ (allout-unprotected
+ (allout-open-line-not-read-only))
(if dbl-space
- (allout-unprotected (open-line 1))
+ (allout-unprotected
+ (allout-open-line-not-read-only))
(if (not before)
(allout-unprotected (newline 1))))))
(if dbl-space
- (allout-unprotected (newline 1)))
+ (allout-unprotected (newline 1)))
(if (and (not (eobp))
(not (bolp)))
(forward-char 1))))
))
(insert (concat (allout-make-topic-prefix opening-numbered
- t
- depth)
- " "))
+ t
+ depth)
+ " "))
;;(if doing-beginning (save-excursion (newline (if dbl-space 2 1))))
- (allout-rebullet-heading (and use-sib-bullet ref-bullet);;; solicit
+ (allout-rebullet-heading (and use_recent_bullet ;;; solicit
+ ref-bullet)
depth ;;; depth
nil ;;; number-control
nil ;;; index
- t) (end-of-line)
+ t)
+ (end-of-line)
)
)
;;;_ . open-topic contingencies
@@ -2795,6 +3033,13 @@
;;;_ ; buffer boundaries - special provisions for beginning and end ob
;;;_ ; level 1 topics have special provisions also - double space.
;;;_ ; location of new topic
+;;;_ > allout-open-line-not-read-only ()
+(defun allout-open-line-not-read-only ()
+ "Open line and remove inherited read-only text prop from new char, if any."
+ (open-line 1)
+ (if (plist-get (text-properties-at (point)) 'read-only)
+ (allout-unprotected
+ (remove-text-properties (point) (+ 1 (point)) '(read-only nil)))))
;;;_ > allout-open-subtopic (arg)
(defun allout-open-subtopic (arg)
"Open new topic header at deeper level than the current one.
@@ -2802,7 +3047,7 @@
Negative universal arg means to open deeper, but place the new topic
prior to the current one."
(interactive "p")
- (allout-open-topic 1 (> 0 arg)))
+ (allout-open-topic 1 (> 0 arg) (< 1 arg)))
;;;_ > allout-open-sibtopic (arg)
(defun allout-open-sibtopic (arg)
"Open new topic header at same level as the current one.
@@ -2812,7 +3057,7 @@
Negative universal arg means to place the new topic prior to the current
one."
(interactive "p")
- (allout-open-topic 0 (> 0 arg) (< 1 arg)))
+ (allout-open-topic 0 (> 0 arg) (not (= 1 arg))))
;;;_ > allout-open-supertopic (arg)
(defun allout-open-supertopic (arg)
"Open new topic header at shallower level than the current one.
@@ -2821,7 +3066,7 @@
topic prior to the current one."
(interactive "p")
- (allout-open-topic -1 (> 0 arg)))
+ (allout-open-topic -1 (> 0 arg) (< 1 arg)))
;;;_ - Outline Alteration
;;;_ : Topic Modification
@@ -2877,15 +3122,15 @@
(setq old-indent-begin (match-beginning 1)
old-indent-end (match-end 1))
(not (looking-at allout-regexp)))
- (if (> 0 (setq excess (- (current-column)
- old-margin)))
+ (if (> 0 (setq excess (- (- old-indent-end old-indent-begin)
+ old-margin)))
;; Text starts left of old margin - don't adjust:
nil
;; Text was hanging at or right of old left margin -
;; reindent it, preserving its existing indentation
;; beyond the old margin:
(delete-region old-indent-begin old-indent-end)
- (indent-to (+ new-margin excess)))))))))
+ (indent-to (+ new-margin excess (current-column))))))))))
;;;_ > allout-rebullet-current-heading (arg)
(defun allout-rebullet-current-heading (arg)
"Solicit new bullet for current visible heading."
@@ -2922,28 +3167,30 @@
"Adjust bullet of current topic prefix.
+All args are optional.
+
If SOLICIT is non-nil, then the choice of bullet is solicited from
user. If it's a character, then that character is offered as the
default, otherwise the one suited to the context \(according to
distinction or depth) is offered. If non-nil, then the
context-specific bullet is just used.
-Second arg NEW-DEPTH forces the topic prefix to that depth, regardless
+Second arg DEPTH forces the topic prefix to that depth, regardless
of the topic's current depth.
Third arg NUMBER-CONTROL can force the prefix to or away from
numbered form. It has effect only if `allout-numbered-bullet' is
non-nil and soliciting was not explicitly invoked (via first arg).
Its effect, numbering or denumbering, then depends on the setting
-of the fourth arg, INDEX.
+of the forth arg, INDEX.
-If NUMBER-CONTROL is non-nil and fourth arg INDEX is nil, then the
+If NUMBER-CONTROL is non-nil and forth arg INDEX is nil, then the
prefix of the topic is forced to be non-numbered. Null index and
non-nil NUMBER-CONTROL forces denumbering. Non-nil INDEX (and
non-nil NUMBER-CONTROL) forces a numbered-prefix form. If non-nil
INDEX is a number, then that number is used for the numbered
prefix. Non-nil and non-number means that the index for the
-numbered prefix will be derived by `allout-make-topic-prefix'.
+numbered prefix will be derived by allout-make-topic-prefix.
Fifth arg DO-SUCCESSORS t means re-resolve count on succeeding
siblings.
@@ -2986,9 +3233,10 @@
; Put in new prefix:
(allout-unprotected (insert new-prefix))
- ;; Reindent the body if elected and margin changed:
+ ;; Reindent the body if elected, margin changed, and not encrypted body:
(if (and allout-reindent-bodies
- (not (= new-depth current-depth)))
+ (not (= new-depth current-depth))
+ (not (allout-encrypted-topic-p)))
(allout-reindent-body current-depth new-depth))
;; Recursively rectify successive siblings of orig topic if
@@ -3010,7 +3258,7 @@
) ; defun
;;;_ > allout-rebullet-topic (arg)
(defun allout-rebullet-topic (arg)
- "Like `allout-rebullet-topic-grunt', but start from topic visible at point.
+ "Rebullet the visible topic containing point and all contained subtopics.
Descends into invisible as well as visible topics, however.
@@ -3036,18 +3284,18 @@
starting-point
index
do-successors)
+ "Like `allout-rebullet-topic', but on nearest containing topic
+\(visible or not).
- "Rebullet the topic at point, visible or invisible, and all
-contained subtopics. See `allout-rebullet-heading' for rebulleting
-behavior.
+See `allout-rebullet-heading' for rebulleting behavior.
-Arg RELATIVE-DEPTH means to shift the depth of the entire
-topic that amount.
+All arguments are optional.
-\(fn &optional RELATIVE-DEPTH)"
+First arg RELATIVE-DEPTH means to shift the depth of the entire
+topic that amount.
- ;; All args except the first one are for internal recursive use by the
- ;; function itself.
+The rest of the args are for internal recursive use by the function
+itself. The are STARTING-DEPTH, STARTING-POINT, and INDEX."
(let* ((relative-depth (or relative-depth 0))
(new-depth (allout-depth))
@@ -3177,13 +3425,42 @@
(setq more (allout-next-sibling depth nil))))))
;;;_ > allout-shift-in (arg)
(defun allout-shift-in (arg)
- "Increase depth of current heading and any topics collapsed within it."
+ "Increase depth of current heading and any topics collapsed within it.
+
+We disallow shifts that would result in the topic having a depth more than
+one level greater than the immediately previous topic, to avoid containment
+discontinuity. The first topic in the file can be adjusted to any positive
+depth, however."
(interactive "p")
+ (if (> arg 0)
+ (save-excursion
+ (allout-back-to-current-heading)
+ (if (not (bobp))
+ (let* ((current-depth (allout-recent-depth))
+ (start-point (point))
+ (predecessor-depth (progn
+ (forward-char -1)
+ (allout-goto-prefix)
+ (if (< (point) start-point)
+ (allout-recent-depth)
+ 0))))
+ (if (and (> predecessor-depth 0)
+ (> (+ current-depth arg)
+ (1+ predecessor-depth)))
+ (error (concat "May not shift deeper than offspring depth"
+ " of previous topic")))))))
(allout-rebullet-topic arg))
;;;_ > allout-shift-out (arg)
(defun allout-shift-out (arg)
- "Decrease depth of current heading and any topics collapsed within it."
+ "Decrease depth of current heading and any topics collapsed within it.
+
+We disallow shifts that would result in the topic having a depth more than
+one level greater than the immediately previous topic, to avoid containment
+discontinuity. The first topic in the file can be adjusted to any positive
+depth, however."
(interactive "p")
+ (if (< arg 0)
+ (allout-shift-in (* arg -1)))
(allout-rebullet-topic (* arg -1)))
;;;_ : Surgery (kill-ring) functions with special provisions for outlines:
;;;_ > allout-kill-line (&optional arg)
@@ -3191,24 +3468,56 @@
"Kill line, adjusting subsequent lines suitably for outline mode."
(interactive "*P")
- (if (not (and (allout-mode-p) ; active outline mode,
- allout-numbered-bullet ; numbers may need adjustment,
- (bolp) ; may be clipping topic head,
- (looking-at allout-regexp))) ; are clipping topic head.
- ;; Above conditions do not obtain - just do a regular kill:
- (kill-line arg)
- ;; Ah, have to watch out for adjustments:
- (let* ((depth (allout-depth)))
- ; Do the kill:
- (kill-line arg)
+
+ (let ((start-point (point))
+ (leading-kill-ring-entry (car kill-ring))
+ binding)
+
+ (condition-case err
+
+ (if (not (and (allout-mode-p) ; active outline mode,
+ allout-numbered-bullet ; numbers may need adjustment,
+ (bolp) ; may be clipping topic head,
+ (looking-at allout-regexp))) ; are clipping topic head.
+ ;; Above conditions do not obtain - just do a regular kill:
+ (kill-line arg)
+ ;; Ah, have to watch out for adjustments:
+ (let* ((depth (allout-depth))
+ (start-point (point))
+ binding)
+ ; Do the kill, presenting option
+ ; for read-only text:
+ (kill-line arg)
; Provide some feedback:
- (sit-for 0)
- (save-excursion
+ (sit-for 0)
+ (save-excursion
; Start with the topic
; following killed line:
- (if (not (looking-at allout-regexp))
- (allout-next-heading))
- (allout-renumber-to-depth depth)))))
+ (if (not (looking-at allout-regexp))
+ (allout-next-heading))
+ (allout-renumber-to-depth depth))))
+ ;; condition case handler:
+ (text-read-only
+ (goto-char start-point)
+ (setq binding (where-is-internal 'allout-kill-topic nil t))
+ (cond ((not binding) (setq binding ""))
+ ((arrayp binding)
+ (setq binding (mapconcat 'key-description (list binding) ", ")))
+ (t (setq binding (format "%s" binding))))
+ ;; ensure prior kill-ring leader is properly restored:
+ (if (eq leading-kill-ring-entry (cadr kill-ring))
+ ;; Aborted kill got pushed on front - ditch it:
+ (pop kill-ring)
+ ;; Aborted kill got appended to prior - resurrect prior:
+ (setcar kill-ring leading-kill-ring-entry))
+ ;; make last-command skip this failed command, so kill-appending
+ ;; conditions track:
+ (setq this-command last-command)
+ (error (concat "read-only text hit - use %s allout-kill-topic to"
+ " discard collapsed stuff")
+ binding)))
+ )
+ )
;;;_ > allout-kill-topic ()
(defun allout-kill-topic ()
"Kill topic together with subtopics.
@@ -3236,14 +3545,14 @@
(>= (allout-recent-depth) depth))))
(forward-char 1)))
- (kill-region beg (point))
+ (allout-unprotected (kill-region beg (point)))
(sit-for 0)
(save-excursion
(allout-renumber-to-depth depth))))
;;;_ > allout-yank-processing ()
(defun allout-yank-processing (&optional arg)
- "Incidental outline specific business to be done just after text yanks.
+ "Incidental outline-specific business to be done just after text yanks.
Does depth adjustment of yanked topics, when:
@@ -3259,7 +3568,7 @@
The point is left in front of yanked, adjusted topics, rather than
at the end (and vice-versa with the mark). Non-adjusted yanks,
-however, are left exactly like normal, not outline specific yanks."
+however, are left exactly like normal, non-allout-specific yanks."
(interactive "*P")
; Get to beginning, leaving
@@ -3463,6 +3772,60 @@
;;;_ #6 Exposure Control
;;;_ - Fundamental
+;;;_ > allout-flag-region (from to flag)
+(defun allout-flag-region (from to flag)
+ "Hide or show lines from FROM to TO, via Emacs selective-display FLAG char.
+Ie, text following flag C-m \(carriage-return) is hidden until the
+next C-j (newline) char.
+
+Returns the endpoint of the region."
+ ;; "OFR-" prefixes to avoid collisions with vars in code calling the macro.
+ ;; ie, elisp macro vars are not 'hygenic', so distinct names are necessary.
+ (let ((was-inhibit-r-o inhibit-read-only)
+ (was-undo-list buffer-undo-list)
+ (was-modified (buffer-modified-p))
+ trans)
+ (unwind-protect
+ (save-excursion
+ (setq inhibit-read-only t)
+ (setq buffer-undo-list t)
+ (if (> from to)
+ (setq trans from from to to trans))
+ (subst-char-in-region from to
+ (if (= flag ?\n) ?\r ?\n)
+ flag t)
+ ;; adjust character read-protection on all the affected lines.
+ ;; we handle the region line-by-line.
+ (goto-char to)
+ (end-of-line)
+ (setq to (min (+ 2 (point)) (point-max)))
+ (goto-char from)
+ (beginning-of-line)
+ (while (< (point) to)
+ ;; handle from start of exposed to beginning of hidden, or eol:
+ (remove-text-properties (point)
+ (progn (if (re-search-forward "[\r\n]"
+ nil t)
+ (forward-char -1))
+ (point))
+ '(read-only nil))
+ ;; handle from start of hidden, if any, to eol:
+ (if (and (not (eobp)) (= (char-after (point)) ?\r))
+ (put-text-property (point) (progn (end-of-line) (point))
+ 'read-only t))
+ ;; Handle the end-of-line to beginning of next line:
+ (if (not (eobp))
+ (progn (forward-char 1)
+ (remove-text-properties (1- (point)) (point)
+ '(read-only nil)))))
+ )
+ (if (not was-modified)
+ (set-buffer-modified-p nil))
+ (setq inhibit-read-only was-inhibit-r-o)
+ (setq buffer-undo-list was-undo-list)
+ )
+ )
+ )
;;;_ > allout-flag-current-subtree (flag)
(defun allout-flag-current-subtree (flag)
"Hide or show subtree of currently-visible topic.
@@ -3471,9 +3834,9 @@
(save-excursion
(allout-back-to-current-heading)
- (allout-flag-region (point)
- (progn (allout-end-of-current-subtree) (1- (point)))
- flag)))
+ (let ((from (point))
+ (to (progn (allout-end-of-current-subtree) (1- (point)))))
+ (allout-flag-region from to flag))))
;;;_ - Topic-specific
;;;_ > allout-show-entry ()
@@ -3482,7 +3845,7 @@
This is a way to give restricted peek at a concealed locality without the
expense of exposing its context, but can leave the outline with aberrant
-exposure. `allout-hide-current-entry-completely' or `allout-show-to-offshoot'
+exposure. `allout-hide-current-entry-completely' or `allout-show-offshoot'
should be used after the peek to rectify the exposure."
(interactive)
@@ -3602,7 +3965,7 @@
(allout-back-to-current-heading)
(save-excursion
(allout-flag-region (point)
- (progn (allout-end-of-current-entry) (point))
+ (progn (allout-end-of-entry) (point))
?\r)))
;;;_ > allout-show-current-entry (&optional arg)
(defun allout-show-current-entry (&optional arg)
@@ -3614,8 +3977,9 @@
(allout-hide-current-entry)
(save-excursion
(allout-flag-region (point)
- (progn (allout-end-of-current-entry) (point))
- ?\n))))
+ (progn (allout-end-of-entry) (point))
+ ?\n)
+ )))
;;;_ > allout-hide-current-entry-completely ()
; ... allout-hide-current-entry-completely also for isearch dynamic exposure:
(defun allout-hide-current-entry-completely ()
@@ -3846,7 +4210,11 @@
max-pos)))
;;;_ > allout-old-expose-topic (spec &rest followers)
(defun allout-old-expose-topic (spec &rest followers)
- "Dictate wholesale exposure scheme for current topic, according to SPEC.
+
+ "Deprecated. Use `allout-expose-topic' \(with different schema
+format) instead.
+
+Dictate wholesale exposure scheme for current topic, according to SPEC.
SPEC is either a number or a list. Optional successive args
dictate exposure for subsequent siblings of current topic.
@@ -3918,9 +4286,6 @@
(allout-old-expose-topic (car followers))
(setq followers (cdr followers)))
max-pos))
-(make-obsolete 'allout-old-expose-topic
- "use `allout-expose-topic' (with different schema format) instead."
- "19.23")
;;;_ > allout-new-exposure '()
(defmacro allout-new-exposure (&rest spec)
"Literal frontend for `allout-expose-topic', doesn't evaluate arguments.
@@ -3929,6 +4294,8 @@
Cursor is left at start position.
+Use this instead of obsolete `allout-exposure'.
+
Examples:
\(allout-new-exposure (-1 () () () 1) 0)
Close current topic at current level so only the immediate
@@ -4151,13 +4518,20 @@
(cdr format)))))))
;; Put the list with first at front, to last at back:
(nreverse result))))
+;;;_ > my-region-active-p ()
+(defmacro my-region-active-p ()
+ (if (fboundp 'region-active-p)
+ '(region-active-p)
+ 'mark-active))
;;;_ > allout-process-exposed (&optional func from to frombuf
;;; tobuf format)
(defun allout-process-exposed (&optional func from to frombuf tobuf
- format start-num)
+ format &optional start-num)
"Map function on exposed parts of current topic; results to another buffer.
-Apply FUNC to exposed portions FROM position TO position in buffer
+All args are options; default values itemized below.
+
+Apply FUNCTION to exposed portions FROM position TO position in buffer
FROMBUF to buffer TOBUF. Sixth optional arg, FORMAT, designates an
alternate presentation form:
@@ -4170,7 +4544,7 @@
except for distinctive bullets.
Defaults:
- FUNC: `allout-insert-listified'
+ FUNCTION: `allout-insert-listified'
FROM: region start, if region active, else start of buffer
TO: region end, if region active, else end of buffer
FROMBUF: current buffer
@@ -4219,9 +4593,7 @@
\`(depth prefix text)'
-or
-
- \`(depth prefix text bullet-plus)'
+or \`(depth prefix text bullet-plus)'
If `bullet-plus' is specified, it is inserted just after the entire prefix."
(setq listified (cdr listified))
@@ -4237,7 +4609,7 @@
(while text
(insert (car text))
(if (setq text (cdr text))
- (insert "\n")))
+ (insert-string "\n")))
(insert "\n")))
;;;_ > allout-copy-exposed-to-buffer (&optional arg tobuf format)
(defun allout-copy-exposed-to-buffer (&optional arg tobuf format)
@@ -4440,14 +4812,14 @@
body-content bop)
; Do the head line:
(insert (concat "\\OneHeadLine{\\verb\1 "
- (allout-latex-verb-quote bullet)
- "\1}{"
- depth
- "}{\\verb\1 "
- (if head-line
- (allout-latex-verb-quote head-line)
- "")
- "\1}\n"))
+ (allout-latex-verb-quote bullet)
+ "\1}{"
+ depth
+ "}{\\verb\1 "
+ (if head-line
+ (allout-latex-verb-quote head-line)
+ "")
+ "\1}\n"))
(if (not body-lines)
nil
;;(insert "\\beginlines\n")
@@ -4509,7 +4881,615 @@
(pop-to-buffer buf)
(goto-char start-pt)))
-;;;_ #8 miscellaneous
+;;;_ #8 Encryption
+;;;_ > allout-toggle-current-subtree-encryption (&optional fetch-key)
+(defun allout-toggle-current-subtree-encryption (&optional fetch-key)
+ "Encrypt clear text or decrypt encoded contents of a topic.
+
+Contents includes body and subtopics.
+
+Currently only GnuPG encryption is supported.
+
+\**NOTE WELL** that the encrypted text must be ascii-armored. For gnupg
+encryption, include the option ``armor'' in your ~/.gnupg/gpg.conf file.
+
+Both symmetric-key and key-pair encryption is implemented. Symmetric is
+the default, use a single \(x4) universal argument for keypair mode.
+
+Encrypted topic's bullet is set to a `~' to signal that the contents of the
+topic \(body and subtopics, but not heading) is pending encryption or
+encrypted. An `*' asterisk immediately after the bullet signals that the
+body is encrypted, its absence means it's meant to be encrypted but is not
+- it's \"disclosed\". When a file with disclosed topics is saved, the user
+prompted for an ok to \(symmetric-key) encrypt the disclosed topics. NOTE
+WELL that you must explicitly \(re)encrypt key-pair encrypted topics if you
+want them to continue to be in key-pair mode.
+
+Level-1 topics, with prefix consisting solely of an `*' asterisk, cannot be
+encrypted. If you want to encrypt the contents of a top-level topic, use
+\\[allout-shift-in] to increase its depth.
+
+Failed transformation does not change the an entry being encrypted -
+instead, the key is re-solicited and the transformation is retried.
+\\[keyboard-quit] to abort.
+
+Decryption does symmetric or key-pair key mode depending on how the text
+was encrypted. The encryption key is solicited if not currently available
+from the key cache from a recent prior encryption action.
+
+Optional FETCH-KEY universal argument is used for two purposes - to provoke
+key-pair instead of symmetric encryption, or to provoke clearing of the key
+cache so keys are freshly fetched.
+
+ - Without any universal arguments, then the appropriate key for the is
+ obtained from the cache, if available, else from the user.
+
+ - If FETCH-KEY is the result of one universal argument - ie, equal to 4 -
+ then key-pair encryption is used.
+
+ - With repeated universal argument - equal to 16 - then the key cache is
+ cleared before any encryption transformations, to force prompting of the
+ user for the key.
+
+The solicited key is retained for reuse in a buffer-specific cache for some
+set period of time \(default, 60 seconds), after which the string is
+nulled. `mailcrypt' provides the key caching functionality. You can
+adjust the key cache timeout by ajdusting the setting of the elisp variable
+`mc-passwd-timeout'.
+
+If the file previously had no associated key, or had a different key than
+specified, the user is prompted to repeat the new one for corroboration. A
+random string encrypted by the new key is set on the buffer-specific
+variable `allout-key-verifier-string', for confirmation of the key when
+next obtained, before encrypting or decrypting anything with it. This
+helps avoid mistakenly shifting between keys.
+
+If allout customization var `allout-key-verifier-handling' is non-nil, an
+entry for `allout-key-verifier-string' and its value is added to an Emacs
+'local variables' section at the end of the file, which is created if
+necessary. That setting is for retention of the key verifier across emacs
+sessions.
+
+Similarly, `allout-key-hint-string' stores a user-provided reminder about
+their key, and `allout-key-hint-handling' specifies when the hint is
+presented, or if key hints are disabled. If enabled \(see the
+`allout-key-hint-handling' docstring for details), the hint string is
+stored in the local-variables section of the file, and solicited whenever
+the key is changed."
+
+;;; This routine handles allout-specific business, dispatching
+;;; encryption-specific business to allout-encrypt-string.
+
+ (interactive "P")
+ (save-excursion
+ (allout-end-of-prefix t)
+
+ (if (= (allout-recent-depth) 1)
+ (error (concat "Cannot encrypt or decrypt level 1 topics -"
+ " shift it in to make it encryptable")))
+
+ (if (and fetch-key
+ (not (equal fetch-key '(4))))
+ (mc-deactivate-passwd))
+
+ (let* ((allout-buffer (current-buffer))
+ ;; Asses location:
+ (after-bullet-pos (point))
+ (was-encrypted
+ (progn (if (= (point-max) after-bullet-pos)
+ (error "no body to encrypt"))
+ (looking-at "\\*")))
+ (was-collapsed (if (not (re-search-forward "[\n\r]" nil t))
+ nil
+ (backward-char 1)
+ (looking-at "\r")))
+ (subtree-beg (1+ (point)))
+ (subtree-end (allout-end-of-subtree))
+ (subject-text (buffer-substring-no-properties subtree-beg
+ subtree-end))
+ (subtree-end-char (char-after (1- subtree-end)))
+ (subtree-trailling-char (char-after subtree-end))
+ (place-holder (if (or (string= "" subject-text)
+ (string= "\n" subject-text))
+ (error "No topic contents to %scrypt"
+ (if was-encrypted "de" "en"))))
+ ;; Assess key parameters:
+ (key-type (or
+ ;; detect the type by which it is already encrypted
+ (and was-encrypted
+ (allout-encrypted-text-type subject-text))
+ (and (member fetch-key '(4 (4)))
+ (yes-or-no-p "Use key-pair encryption instead? ")
+ 'keypair)
+ 'symmetric))
+ (fetch-key (and fetch-key (not (member fetch-key '(16 (16))))))
+ result-text)
+
+ (setq result-text
+ (allout-encrypt-string subject-text was-encrypted
+ (current-buffer) key-type fetch-key))
+
+ ;; Replace the subtree with the processed product.
+ (allout-unprotected
+ (progn
+ (set-buffer allout-buffer)
+ (delete-region subtree-beg subtree-end)
+ (insert result-text)
+ (if was-collapsed
+ (allout-flag-region subtree-beg (1- (point)) ?\r))
+ ;; adjust trailling-blank-lines to preserve topic spacing:
+ (if (not was-encrypted)
+ (if (and (member subtree-end-char '(?\r ?\n))
+ (member subtree-trailling-char '(?\r ?\n)))
+ (insert subtree-trailling-char)))
+ ;; Ensure that the item has an encrypted-entry bullet:
+ (if (not (string= (buffer-substring-no-properties
+ (1- after-bullet-pos) after-bullet-pos)
+ allout-topic-encryption-bullet))
+ (progn (goto-char (1- after-bullet-pos))
+ (delete-char 1)
+ (insert allout-topic-encryption-bullet)))
+ (if was-encrypted
+ ;; Remove the is-encrypted bullet qualifier:
+ (progn (goto-char after-bullet-pos)
+ (delete-char 1))
+ ;; Add the is-encrypted bullet qualifier:
+ (goto-char after-bullet-pos)
+ (insert "*"))
+ )
+ )
+ )
+ )
+ )
+;;;_ > allout-encrypt-string (text decrypt allout-buffer key-type rekey
+;;; &optional retried verifying)
+(defun allout-encrypt-string (text decrypt allout-buffer key-type rekey
+ &optional retried verifying)
+ "Encrypt or decrypt a string TEXT using KEY.
+
+If optional DECRYPT is true (default false), then decrypt instead of
+encrypt.
+
+Optional REKEY (default false) provokes clearing of the key cache to force
+fresh prompting for the key.
+
+Optional RETRIED is for internal use - conveys the number of failed keys have
+been solicited in sequence leading to this current call.
+
+Optional VERIFYING is for internal use, signifying processing of text
+solely for verification of the cached key.
+
+Returns the resulting string, or nil if the transformation fails."
+
+ ;; Ensure that we have an alternate handle on the real mc-activate-passwd:
+ (if (not (fboundp 'real-mc-activate-passwd))
+ ;; Force loads of the primary mailcrypt packages, so flet below holds.
+ (progn (require 'mailcrypt)
+ (load "mc-toplev")
+ (fset 'real-mc-activate-passwd
+ (symbol-function 'mc-activate-passwd))))
+
+ (if (and rekey (not verifying)) (mc-deactivate-passwd))
+
+ (catch 'encryption-failed
+ (save-excursion
+
+ (let* ((mc-default-scheme (or allout-encryption-scheme
+ allout-default-encryption-scheme))
+ (id (format "%s-%s" key-type
+ (or (buffer-file-name allout-buffer)
+ (buffer-name allout-buffer))))
+ (cached (real-mc-activate-passwd id nil))
+ (comment "Processed by allout driving mailcrypt")
+ key work-buffer result result-text encryption-process-status)
+
+ (unwind-protect
+
+ ;; Interject our mc-activate-passwd wrapper:
+ (flet ((mc-activate-passwd (id &optional prompt)
+ (allout-mc-activate-passwd id prompt)))
+
+ (setq work-buffer
+ (set-buffer (allout-encryption-produce-work-buffer text)))
+
+ (cond
+
+ ;; symmetric:
+ ((equal key-type 'symmetric)
+ (setq key (if verifying
+ (real-mc-activate-passwd id nil)
+ (allout-mc-activate-passwd id)))
+ (setq encryption-process-status
+ (crypt-encrypt-buffer key decrypt))
+ (if (zerop encryption-process-status)
+ t
+ (if verifying
+ (throw 'encryption-failed nil)
+ (mc-deactivate-passwd)
+ (error "Symmetric-key encryption failed (%s) - wrong key?"
+ encryption-process-status))))
+
+ ;; encrypt 'keypair:
+ ((not decrypt)
+ (condition-case result
+ (mailcrypt-encrypt 1)
+ (error (mc-deactivate-passwd)
+ (error "encryption failed: %s"
+ (cadr result)))))
+
+ ;; decrypt 'keypair:
+ (t (condition-case result
+ (mc-decrypt)
+ (error (mc-deactivate-passwd)
+ (error "decryption failed: %s"
+ (cadr result))))))
+
+ (setq result-text (if (or (equal key-type 'keypair)
+ (not decrypt))
+ (buffer-substring 1 (1- (point-max)))
+ (buffer-string)))
+ ;; validate result - non-empty
+ (cond ((not result-text)
+ (if verifying
+ nil
+ ;; Transformation was fruitless - retry with new key.
+ (mc-deactivate-passwd)
+ (allout-encrypt-string text allout-buffer decrypt nil
+ (if retried (1+ retried) 1)
+ verifying)))
+
+ ;; Barf if encryption yields extraordinary control chars:
+ ((and (not decrypt)
+ (string-match "[\C-a\C-k\C-o-\C-z\C-@]" result-text))
+ (error (concat "encryption produced unusable"
+ " non-armored text - reconfigure!")))
+
+ ;; valid result and just verifying or non-symmetric:
+ ((or verifying (not (equal key-type 'symmetric)))
+ result-text)
+
+ ;; valid result and regular symmetric - situate validator:
+ (t
+ ;; valid result and verifier needs to be situated in
+ ;; allout-buffer:
+ (set-buffer allout-buffer)
+ (if (and (or rekey (not cached))
+ (not (allout-verify-key key allout-buffer)))
+ (allout-situate-encryption-key-verifier key id))
+ result-text)
+ )
+ )
+
+ ;; unwind-protect emergence:
+ (if work-buffer
+ (kill-buffer work-buffer))
+ )
+ )
+ )
+ )
+ )
+;;;_ > allout-mc-activate-passwd (id &optional prompt)
+(defun allout-mc-activate-passwd (id &optional prompt)
+ "Substituted for mc-activate-passwd during allout outline encryption.
+
+We add key-verification to vanilla mc-activate-passwd.
+
+We depend in some cases on values of the following allout-encrypt-string
+internal or prevailing variables:
+ - key-type - 'symmetric or 'keypair
+ - id - id associated with current key in key cache
+ - allout-buffer - where subject text resides
+ - retried - number of current attempts to obtain this key
+ - rekey - user asked to present a new key - needs to be confirmed"
+
+;; - if we're doing non-symmetric key, just do normal mc-activate-passwd
+;; - otherwise, if we are have a cached version of the key, then assume
+;; it's verified and return it
+;; - otherwise, prompt for a key, and:
+;; - if we have a key verifier \(a string value which should decrypt
+;; against a symmetric key), validate against the verifier
+;; - if successful, return the verified key
+;; - if unsuccessful:
+;; - offer to use the new key
+;; - if accepted, do confirm process
+;; - if refused, try again until we get a correctly spelled one or the
+;; user quits
+;; - if no key verifier, resolicit the key to get corroboration and return
+;; the corroborated key if spelled identically, or error if not.
+
+ (if (not (equal key-type 'symmetric))
+ ;; do regular mc-activate-passwd on non-symmetric key
+ (real-mc-activate-passwd id prompt)
+
+ ;; Symmetric hereon:
+
+ (save-excursion
+ (set-buffer allout-buffer)
+ (let* ((hint (if (and (not (string= allout-key-hint-string ""))
+ (or (equal allout-key-hint-handling 'always)
+ (and (equal allout-key-hint-handling 'needed)
+ retried)))
+ (format " [%s]" allout-key-hint-string)
+ ""))
+ (retry-message (if retried (format " (%s retry)" retried) ""))
+ (prompt-sans-hint (format "'%s' symmetric key%s: "
+ (buffer-name allout-buffer)
+ retry-message))
+ (full-prompt (format "'%s' symmetric key%s%s: "
+ (buffer-name allout-buffer)
+ hint retry-message))
+ (prompt full-prompt)
+ (verifier-string (allout-get-encryption-key-verifier))
+ ;; force retention of cached passwords for five minutes while
+ ;; we're in this particular routine:
+ (mc-passwd-timeout 300)
+ (cached (real-mc-activate-passwd id nil))
+ (got (or cached (real-mc-activate-passwd id full-prompt)))
+ confirmation)
+
+ (if (not got)
+ nil
+
+ ;; Duplicate our handle on the key so it's not clobbered by
+ ;; deactivate-passwd memory clearing:
+ (setq got (format "%s" got))
+
+ (cond (verifier-string
+ (if (and (not (allout-encrypt-string
+ verifier-string 'decrypt allout-buffer
+ 'symmetric nil 0 'verifying))
+ (if (yes-or-no-p
+ (concat "Key differs from established"
+ " - use new one instead? "))
+ ;; deactivate password for subsequent
+ ;; confirmation:
+ (progn (mc-deactivate-passwd)
+ (setq prompt prompt-sans-hint)
+ nil)
+ t))
+ (progn (mc-deactivate-passwd)
+ (error "Wrong key."))))
+ ;; Force confirmation by repetition for new key:
+ ((or rekey (not cached)) (mc-deactivate-passwd))))
+ ;; we have a key and it's either verified and cached.
+ ;; confirmation vs new input - doing mc-activate-passwd will do the
+ ;; right thing, in either case:
+ (setq confirmation
+ (real-mc-activate-passwd id (concat prompt
+ " ... confirm spelling: ")))
+ (prog1
+ (if (equal got confirmation)
+ confirmation
+ (if (yes-or-no-p (concat "spelling of original and"
+ " confirmation differ - retry? "))
+ (progn (setq retried (if retried (1+ retried) 1))
+ (mc-deactivate-passwd)
+ ;; recurse to this routine:
+ (mc-activate-passwd id prompt-sans-hint))
+ (mc-deactivate-passwd)
+ (error "Confirmation failed.")))
+ ;; reduce opportunity for memory cherry-picking by zeroing duplicate:
+ (dotimes (i (length got))
+ (aset got i 0))
+ )
+ )
+ )
+ )
+ )
+;;;_ > allout-encryption-produce-work-buffer (text)
+(defun allout-encryption-produce-work-buffer (text)
+ "Establish a new buffer filled with TEXT, for outline encrypion processing.
+
+TEXT is massaged so outline collapsing, if any, is removed."
+ (let ((work-buffer (generate-new-buffer " *allout encryption*")))
+ (save-excursion
+ (set-buffer work-buffer)
+ (insert (subst-char-in-string ?\r ?\n text)))
+ work-buffer))
+;;;_ > allout-encrypted-topic-p ()
+(defun allout-encrypted-topic-p ()
+ "True if the current topic is encryptable and encrypted."
+ (save-excursion
+ (allout-end-of-prefix t)
+ (and (string= (buffer-substring-no-properties (1- (point)) (point))
+ allout-topic-encryption-bullet)
+ (looking-at "\\*"))
+ )
+ )
+;;;_ > allout-encrypted-text-type (text)
+;;; XXX gpg-specific, not generic!
+(defun allout-encrypted-text-type (text)
+ "For gpg encrypted text, return 'symmetric or 'keypair."
+
+ ;; Ensure mc-gpg-path has a value:
+ (if (not (boundp 'mc-gpg-path))
+ (load-library "mc-gpg"))
+
+ (save-excursion
+ (let* ((work-buffer (set-buffer
+ (allout-encryption-produce-work-buffer text)))
+ (result (mc-gpg-process-region (point-min) (point-max)
+ nil mc-gpg-path
+ '("--batch" "--decrypt")
+ 'mc-gpg-decrypt-parser
+ work-buffer nil)))
+ (cond ((equal (nth 0 result) 'symmetric)
+ 'symmetric)
+ ((equal (nth 0 result) t)
+ 'keypair)
+ (t (error "Unrecognized/unsupported encryption type %S"
+ (nth 0 result))))
+ )
+ )
+ )
+;;;_ > allout-create-encryption-key-verifier (key id)
+(defun allout-create-encryption-key-verifier (key id)
+ "Encrypt a random message for later validation of symmetric key."
+ ;; use 20 random ascii characters, across the entire ascii range.
+ (random t)
+ (let ((spew (make-string 20 ?\0)))
+ (dotimes (i (length spew))
+ (aset spew i (1+ (random 254))))
+ (allout-encrypt-string spew nil nil 'symmetric nil nil t))
+ )
+;;;_ > allout-situate-encryption-key-verifier (key id)
+(defun allout-situate-encryption-key-verifier (key id)
+ "Establish key verifier string on file variable.
+
+We also prompt for and situate a new reminder, if reminders are enabled.
+
+We massage the string to simplify programmatic adjustment. File variable
+is `allout-file-key-verifier-string'."
+ (let ((verifier-string
+ ;; Collapse to a single line and enclose in string quotes:
+ (subst-char-in-string ?\n ?\C-a
+ (allout-create-encryption-key-verifier
+ key id)))
+ (reminder (if (not (equal allout-key-hint-handling 'disabled))
+ (read-from-minibuffer
+ "Key hint to jog your memory next time: "
+ allout-key-hint-string))))
+ (setq allout-key-verifier-string verifier-string)
+ (allout-adjust-file-variable "allout-key-verifier-string"
+ verifier-string)
+ (cond ((equal allout-key-hint-handling 'disabled)
+ nil)
+ ((not (string= reminder allout-key-hint-string))
+ (setq allout-key-hint-string reminder)
+ (allout-adjust-file-variable "allout-key-hint-string"
+ reminder)))
+ )
+ )
+;;;_ > allout-get-encryption-key-verifier ()
+(defun allout-get-encryption-key-verifier ()
+ "Return the text of the encrypt key verifier, unmassaged, or nil if none.
+
+Derived from value of `allout-file-key-verifier-string'."
+
+ (let ((verifier-string (and (boundp 'allout-key-verifier-string)
+ allout-key-verifier-string)))
+ (if verifier-string
+ ;; Return it uncollapsed
+ (subst-char-in-string ?\C-a ?\n verifier-string)
+ nil)
+ )
+ )
+;;;_ > allout-verify-key (key)
+(defun allout-verify-key (key allout-buffer)
+ "True if key successfully decrypts key verifier, nil otherwise.
+
+\"Otherwise\" includes absence of key verifier."
+ (save-excursion
+ (set-buffer allout-buffer)
+ (and (boundp 'allout-key-verifier-string)
+ allout-key-verifier-string
+ (allout-encrypt-string (allout-get-encryption-key-verifier)
+ 'decrypt allout-buffer 'symmetric
+ nil nil 'verifying)
+ t)))
+;;;_ > allout-next-topic-pending-encryption (&optional except-mark)
+(defun allout-next-topic-pending-encryption (&optional except-mark)
+ "Return the point of the next topic pending encryption, or nil if none.
+
+EXCEPT-MARK identifies a point whose containing topics should be excluded
+from encryption. This supports 'except-current mode of
+`allout-encrypt-unencrypted-on-saves'.
+
+Such a topic has the allout-topic-encryption-bullet without an
+immediately following '*' that would mark the topic as being encrypted. It
+must also have content."
+ (let (done got content-beg)
+ (while (not done)
+
+ (if (not (re-search-forward
+ (format "\\(\\`\\|[\n\r]\\)%s *%s[^*]"
+ (regexp-quote allout-header-prefix)
+ (regexp-quote allout-topic-encryption-bullet))
+ nil t))
+ (setq got nil
+ done t)
+ (goto-char (setq got (match-beginning 0)))
+ (if (looking-at "[\n\r]")
+ (forward-char 1))
+ (setq got (point)))
+
+ (cond ((not got)
+ (setq done t))
+
+ ((not (re-search-forward "[\n\r]"))
+ (setq got nil
+ done t))
+
+ ((eobp)
+ (setq got nil
+ done t))
+
+ (t
+ (setq content-beg (point))
+ (backward-char 1)
+ (allout-end-of-subtree)
+ (if (or (<= (point) content-beg)
+ (and except-mark
+ (<= content-beg except-mark)
+ (>= (point) except-mark)))
+ ;; Continue looking
+ (setq got nil)
+ ;; Got it!
+ (setq done t)))
+ )
+ )
+ (if got
+ (goto-char got))
+ )
+ )
+;;;_ > allout-encrypt-decrypted (&optional except-mark)
+(defun allout-encrypt-decrypted (&optional except-mark)
+ "Encrypt topics pending encryption except those containing exemption point.
+
+EXCEPT-MARK identifies a point whose containing topics should be excluded
+from encryption. This supports 'except-current mode of
+`allout-encrypt-unencrypted-on-saves'.
+
+If a topic that is currently being edited was encrypted, we return a list
+containing the location of the topic and the location of the cursor just
+before the topic was encrypted. This can be used, eg, to decrypt the topic
+and exactly resituate the cursor if this is being done as part of a file
+save. See `allout-encrypt-unencrypted-on-saves' for more info."
+
+ (interactive "p")
+ (save-excursion
+ (let ((current-mark (point-marker))
+ was-modified
+ bo-subtree
+ editing-topic editing-point)
+ (goto-char (point-min))
+ (while (allout-next-topic-pending-encryption except-mark)
+ (setq was-modified (buffer-modified-p))
+ (if (save-excursion
+ (and (boundp 'allout-encrypt-unencrypted-on-saves)
+ allout-encrypt-unencrypted-on-saves
+ (setq bo-subtree (re-search-forward "[\n\r]"))
+ ;; Not collapsed:
+ (string= (match-string 0) "\n")
+ (>= current-mark (point))
+ (allout-end-of-current-subtree)
+ (<= current-mark (point))))
+ (setq editing-topic (point)
+ ;; we had to wait for this 'til now so prior topics are
+ ;; encrypted, any relevant text shifts are in place:
+ editing-point (marker-position current-mark)))
+ (allout-toggle-current-subtree-encryption)
+ (if (not was-modified)
+ (set-buffer-modified-p nil))
+ )
+ (if (not was-modified)
+ (set-buffer-modified-p nil))
+ (if editing-topic (list editing-topic editing-point))
+ )
+ )
+ )
+
+;;;_ #9 miscellaneous
;;;_ > allout-mark-topic ()
(defun allout-mark-topic ()
"Put the region around topic currently containing point."
@@ -4538,22 +5518,100 @@
t
(allout-open-topic 2)
(insert (concat "Dummy outline topic header - see"
- "`allout-mode' docstring: `^Hm'."))
- (forward-line 1)
+ "`allout-mode' docstring: `^Hm'."))
+ (allout-adjust-file-variable
+ "allout-layout" (format "%s" (or allout-layout '(-1 : 0)))))))
+;;;_ > allout-file-vars-section-data ()
+(defun allout-file-vars-section-data ()
+ "Return data identifying the file-vars section, or nil if none.
+
+Returns list `(beginning-point prefix-string suffix-string)'."
+ ;; minimally gleaned from emacs 21.4 files.el hack-local-variables function.
+ (let (beg prefix suffix)
+ (save-excursion
(goto-char (point-max))
- (open-line 1)
- (allout-open-topic 0)
- (insert "Local emacs vars.\n")
- (allout-open-topic 1)
- (insert "(`allout-layout' is for allout.el allout-mode)\n")
- (allout-open-topic 0)
- (insert "Local variables:\n")
- (allout-open-topic 0)
- (insert (format "allout-layout: %s\n"
- (or allout-layout
- '(-1 : 0))))
- (allout-open-topic 0)
- (insert "End:\n"))))
+ (search-backward "\n\^L" (max (- (point-max) 3000) (point-min)) 'move)
+ (if (let ((case-fold-search t))
+ (not (search-forward "Local Variables:" nil t)))
+ nil
+ (setq beg (- (point) 16))
+ (setq suffix (buffer-substring-no-properties
+ (point)
+ (progn (if (re-search-forward "[\n\r]" nil t)
+ (forward-char -1))
+ (point))))
+ (setq prefix (buffer-substring-no-properties
+ (progn (if (re-search-backward "[\n\r]" nil t)
+ (forward-char 1))
+ (point))
+ beg))
+ (list beg prefix suffix))
+ )
+ )
+ )
+;;;_ > allout-adjust-file-variable (varname value)
+(defun allout-adjust-file-variable (varname value)
+ "Adjust the setting of an emacs file variable named VARNAME to VALUE.
+
+This activity is inhibited if either `enable-local-variables'
+`allout-enable-file-variable-adjustment' are nil.
+
+When enabled, an entry for the variable is created if not already present,
+or changed if established with a different value. The section for the file
+variables, itself, is created if not already present. When created, the
+section lines \(including the section line) exist as second-level topics in
+a top-level topic at the end of the file.
+
+enable-local-variables must be true for any of this to happen."
+ (if (not (and enable-local-variables
+ allout-enable-file-variable-adjustment))
+ nil
+ (save-excursion
+ (let ((section-data (allout-file-vars-section-data))
+ beg prefix suffix)
+ (if section-data
+ (setq beg (car section-data)
+ prefix (cadr section-data)
+ suffix (car (cddr section-data)))
+ ;; create the section
+ (goto-char (point-max))
+ (open-line 1)
+ (allout-open-topic 0)
+ (end-of-line)
+ (insert "Local emacs vars.\n")
+ (allout-open-topic 1)
+ (setq beg (point)
+ suffix ""
+ prefix (buffer-substring-no-properties (progn
+ (beginning-of-line)
+ (point))
+ beg))
+ (goto-char beg)
+ (insert "Local variables:\n")
+ (allout-open-topic 0)
+ (insert "End:\n")
+ )
+ ;; look for existing entry or create one, leaving point for insertion
+ ;; of new value:
+ (goto-char beg)
+ (allout-show-to-offshoot)
+ (if (search-forward (concat "\n" prefix varname ":") nil t)
+ (let* ((value-beg (point))
+ (line-end (progn (if (re-search-forward "[\n\r]" nil t)
+ (forward-char -1))
+ (point)))
+ (value-end (- line-end (length suffix))))
+ (if (> value-end value-beg)
+ (delete-region value-beg value-end)))
+ (end-of-line)
+ (open-line 1)
+ (forward-line 1)
+ (insert (concat prefix varname ":")))
+ (insert (format " %S%s" value suffix))
+ )
+ )
+ )
+ )
;;;_ > solicit-char-in-string (prompt string &optional do-defaulting)
(defun solicit-char-in-string (prompt string &optional do-defaulting)
"Solicit (with first arg PROMPT) choice of a character from string STRING.
@@ -4594,8 +5652,7 @@
Representations of actual backslashes - '\\\\\\\\' - are left as a
single backslash.
-\(fn REGEXP)"
-;; Optional arg SUCCESSIVE-BACKSLASHES is used internally for recursion.
+Optional arg SUCCESSIVE-BACKSLASHES is used internally for recursion."
(if (string= regexp "")
""
@@ -4611,11 +5668,6 @@
(regexp-sans-escapes (substring regexp 1)))
;; Exclude first char, but maintain count:
(regexp-sans-escapes (substring regexp 1) successive-backslashes))))
-;;;_ > my-region-active-p ()
-(defmacro my-region-active-p ()
- (if (fboundp 'region-active-p)
- '(region-active-p)
- 'mark-active))
;;;_ - add-hook definition for divergent emacsen
;;;_ > add-hook (hook function &optional append)
(if (not (fboundp 'add-hook))
@@ -4636,17 +5688,30 @@
(if append
(nconc (symbol-value hook) (list function))
(cons function (symbol-value hook)))))))
+;;;_ > subst-char-in-string if necessary
+(if (not (fboundp 'subst-char-in-string))
+ (defun subst-char-in-string (fromchar tochar string &optional inplace)
+ "Replace FROMCHAR with TOCHAR in STRING each time it occurs.
+Unless optional argument INPLACE is non-nil, return a new string."
+ (let ((i (length string))
+ (newstr (if inplace string (copy-sequence string))))
+ (while (> i 0)
+ (setq i (1- i))
+ (if (eq (aref newstr i) fromchar)
+ (aset newstr i tochar)))
+ newstr)))
+
;;;_ : my-mark-marker to accommodate divergent emacsen:
(defun my-mark-marker (&optional force buffer)
"Accommodate the different signature for `mark-marker' across Emacsen.
-XEmacs takes two optional args, while GNU Emacs does not,
+XEmacs takes two optional args, while mainline GNU Emacs does not,
so pass them along when appropriate."
- (if (featurep 'xemacs)
+ (if (string-match " XEmacs " emacs-version)
(mark-marker force buffer)
(mark-marker)))
-;;;_ #9 Under development
+;;;_ #10 Under development
;;;_ > allout-bullet-isearch (&optional bullet)
(defun allout-bullet-isearch (&optional bullet)
"Isearch \(regexp) for topic with bullet BULLET."
[-- Attachment #3: allout-ChangeLog.txt --]
[-- Type: text/plain, Size: 6893 bytes --]
2005-09-30 Ken Manheimer <ken.manheimer@gmail.com>
* allout.el: omnibus changes
- new subsystem supporting easy gpg topic encryption/decryption.
salient features:
- both public- and symmetric-key modes are supported.
- encryption being on a per-topic basis means you can
intersperse encrypted and clear-text data in a single file
to your heart's content.
- user-provided symmetric-key hints, with consistency
verification to help user avoid confusion
- time-limited key reuse, a la (and using) mailcrypt's
mc-passwd-timeout
- write-file-hook and auto-save-hook activities to support auto
encryption of pending topics on save; provision to skip
currently-edited topic to avoid editing disturbance
topic encryption functionality depends on both mailcrypt and
crypt++ packages. (non-encryption allout functionality is not
disrupted if either mailcrypt or crypt++ are absent.)
docstring for `allout-toggle-current-subtree-encryption'
and customization variables provide detailed description.
code changes:
new autoloads of crypt++ and mailcrypt routines, all for
encryption functionality.
'allout customization subgroup now positioned in 'outlines
group (instead of prior 'editing group)
central topic-encryption entry point:
(outline-toggle-current-subtree-encryption)
other new encryption routines:
(allout-encrypt-string, allout-encryption-produce-work-buffer,
allout-encrypted-topic-p, allout-encrypted-text-type,
allout-mc-activate-passwd,
allout-create-encryption-key-verifier,
allout-situate-encryption-key-verifier,
allout-get-encryption-key-verifier, allout-verify-key,
allout-next-topic-pending-encryption,
allout-encrypt-decrypted, allout-encrypted-type-prefix)
new customization variables:
(outline-topic-encryption-bullet,
outline-default-encryption-scheme,
outline-key-verifier-handling, outline-key-hint-handling,
outline-encrypt-unencrypted-on-saves)
new operational variables:
(allout-file-key-verifier-string, allout-encryption-scheme,
allout-key-verifier-string, allout-key-hint-string,
allout-after-save-decrypt)
new hook functions for auto-encryption of pending topics:
(allout-write-file-hook-handler, allout-auto-save-hook-handler,
allout-after-saves-handler)
(allout-post-command-business): do allout-after-save-decrypt
- added mechanism for adding and adjusting settings of Emacs file
variables.
(allout-enable-file-variable-adjustment): custom var to enable
mechanism
(allout-adjust-file-variable, allout-file-vars-section-data):
mechanism implementation
(outlineify-sticky): use file vars mechanism
- replaced broken mechanism for inhibition of concealed-text edits
using read-only text instead of before-change-functions,
because the latter can no longer veto the changes without being
disabled. read-only text is more suitable and less
complicated, anyway.
(it also noticably slows massive exposure changes, but i
consider the performance acceptable. eg, i have blanket
auto-exposure set for my daily-notes log, which has real-world
intricacy in a 1.1 Mb, 7000 topic outline, and have no problems
working with it on a 200 MhZ windows laptop.)
(allout-inhibit-protection, allout-during-write-cue,
allout-override-protect, allout-before-change-protect): removed
(allout-flag-region, allout-open-topic): revised to adjust
read-only text
(allout-open-line-not-read-only): added to facilitate read-only
text based protection
(allout-kill-line): revised to adjust read-only text, clue the
user about the inhibition
- (allout-unprotected): robustified with an unwind-protect
- disallow manually shifting a topic deeper than the offspring
depth of the previous topic - avoiding confusing "containment
discontinuities"
(allout-shift-in, allout-shift-out)
- fixed retention of body relative hanging indent during
promotion of collapsed bodies
(allout-reindent-bodies)
- made it easy to open new topic with same bullet as current
topic - topic creation functions provided with any universal
argument provokes now prompt for bullet, defaulting to the
bullet of the previous topic. very ergonomic.
(allout-open-topic)
- (allout-plain-bullets-string, allout-distinctive-bullets-string):
plain bullet alternates '.' period and ',' comma only. all
other bullets are relegated to special status (but
customizable)
- (allout-end-of-entry): renamed from 'allout-end-of-current-entry
since it actually operates w.r.t. most immediately containing
entry, visible or not
(allout-hide-current-entry, allout-show-current-entry): use the
revised version
- (allout-old-expose-topic): solidify deprecation.
- (allout-end-of-subtree): added, so we can span concealed as
well as visible topics.
(allout-end-of-current-subtree): use `allout-end-of-subtree'.
- (allout-end-of-current-heading): tweaked to just respect the
first line
- (allout-get-body-text): added
- (allout-ascend-to-depth, allout-ascend): position at end of
prefix when invoked interactively
- (allout-up-current-level): use `interactive-p'
- (allout-mode, allout-init): miscellaneous docstring and
operational refinements, as well as hookups of new encryption
stuff
- comments and routine names better distinguish between:
- topic body - the text contained after a header
- topic header - the first line, before the body
- topic entry - the header, body, and offspring
- (allout-beginning-of-current-entry): now works as advertised
- (allout-end-of-current-entry): relieved of superfluous
allout-show-entry
- (allout-isearch-rectification): refine condition for isearching
(allout-isearch-abort, allout-enwrap-isearch)
- reconciled with distributed allout.el 1.61 (current CVS version
as of 09/30/2005), including interactive-p fixes, typo and
coding style fixes, change of function prefix to "allout-", etc,
and fixed problem created in outline yanking due to the
interactive-p fixes
- relocated some macros
(allout-flag-region, my-region-active-p)
- refined many docstrings, including anything from correcting
typos to conceptual clarification and correction
- (allout-title): fallback title is '(buffer-name)', not
non-existing '(current-buffer-name)'
- (subst-char-in-string): define if absent (for some xemacs versions)
- corrected commentary 'keywords' to legitimate ones
- updated comentary author info (using my current email address,
obscurified)
[-- Attachment #4: allout-news.txt --]
[-- Type: text/plain, Size: 1154 bytes --]
** allout (extensive outline navigation and authoring mode), significantly
updated:
- topic cryptography added, enabling easy gpg topic encryption and
decryption. per-topic basis enables interspersing encrypted-text and
clear-text within a single file to your hearts content, using symmetric
and/or public key modes. time-limited key caching, user-provided
symmetric key hinting and consitency verification, auto-encryption of
pending topics on save, and more, make it easy to use encryption in
powerful ways.
- many substantial fixes and refinements, including:
- repaired inhibition of inadvertant edits to concealed text
- repaired retention of topic body hanging indent upon topic depth shifts
- prevent "containment discontinuities" where a topic is shifted deeper
than the offspring-depth of its' container
- easy to adopt the distinctive bullet of a topic in a topic created
relative to it, or select a new one, or use the common topic bullet
- plain bullets, by default, now alternate between only two characters
('.' and ','), yielding less cluttered outlines.
- many internal fixes.
[-- Attachment #5: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: new version of allout.el - patch and ChangeLog
2005-10-01 12:41 ` Reiner Steib
@ 2005-10-01 23:54 ` James Cloos
0 siblings, 0 replies; 156+ messages in thread
From: James Cloos @ 2005-10-01 23:54 UTC (permalink / raw)
Cc: Ken Manheimer
>>>>> "Reiner" == Reiner Steib <reinersteib+gmane@imap.cc> writes:
> good question - i wasn't aware of pgg. can you tell me more about it?
Reiner> If you have Emacs 22 (CVS) or Gnus 5.10 installed, you should
Reiner> also have the manual: (info "(pgg)Top").
For gentoo, that means any of the app-editors/emacs-cvs, app-emacs/gnus
and/or app-emacs/gnus-cvs ebuilds should contain that info manual.
-JimC
--
James H. Cloos, Jr. <cloos@jhcloos.com>
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: new version of allout.el - patch and ChangeLog
2005-10-01 16:28 ` Ken Manheimer
@ 2005-10-02 10:48 ` Sascha Wilde
2005-10-02 14:23 ` Ken Manheimer
2005-10-02 20:31 ` Richard M. Stallman
2005-10-02 17:08 ` new version of allout.el - patch and ChangeLog Richard M. Stallman
1 sibling, 2 replies; 156+ messages in thread
From: Sascha Wilde @ 2005-10-02 10:48 UTC (permalink / raw)
Cc: Andreas Schwab, emacs-devel
[-- Attachment #1.1: Type: text/plain, Size: 1139 bytes --]
On Sat, Oct 01, 2005 at 12:28:17PM -0400, Ken Manheimer wrote:
> I emerged it and got access to gpp and the info file. it
> looks nice - clean - but appears to have the same drawback, for my
> purposes, as mailcrypt. it will decrypt messages encoded with a
> symmetric key, but provides no api for encrypting with a symmetric
> key. that lack is a show-stopper for my purposes.
So you would consider switching to pgg, if it would provide an
interface to symmetric encryption?
> it may well be that pgg is preferable, somehow, to mailcrypt - they
> both offer similar functionality, including key caching, as well as
> the lack of an interface for encrypting with a symmetric key. but the
> changeover won't gain me anything i can yet see - i'll still need to
> also use crypt++ for the symmetric key encoding.
The reason I asked is, that pgg is, just like allout, part of GNU
Emacs 22 -- so IMO it would be desirable to have the howl
functionality of allout "out of the box" with GNU emacs.
cheers
sascha
--
Sascha Wilde
Hi! I'm a .signature *virus*! Copy me into your ~/.signature to help me spread!
[-- Attachment #1.2: Type: application/pgp-signature, Size: 189 bytes --]
[-- Attachment #2: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: new version of allout.el - patch and ChangeLog
2005-10-02 10:48 ` Sascha Wilde
@ 2005-10-02 14:23 ` Ken Manheimer
2005-10-02 20:31 ` Richard M. Stallman
1 sibling, 0 replies; 156+ messages in thread
From: Ken Manheimer @ 2005-10-02 14:23 UTC (permalink / raw)
On 10/2/05, Sascha Wilde <wilde@sha-bang.de> wrote:
> On Sat, Oct 01, 2005 at 12:28:17PM -0400, Ken Manheimer wrote:
>
> > I emerged it and got access to gpp and the info file. it
> > looks nice - clean - but appears to have the same drawback, for my
> > purposes, as mailcrypt. it will decrypt messages encoded with a
> > symmetric key, but provides no api for encrypting with a symmetric
> > key. that lack is a show-stopper for my purposes.
>
> So you would consider switching to pgg, if it would provide an
> interface to symmetric encryption?
yes. it would probably be a relief - allout goes through different
contortions to use crypt++ than it does for mailcrypt. i expect my
code could simplify, overall, if it used a single, fairly clean
encryption interface.
> > it may well be that pgg is preferable, somehow, to mailcrypt - they
> > both offer similar functionality, including key caching, as well as
> > the lack of an interface for encrypting with a symmetric key. but the
> > changeover won't gain me anything i can yet see - i'll still need to
> > also use crypt++ for the symmetric key encoding.
>
> The reason I asked is, that pgg is, just like allout, part of GNU
> Emacs 22 -- so IMO it would be desirable to have the howl
> functionality of allout "out of the box" with GNU emacs.
that would be a compelling reason. i could allocate some time to
incorporate pgg into allout, ditching the dependencies on crypt++ and
mailcrypt, if pgg provided for encrypting with symmetric keys. i
don't think i have the time to develop that extension of pgg however.
do you think someone else might do that? that would be cool...
ken
ken.manheimer@gmail.com
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: new version of allout.el - patch and ChangeLog
2005-10-01 16:28 ` Ken Manheimer
2005-10-02 10:48 ` Sascha Wilde
@ 2005-10-02 17:08 ` Richard M. Stallman
1 sibling, 0 replies; 156+ messages in thread
From: Richard M. Stallman @ 2005-10-02 17:08 UTC (permalink / raw)
Cc: wilde, schwab, emacs-devel
PGG is a good thing, but it doesn't replace Mailcrypt, not by itself,
because its interface is designed for Lisp programs instead of for
users.
I think we should do two things:
1. Move PGG out of Gnus and into the rest of Emacs.
2. Write a user-level interface to PGG which can be used
instead of Mailcrypt.
#1 is simple and harmless; let's do that now.
Would anyone like to do #2? We would install it after the coming
release.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: new version of allout.el - patch and ChangeLog
2005-10-02 10:48 ` Sascha Wilde
2005-10-02 14:23 ` Ken Manheimer
@ 2005-10-02 20:31 ` Richard M. Stallman
2005-10-03 19:25 ` pgg symmetric encryption patch (was: new version of allout.el - patch and ChangeLog) Sascha Wilde
1 sibling, 1 reply; 156+ messages in thread
From: Richard M. Stallman @ 2005-10-02 20:31 UTC (permalink / raw)
Cc: schwab, ken.manheimer, emacs-devel
So you would consider switching to pgg, if it would provide an
interface to symmetric encryption?
If someone wants to do it, and assuming the result is clean, it would
be a good thing to do.
^ permalink raw reply [flat|nested] 156+ messages in thread
* pgg symmetric encryption patch (was: new version of allout.el - patch and ChangeLog)
2005-10-02 20:31 ` Richard M. Stallman
@ 2005-10-03 19:25 ` Sascha Wilde
2005-10-03 19:50 ` Ken Manheimer
0 siblings, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2005-10-03 19:25 UTC (permalink / raw)
Cc: schwab, ken.manheimer, ueno, emacs-devel
[-- Attachment #1.1: Type: text/plain, Size: 4341 bytes --]
On Sun, Oct 02, 2005 at 04:31:10PM -0400, Richard M. Stallman wrote:
> So you would consider switching to pgg, if it would provide an
> interface to symmetric encryption?
>
> If someone wants to do it, and assuming the result is clean, it would
> be a good thing to do.
Enclosed you'll find my preliminary patch to make symmetric encryption
possible with pgg.
The new function pgg-encrypt-symmetric-region asks for a passphrase
and uses it to symmetrically encrypt the given region.
Please note, this is by no means complete, just a small proof of concept.
Ken, would something along this lines be sufficient for use with allout?
cheers
sascha
cvs server: Diffing .
Index: pgg-gpg.el
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/gnus/pgg-gpg.el,v
retrieving revision 1.6
diff -u -r1.6 pgg-gpg.el
--- pgg-gpg.el 6 Aug 2005 19:51:42 -0000 1.6
+++ pgg-gpg.el 3 Oct 2005 19:13:34 -0000
@@ -4,6 +4,7 @@
;; 2005 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
+;; Symmetric encryption added by: Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/10/28
;; Keywords: PGP, OpenPGP, GnuPG
@@ -141,24 +142,32 @@
(defun pgg-gpg-encrypt-region (start end recipients &optional sign)
"Encrypt the current region between START and END.
+If recipients is :symmetric do symmetric encryption
If optional argument SIGN is non-nil, do a combined sign and encrypt."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
+ (symmetric-encryption (eq recipients :symmetric))
(passphrase
- (when sign
- (pgg-read-passphrase
- (format "GnuPG passphrase for %s: " pgg-gpg-user-id)
- pgg-gpg-user-id)))
+ (if symmetric-encryption
+ (pgg-read-passphrase
+ "GnuPG passphrase for symmetric encryption: ")
+ (when sign
+ (pgg-read-passphrase
+ (format "GnuPG passphrase for %s: " pgg-gpg-user-id)
+ pgg-gpg-user-id))))
(args
(append
- (list "--batch" "--armor" "--always-trust" "--encrypt")
+ (list "--batch" "--armor" "--always-trust"
+ (if symmetric-encryption "--symmetric" "--encrypt"))
(if sign (list "--sign" "--local-user" pgg-gpg-user-id))
- (if recipients
- (apply #'nconc
- (mapcar (lambda (rcpt)
- (list pgg-gpg-recipient-argument rcpt))
- (append recipients
- (if pgg-encrypt-for-me
- (list pgg-gpg-user-id)))))))))
+ (if symmetric-encryption
+ nil
+ (if recipients
+ (apply #'nconc
+ (mapcar (lambda (rcpt)
+ (list pgg-gpg-recipient-argument rcpt))
+ (append recipients
+ (if pgg-encrypt-for-me
+ (list pgg-gpg-user-id))))))))))
(pgg-as-lbt start end 'CRLF
(pgg-gpg-process-region start end passphrase pgg-gpg-program args))
(when sign
Index: pgg.el
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/gnus/pgg.el,v
retrieving revision 1.8
diff -u -r1.8 pgg.el
--- pgg.el 26 Aug 2005 00:02:05 -0000 1.8
+++ pgg.el 3 Oct 2005 19:13:34 -0000
@@ -4,6 +4,7 @@
;; 2005 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
+;; Symmetric encryption added by: Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/10/28
;; Keywords: PGP
@@ -232,6 +233,18 @@
(pgg-save-coding-system start end
(pgg-invoke "encrypt-region" (or pgg-scheme pgg-default-scheme)
(point-min) (point-max) rcpts sign))))
+ (when (interactive-p)
+ (pgg-display-output-buffer start end status))
+ status))
+
+;;;###autoload
+(defun pgg-encrypt-symmetric-region (start end)
+ "Encrypt the current region between START and END symmetric with passphrase."
+ (interactive "r")
+ (let ((status
+ (pgg-save-coding-system start end
+ (pgg-invoke "encrypt-region" (or pgg-scheme pgg-default-scheme)
+ (point-min) (point-max) :symmetric))))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
--
Sascha Wilde : The most exciting phrase to hear in science, the one
: that heralds new discoveries, is not "Eureka!" (I found
: it!) but "That's funny ..." -- Isaac Asimov
[-- Attachment #1.2: Type: application/pgp-signature, Size: 189 bytes --]
[-- Attachment #2: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch (was: new version of allout.el - patch and ChangeLog)
2005-10-03 19:25 ` pgg symmetric encryption patch (was: new version of allout.el - patch and ChangeLog) Sascha Wilde
@ 2005-10-03 19:50 ` Ken Manheimer
2005-10-04 10:53 ` Sascha Wilde
0 siblings, 1 reply; 156+ messages in thread
From: Ken Manheimer @ 2005-10-03 19:50 UTC (permalink / raw)
On 10/3/05, Sascha Wilde <wilde@sha-bang.de> wrote:
> On Sun, Oct 02, 2005 at 04:31:10PM -0400, Richard M. Stallman wrote:
> > So you would consider switching to pgg, if it would provide an
> > interface to symmetric encryption?
> >
> > If someone wants to do it, and assuming the result is clean, it would
> > be a good thing to do.
>
> Enclosed you'll find my preliminary patch to make symmetric encryption
> possible with pgg.
>
> The new function pgg-encrypt-symmetric-region asks for a passphrase
> and uses it to symmetrically encrypt the given region.
>
> Please note, this is by no means complete, just a small proof of concept.
>
> Ken, would something along this lines be sufficient for use with allout?
> [...]
> Sascha Wilde : The most exciting phrase to hear in science, the one
> : that heralds new discoveries, is not "Eureka!" (I found
> : it!) but "That's funny ..." -- Isaac Asimov
sounds like it, yes! i can't try it right now, but whether or not it
works as is, if you're willing to continue ironing it out with me to
get it working properly, i'll it to work with allout. (i hope to have
some time this evening or else tomorrow afternoon to devote attention
to it.)
!
(as you may realize, i like the quote!-)
ken
ken.manheimer@gmail.com
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch (was: new version of allout.el - patch and ChangeLog)
2005-10-03 19:50 ` Ken Manheimer
@ 2005-10-04 10:53 ` Sascha Wilde
2005-10-04 12:46 ` pgg symmetric encryption patch Stefan Monnier
2005-10-05 16:19 ` Sascha Wilde
0 siblings, 2 replies; 156+ messages in thread
From: Sascha Wilde @ 2005-10-04 10:53 UTC (permalink / raw)
Cc: schwab, ueno, Richard M. Stallman, emacs-devel
[-- Attachment #1.1: Type: text/plain, Size: 1287 bytes --]
On Mon, Oct 03, 2005 at 03:50:25PM -0400, Ken Manheimer wrote:
> On 10/3/05, Sascha Wilde <wilde@sha-bang.de> wrote:
> > Enclosed you'll find my preliminary patch to make symmetric encryption
> > possible with pgg.
[...]
> > Ken, would something along this lines be sufficient for use with allout?
>
> sounds like it, yes! i can't try it right now, but whether or not it
> works as is, if you're willing to continue ironing it out with me to
> get it working properly, i'll it to work with allout.
I'll try to find the time to make this a proper feature of pgg. (I
also added the original author to the cc, so he might add his
thoughts)
Ken, please let me know if it works for you, and what features you are
missing.
One problem, though: pgg supports, besides gnupg, pgp and pgp5 -- I
don't have any version of pgp on my box, and I'm not willing to buy a
proprietary product to write these patches. So, to make the symmetric
encryption feature work with these backends, I would need help by
people, who can tell me about the needed switches for pgp and test the
patches with different versions of pgp...
cheers
sascha
--
Sascha Wilde : "There are 10 types of people in the world.
: Those who understand binary and those who don't."
[-- Attachment #1.2: Type: application/pgp-signature, Size: 189 bytes --]
[-- Attachment #2: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-04 10:53 ` Sascha Wilde
@ 2005-10-04 12:46 ` Stefan Monnier
2005-10-05 16:19 ` Sascha Wilde
1 sibling, 0 replies; 156+ messages in thread
From: Stefan Monnier @ 2005-10-04 12:46 UTC (permalink / raw)
Cc: schwab, ueno, Richard M. Stallman, emacs-devel
> One problem, though: pgg supports, besides gnupg, pgp and pgp5 -- I
> don't have any version of pgp on my box, and I'm not willing to buy a
> proprietary product to write these patches. So, to make the symmetric
> encryption feature work with these backends, I would need help by
> people, who can tell me about the needed switches for pgp and test the
> patches with different versions of pgp...
I wouldn't worry about that: for non-gpg users it currently doesn't work
either, so it's not like you're making life worse for them. If they want
symmetric crypto to work for their product, they'll have to provide the
patches themselves.
Stefan
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-04 10:53 ` Sascha Wilde
2005-10-04 12:46 ` pgg symmetric encryption patch Stefan Monnier
@ 2005-10-05 16:19 ` Sascha Wilde
2005-10-05 19:16 ` Ken Manheimer
2005-10-06 2:18 ` Daiki Ueno
1 sibling, 2 replies; 156+ messages in thread
From: Sascha Wilde @ 2005-10-05 16:19 UTC (permalink / raw)
[-- Attachment #1.1.1: Type: text/plain, Size: 568 bytes --]
On Tue, Oct 04, 2005 at 12:53:30PM +0200, Sascha Wilde wrote:
> I'll try to find the time to make this a proper feature of pgg. (I
> also added the original author to the cc, so he might add his
> thoughts)
I attached a more complete patch, including documentation and
changelog entries.
Any comments, bug-fixes, flames are highly appreciated.
cheers
sascha
ps. I have no write access to CVS, so if there are no objections,
please commit.
--
Sascha Wilde
"Liebet eure Feinde, vielleicht schadet das ihrem Ruf"
(Stanislaw Jerzy Lec)
[-- Attachment #1.1.2: emacs-pgg-symmetric.patch-02 --]
[-- Type: text/plain, Size: 9344 bytes --]
Index: man/pgg.texi
===================================================================
RCS file: /cvsroot/emacs/emacs/man/pgg.texi,v
retrieving revision 1.5
diff -u -r1.5 pgg.texi
--- man/pgg.texi 16 Sep 2005 22:11:00 -0000 1.5
+++ man/pgg.texi 5 Oct 2005 16:09:13 -0000
@@ -98,6 +98,8 @@
@lisp
(autoload 'pgg-encrypt-region "pgg"
"Encrypt the current region." t)
+(autoload 'pgg-encrypt-symmetric-region "pgg"
+ "Encrypt the current region with symmetric algorithm." t)
(autoload 'pgg-decrypt-region "pgg"
"Decrypt the current region." t)
(autoload 'pgg-sign-region "pgg"
@@ -140,6 +142,13 @@
with GnuPG.
@end deffn
+@deffn Command pgg-encrypt-symmetric-region start end
+Encrypt the current region between @var{start} and @var{end} using a
+symmetric cipher. After invocation you are asked for a passphrase.
+
+This is currently only implemented for GnuPG.
+@end deffn
+
@deffn Command pgg-decrypt-region start end
Decrypt the current region between @var{start} and @var{end}. If
decryption is successful, it replaces the current region contents (in
@@ -305,6 +314,10 @@
@var{recipients}. If @var{sign} is non-@code{nil}, do a combined sign
and encrypt. If encryption is successful, it returns @code{t},
otherwise @code{nil}.
+
+If @var{recipients} equals @code{:symmetric} a symmetric cipher together
+with a passphrase is used and @var{sign} is ignored. This feature is
+currently only implemented for GnuPG.
@end deffn
@deffn Method pgg-scheme-decrypt-region scheme start end
Index: man/ChangeLog
===================================================================
RCS file: /cvsroot/emacs/emacs/man/ChangeLog,v
retrieving revision 1.681
diff -u -r1.681 ChangeLog
--- man/ChangeLog 4 Oct 2005 22:52:16 -0000 1.681
+++ man/ChangeLog 5 Oct 2005 16:09:16 -0000
@@ -1,3 +1,11 @@
+2005-10-05 Sascha Wilde <swilde@sha-bang.de>
+
+ * pgg.texi (How to use): Added autoload line for
+ `pgg-encrypt-symmetric-region'.
+ (User Commands): Description of `pgg-encrypt-symmetric-region'.
+ (Backend methods): Describe new symmetric encryption feature in
+ `pgg-scheme-encrypt-region'.
+
2005-10-05 Nick Roberts <nickrob@snap.net.nz>
* speedbar.texi (GDB): Describe use of watch expressions.
Index: lisp/gnus/pgg.el
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/gnus/pgg.el,v
retrieving revision 1.8
diff -u -r1.8 pgg.el
--- lisp/gnus/pgg.el 26 Aug 2005 00:02:05 -0000 1.8
+++ lisp/gnus/pgg.el 5 Oct 2005 16:09:17 -0000
@@ -4,6 +4,7 @@
;; 2005 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
+;; Symmetric encryption added by: Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/10/28
;; Keywords: PGP
@@ -232,6 +233,34 @@
(pgg-save-coding-system start end
(pgg-invoke "encrypt-region" (or pgg-scheme pgg-default-scheme)
(point-min) (point-max) rcpts sign))))
+ (when (interactive-p)
+ (pgg-display-output-buffer start end status))
+ status))
+
+;;;###autoload
+(defun pgg-encrypt-symmetric-region (start end)
+ "Encrypt the current region between START and END symmetric with passphrase."
+ (interactive "r")
+ (when (not (member (or pgg-scheme pgg-default-scheme)
+ pgg-symmetric-encryption-schemes))
+ (error "Symmetric encryption is not implemented for selected scheme."))
+ (let ((status
+ (pgg-save-coding-system start end
+ (pgg-invoke "encrypt-region" (or pgg-scheme pgg-default-scheme)
+ (point-min) (point-max) :symmetric))))
+ (when (interactive-p)
+ (pgg-display-output-buffer start end status))
+ status))
+
+;;;###autoload
+(defun pgg-encrypt-symmetric (&optional start end)
+ "Encrypt the current buffer symmetric with passphrase.
+If optional arguments START and END are specified, only encrypt within
+the region."
+ (interactive)
+ (let* ((start (or start (point-min)))
+ (end (or end (point-max)))
+ (status (pgg-encrypt-symmetric-region start end)))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
Index: lisp/gnus/pgg-gpg.el
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/gnus/pgg-gpg.el,v
retrieving revision 1.6
diff -u -r1.6 pgg-gpg.el
--- lisp/gnus/pgg-gpg.el 6 Aug 2005 19:51:42 -0000 1.6
+++ lisp/gnus/pgg-gpg.el 5 Oct 2005 16:09:17 -0000
@@ -4,6 +4,7 @@
;; 2005 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
+;; Symmetric encryption added by: Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/10/28
;; Keywords: PGP, OpenPGP, GnuPG
@@ -141,24 +142,32 @@
(defun pgg-gpg-encrypt-region (start end recipients &optional sign)
"Encrypt the current region between START and END.
+If recipients is :symmetric do symmetric encryption
If optional argument SIGN is non-nil, do a combined sign and encrypt."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
+ (symmetric-encryption (eq recipients :symmetric))
(passphrase
- (when sign
- (pgg-read-passphrase
- (format "GnuPG passphrase for %s: " pgg-gpg-user-id)
- pgg-gpg-user-id)))
+ (if symmetric-encryption
+ (pgg-read-passphrase
+ "GnuPG passphrase for symmetric encryption: ")
+ (when sign
+ (pgg-read-passphrase
+ (format "GnuPG passphrase for %s: " pgg-gpg-user-id)
+ pgg-gpg-user-id))))
(args
(append
- (list "--batch" "--armor" "--always-trust" "--encrypt")
+ (list "--batch" "--armor" "--always-trust"
+ (if symmetric-encryption "--symmetric" "--encrypt"))
(if sign (list "--sign" "--local-user" pgg-gpg-user-id))
- (if recipients
- (apply #'nconc
- (mapcar (lambda (rcpt)
- (list pgg-gpg-recipient-argument rcpt))
- (append recipients
- (if pgg-encrypt-for-me
- (list pgg-gpg-user-id)))))))))
+ (if symmetric-encryption
+ nil
+ (if recipients
+ (apply #'nconc
+ (mapcar (lambda (rcpt)
+ (list pgg-gpg-recipient-argument rcpt))
+ (append recipients
+ (if pgg-encrypt-for-me
+ (list pgg-gpg-user-id))))))))))
(pgg-as-lbt start end 'CRLF
(pgg-gpg-process-region start end passphrase pgg-gpg-program args))
(when sign
@@ -180,7 +189,10 @@
(pgg-gpg-user-id (or key pgg-gpg-user-id pgg-default-user-id))
(passphrase
(pgg-read-passphrase
- (format "GnuPG passphrase for %s: " pgg-gpg-user-id)
+ (format (if (pgg-gpg-symmetric-key-p message-keys)
+ "Passphrase for symmetric dencryption: "
+ "GnuPG passphrase for %s: ")
+ pgg-gpg-user-id)
pgg-gpg-user-id))
(args '("--batch" "--decrypt")))
(pgg-gpg-process-region start end passphrase pgg-gpg-program args)
@@ -188,6 +200,13 @@
(pgg-gpg-possibly-cache-passphrase passphrase pgg-gpg-user-id)
(goto-char (point-min))
(re-search-forward "^\\[GNUPG:] DECRYPTION_OKAY\\>" nil t))))
+
+(defun pgg-gpg-symmetric-key-p (message-keys)
+ "Check if MESSAGE-KEYS contains a symmetric encryption indicator."
+ (dolist (key message-keys result)
+ (when (and (eq (car key) 3)
+ (member '(symmetric-key-algorithm) key))
+ (setq result key))))
(defun pgg-gpg-select-matching-key (message-keys secret-keys)
"Choose a key from MESSAGE-KEYS that matches one of the keys in SECRET-KEYS."
Index: lisp/gnus/pgg-def.el
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/gnus/pgg-def.el,v
retrieving revision 1.7
diff -u -r1.7 pgg-def.el
--- lisp/gnus/pgg-def.el 6 Aug 2005 19:51:42 -0000 1.7
+++ lisp/gnus/pgg-def.el 5 Oct 2005 16:09:17 -0000
@@ -3,6 +3,7 @@
;; Copyright (C) 1999, 2002, 2003, 2004, 2005 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
+;; Symmetric encryption added by: Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/11/02
;; Keywords: PGP, OpenPGP, GnuPG
@@ -83,6 +84,9 @@
(defvar pgg-scheme nil
"Current scheme of PGP implementation.")
+
+(defconst pgg-symmetric-encryption-schemes '(gpg)
+ "Schemes of PGP implementation for which symmetric encrypt is implemented.")
(defmacro pgg-truncate-key-identifier (key)
`(if (> (length ,key) 8) (substring ,key 8) ,key))
Index: lisp/gnus/ChangeLog
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/gnus/ChangeLog,v
retrieving revision 1.388
diff -u -r1.388 ChangeLog
--- lisp/gnus/ChangeLog 4 Oct 2005 22:51:06 -0000 1.388
+++ lisp/gnus/ChangeLog 5 Oct 2005 16:09:19 -0000
@@ -1,3 +1,15 @@
+2005-10-05 Sascha Wilde <swilde@sha-bang.de>
+
+ * pgg-def.el (pgg-symmetric-encryption-schemes): List of schemes
+ with symmetric encryption support.
+
+ * pgg-gpg.el (pgg-gpg-encrypt-region): Added symmetric encryption.
+ (pgg-gpg-symmetric-key-p): New function to check for an symmetric
+ encrypted session key.
+
+ * pgg.el (pgg-encrypt-symmetric,pgg-encrypt-symmetric-region):
+ New user commands for symmetric encryption.
+
2005-10-04 Reiner Steib <Reiner.Steib@gmx.de>
* mm-url.el (mm-url-predefined-programs): Add switches for curl.
[-- Attachment #1.2: Type: application/pgp-signature, Size: 189 bytes --]
[-- Attachment #2: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-05 16:19 ` Sascha Wilde
@ 2005-10-05 19:16 ` Ken Manheimer
2005-10-10 4:15 ` Richard M. Stallman
2005-10-06 2:18 ` Daiki Ueno
1 sibling, 1 reply; 156+ messages in thread
From: Ken Manheimer @ 2005-10-05 19:16 UTC (permalink / raw)
On 10/5/05, Sascha Wilde <wilde@sha-bang.de> wrote:
> On Tue, Oct 04, 2005 at 12:53:30PM +0200, Sascha Wilde wrote:
>
> > I'll try to find the time to make this a proper feature of pgg. (I
> > also added the original author to the cc, so he might add his
> > thoughts)
>
> I attached a more complete patch, including documentation and
> changelog entries.
>
> Any comments, bug-fixes, flames are highly appreciated.
i have some questions regarding my switching allout over to use pgg.
i've been looking over the impact, and it's complicated by the
intricate way i use mailcrypt's key caching mechanism. i would have
to change pgg's key caching stuff to enable me, for instance, to query
for the presence of a key, and also change the encryption/decryption
function signatures to take explictly passed-in keys. it will not be
trivial, and i don't want to launch into the work if there's no chance
the pgg changes will be accepted.
i know there's no way in advance to know whether my changes will or
won't be acceptible, but i would like to know whether there will be
attention available to evaluate them and the possibility that they'll
be accepted? my time frame is also a little daunting - i think i
have at least a few days of work, and am going to be away for a week
in the middle of next week, so may not have anything finished until a
few weeks from now. any thoughts?
ken manheimer
ken.manheimer@gmail.com
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-05 16:19 ` Sascha Wilde
2005-10-05 19:16 ` Ken Manheimer
@ 2005-10-06 2:18 ` Daiki Ueno
2005-10-06 9:01 ` Sascha Wilde
1 sibling, 1 reply; 156+ messages in thread
From: Daiki Ueno @ 2005-10-06 2:18 UTC (permalink / raw)
Cc: schwab, Simon Josefsson, Richard M. Stallman, emacs-devel
Hello Sascha,
>>>>> In <20051005161905.GA6208@kenny.sha-bang.local>
>>>>> Sascha Wilde <wilde@sha-bang.de> wrote:
> I attached a more complete patch, including documentation and
> changelog entries.
> Any comments, bug-fixes, flames are highly appreciated.
> +;;;###autoload
> +(defun pgg-encrypt-symmetric-region (start end)
> + "Encrypt the current region between START and END symmetric with passphrase."
> + (interactive "r")
> + (when (not (member (or pgg-scheme pgg-default-scheme)
> + pgg-symmetric-encryption-schemes))
> + (error "Symmetric encryption is not implemented for selected scheme."))
It might be better to split pgg-gpg-encrypt-symmetric-region from
pgg-gpg-encrypt-region rather than maintaining
pgg-symmetric-encryption-schemes.
When pgg-invoke calls "encrypt-symmetric-region" on pgp or pgp5
backend, a void-function error is signaled. Therefore, the user will
see that "encrypt-symmetric-region" is not implemented.
And also, is it still necessary to give special meaning to the 1st
argument (recipients) of pgg-encrypt-region?
> ps. I have no write access to CVS, so if there are no objections,
> please commit.
Currently, PGG in Emacs CVS is a part of Gnus. So I added
Simon Josefsson to the Cc: list. He is one of Gnus maintainers and he
has taken care of PGG in Gnus CVS.
Regards,
--
Daiki Ueno
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-06 2:18 ` Daiki Ueno
@ 2005-10-06 9:01 ` Sascha Wilde
2005-10-06 22:41 ` Ken Manheimer
0 siblings, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2005-10-06 9:01 UTC (permalink / raw)
Cc: schwab, Ken Manheimer, emacs-devel, Richard M. Stallman,
Simon Josefsson
[-- Attachment #1.1.1: Type: text/plain, Size: 1077 bytes --]
On Thu, Oct 06, 2005 at 11:18:48AM +0900, Daiki Ueno wrote:
> It might be better to split pgg-gpg-encrypt-symmetric-region from
> pgg-gpg-encrypt-region rather than maintaining
> pgg-symmetric-encryption-schemes.
Yes, I think you are right, after in all this would be a cleaner
approach. (I had reasons for my original design, but reconsidering
them, they didn't hold...)
> And also, is it still necessary to give special meaning to the 1st
> argument (recipients) of pgg-encrypt-region?
I guess you mean pgg-gpg-encrypt-region? No, after moving symmetric
encryption in a dedicated function the special meaning of recipients
is no longer needed.
> > ps. I have no write access to CVS, so if there are no objections,
> > please commit.
>
> Currently, PGG in Emacs CVS is a part of Gnus. So I added
> Simon Josefsson to the Cc: list. He is one of Gnus maintainers and he
> has taken care of PGG in Gnus CVS.
Thanks.
Attached you'll find a revised version of the patch.
cheers
--
Sascha Wilde
To become a Jedi, use Emacs you have to.
[-- Attachment #1.1.2: emacs-pgg-symmetric.patch-03 --]
[-- Type: text/plain, Size: 7422 bytes --]
Index: man/pgg.texi
===================================================================
RCS file: /cvsroot/emacs/emacs/man/pgg.texi,v
retrieving revision 1.5
diff -u -r1.5 pgg.texi
--- man/pgg.texi 16 Sep 2005 22:11:00 -0000 1.5
+++ man/pgg.texi 6 Oct 2005 09:00:13 -0000
@@ -98,6 +98,8 @@
@lisp
(autoload 'pgg-encrypt-region "pgg"
"Encrypt the current region." t)
+(autoload 'pgg-encrypt-symmetric-region "pgg"
+ "Encrypt the current region with symmetric algorithm." t)
(autoload 'pgg-decrypt-region "pgg"
"Decrypt the current region." t)
(autoload 'pgg-sign-region "pgg"
@@ -140,6 +142,13 @@
with GnuPG.
@end deffn
+@deffn Command pgg-encrypt-symmetric-region start end
+Encrypt the current region between @var{start} and @var{end} using a
+symmetric cipher. After invocation you are asked for a passphrase.
+
+This is currently only implemented for GnuPG.
+@end deffn
+
@deffn Command pgg-decrypt-region start end
Decrypt the current region between @var{start} and @var{end}. If
decryption is successful, it replaces the current region contents (in
@@ -305,6 +314,13 @@
@var{recipients}. If @var{sign} is non-@code{nil}, do a combined sign
and encrypt. If encryption is successful, it returns @code{t},
otherwise @code{nil}.
+@end deffn
+
+@deffn Method pgg-scheme-encrypt-symmetric-region scheme start end
+Encrypt the current region between @var{start} and @var{end} using a
+symmetric cipher and a passphrases. If encryption is successful, it
+returns @code{t}, otherwise @code{nil}. This function is currently only
+implemented for GnuPG.
@end deffn
@deffn Method pgg-scheme-decrypt-region scheme start end
Index: man/ChangeLog
===================================================================
RCS file: /cvsroot/emacs/emacs/man/ChangeLog,v
retrieving revision 1.681
diff -u -r1.681 ChangeLog
--- man/ChangeLog 4 Oct 2005 22:52:16 -0000 1.681
+++ man/ChangeLog 6 Oct 2005 09:00:16 -0000
@@ -1,3 +1,11 @@
+2005-10-06 Sascha Wilde <swilde@sha-bang.de>
+
+ * pgg.texi (How to use): Added autoload line for
+ `pgg-encrypt-symmetric-region'.
+ (User Commands): Description of `pgg-encrypt-symmetric-region'.
+ (Backend methods): Describe new funktion
+ `pgg-scheme-encrypt-symmetric-region'.
+
2005-10-05 Nick Roberts <nickrob@snap.net.nz>
* speedbar.texi (GDB): Describe use of watch expressions.
Index: lisp/gnus/pgg.el
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/gnus/pgg.el,v
retrieving revision 1.8
diff -u -r1.8 pgg.el
--- lisp/gnus/pgg.el 26 Aug 2005 00:02:05 -0000 1.8
+++ lisp/gnus/pgg.el 6 Oct 2005 09:00:17 -0000
@@ -4,6 +4,7 @@
;; 2005 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
+;; Symmetric encryption added by: Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/10/28
;; Keywords: PGP
@@ -232,6 +233,32 @@
(pgg-save-coding-system start end
(pgg-invoke "encrypt-region" (or pgg-scheme pgg-default-scheme)
(point-min) (point-max) rcpts sign))))
+ (when (interactive-p)
+ (pgg-display-output-buffer start end status))
+ status))
+
+;;;###autoload
+(defun pgg-encrypt-symmetric-region (start end)
+ "Encrypt the current region between START and END symmetric with passphrase."
+ (interactive "r")
+ (let ((status
+ (pgg-save-coding-system start end
+ (pgg-invoke "encrypt-symmetric-region"
+ (or pgg-scheme pgg-default-scheme)
+ (point-min) (point-max)))))
+ (when (interactive-p)
+ (pgg-display-output-buffer start end status))
+ status))
+
+;;;###autoload
+(defun pgg-encrypt-symmetric (&optional start end)
+ "Encrypt the current buffer symmetric with passphrase.
+If optional arguments START and END are specified, only encrypt within
+the region."
+ (interactive)
+ (let* ((start (or start (point-min)))
+ (end (or end (point-max)))
+ (status (pgg-encrypt-symmetric-region start end)))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
Index: lisp/gnus/pgg-gpg.el
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/gnus/pgg-gpg.el,v
retrieving revision 1.6
diff -u -r1.6 pgg-gpg.el
--- lisp/gnus/pgg-gpg.el 6 Aug 2005 19:51:42 -0000 1.6
+++ lisp/gnus/pgg-gpg.el 6 Oct 2005 09:00:17 -0000
@@ -4,6 +4,7 @@
;; 2005 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
+;; Symmetric encryption added by: Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/10/28
;; Keywords: PGP, OpenPGP, GnuPG
@@ -169,6 +170,16 @@
(pgg-gpg-possibly-cache-passphrase passphrase)))
(pgg-process-when-success)))
+(defun pgg-gpg-encrypt-symmetric-region (start end)
+ "Encrypt the current region between START and END with symmetric cipher."
+ (let* ((passphrase
+ (pgg-read-passphrase "GnuPG passphrase for symmetric encryption: "))
+ (args
+ (append (list "--batch" "--armor" "--symmetric" ))))
+ (pgg-as-lbt start end 'CRLF
+ (pgg-gpg-process-region start end passphrase pgg-gpg-program args))
+ (pgg-process-when-success)))
+
(defun pgg-gpg-decrypt-region (start end)
"Decrypt the current region between START and END."
(let* ((current-buffer (current-buffer))
@@ -180,7 +191,10 @@
(pgg-gpg-user-id (or key pgg-gpg-user-id pgg-default-user-id))
(passphrase
(pgg-read-passphrase
- (format "GnuPG passphrase for %s: " pgg-gpg-user-id)
+ (format (if (pgg-gpg-symmetric-key-p message-keys)
+ "Passphrase for symmetric dencryption: "
+ "GnuPG passphrase for %s: ")
+ pgg-gpg-user-id)
pgg-gpg-user-id))
(args '("--batch" "--decrypt")))
(pgg-gpg-process-region start end passphrase pgg-gpg-program args)
@@ -188,6 +202,13 @@
(pgg-gpg-possibly-cache-passphrase passphrase pgg-gpg-user-id)
(goto-char (point-min))
(re-search-forward "^\\[GNUPG:] DECRYPTION_OKAY\\>" nil t))))
+
+(defun pgg-gpg-symmetric-key-p (message-keys)
+ "Check if MESSAGE-KEYS contains a symmetric encryption indicator."
+ (dolist (key message-keys result)
+ (when (and (eq (car key) 3)
+ (member '(symmetric-key-algorithm) key))
+ (setq result key))))
(defun pgg-gpg-select-matching-key (message-keys secret-keys)
"Choose a key from MESSAGE-KEYS that matches one of the keys in SECRET-KEYS."
Index: lisp/gnus/ChangeLog
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/gnus/ChangeLog,v
retrieving revision 1.388
diff -u -r1.388 ChangeLog
--- lisp/gnus/ChangeLog 4 Oct 2005 22:51:06 -0000 1.388
+++ lisp/gnus/ChangeLog 6 Oct 2005 09:00:20 -0000
@@ -1,3 +1,15 @@
+2005-10-06 Sascha Wilde <swilde@sha-bang.de>
+
+ * pgg-gpg.el (pgg-gpg-encrypt-symmetric-region): New function for
+ symmetric encryption.
+ (pgg-gpg-symmetric-key-p): New function to check for an symmetric
+ encrypted session key.
+ (pgg-gpg-decrypt-region): When decrypting a symmetric encrypted
+ message ask for the passphrase in a proper way.
+
+ * pgg.el (pgg-encrypt-symmetric,pgg-encrypt-symmetric-region):
+ New user commands for symmetric encryption.
+
2005-10-04 Reiner Steib <Reiner.Steib@gmx.de>
* mm-url.el (mm-url-predefined-programs): Add switches for curl.
[-- Attachment #1.2: Type: application/pgp-signature, Size: 189 bytes --]
[-- Attachment #2: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-06 9:01 ` Sascha Wilde
@ 2005-10-06 22:41 ` Ken Manheimer
2005-10-07 10:00 ` Sascha Wilde
2005-12-09 15:43 ` pgg symmetric encryption patch Simon Josefsson
0 siblings, 2 replies; 156+ messages in thread
From: Ken Manheimer @ 2005-10-06 22:41 UTC (permalink / raw)
i'm attempting to incorporate sascha's modified pgg in allout, instead
of using a combination of mailcrypt and crypt++, and encountering some
serious problems. the problems include some fundamental problems with
pgg operation, independent of the patch, that are show-stoppers for
me. i'd like to run my assessment of these things by you all and see
if you can help me understand them. it's possible i'm mistaken about
some, i don't understand what appear to be the choices made.
all of my experiments involve the current pgg code found in the
gnu.org lisp/gnus CVS. some of them (i'll try to be clear about
which) involve this pgg code with sascha's most recent symmetric-key
extensions patch (emacs-pgg-symmetric.patch-03) applied (by hand -
couldn't get it to work using 'patch').
1. my most serious concern is with the unpatched pgg code. the text that
it encrypts is altered from the original, in order to append \r carriage
returns to the text (using pgg-as-lbt / pgg-convert-lbt).
the problem with this is that decryption on unix-ish platforms with
anything other than pgg will result in text that is different than the
original. for example, text that is encrypted with pgg-gpg and then
decrypted directly using the gpg program (using the command-line, for
instance) will be distorted in this way. likewise if decrypted using
mailcrypt in emacs, or pgp5 or pgp in any way, etc.
this is not acceptable for my purposes (and i can't figure out where it
would be acceptable, but i'm not familiar with the encryption concerns
for message exchange, eg for email or news).
2. i also have some fundamental problems with the way unaltered pgg's
passphrase caching system is wired. i am not sure about my analysis,
and would love to be corrected, and filled in about how it actually does
work. (the passphrase cache routines could really use some informative
docstrings.)
as far as i can tell, on decryption it keys on the value of
pgg-default-user-id, rather than the actual recipients of the message.
this is generally useless for any messages but those encrypted with the
user's public-key. and it depends on the user having set
pgg-default-user-id, which seems like an unnecessary and complicating
limitation.
3. this key caching problem of #2 is compounded in the context of sascha's
patches, because i really can't figure what the right thing is. plus,
it's not hooked up quite right in the patches:
- the patched version will use the prompt for the symmetric key even when
doing a public-key decryption.
- pgg-gpp-encrypt-symmetric-region does not do do any key caching. this
is the right thing modulo the pgg-default-user-id misorientation of the
caching mechanism - but is unacceptable for my purposes, where users
can particularly need the convenience of key caching for symmetric-key
operation, in order to encrypt and decrypt multiple entries.
4. in the patched version, the symmetric encryption does not replace the
original text with the encrypted text - it's only available in the
hidden " *PGG output*" buffer, but not put in place.
5. last, another small problem with the unaltered pgg code.
i stumbled and was confused when pgg failed to do a public-key
encryption due to the default value of pgg-default-user-id. only on
reading the code did i learn i needed to set pgg-default-user-id to the
identity of my primary key. it may be that i should use my user login
for that key's identity, so the default would work, i dunno.
it took me a while to unravel these problems, and i stopped at that
point - i don't think i can use pgg, as it stands, according to this
assessment. i don't understand the reasons for the choices - maybe
just because i'm unfamiliar with the regular context where it's used.
i may be mistaken about my assessment in some of these items, and
would welcome correction and/or clarification!
ken manheimer
ken.manheimer@gmail.com
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-06 22:41 ` Ken Manheimer
@ 2005-10-07 10:00 ` Sascha Wilde
2005-10-07 18:06 ` Ken Manheimer
2005-12-09 15:43 ` pgg symmetric encryption patch Simon Josefsson
1 sibling, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2005-10-07 10:00 UTC (permalink / raw)
Cc: sascha schwab (symmetric encryption patches),
Daiki Ueno (pgg author), emacs-devel, Richard M. Stallman,
Simon Josefsson (gnus maintainer of pgg)
[-- Attachment #1.1.1: Type: text/plain, Size: 2242 bytes --]
On Thu, Oct 06, 2005 at 06:41:14PM -0400, Ken Manheimer wrote:
> which) involve this pgg code with sascha's most recent symmetric-key
> extensions patch (emacs-pgg-symmetric.patch-03) applied (by hand -
> couldn't get it to work using 'patch').
hmm, strange, I just applied the patch to a fresh GNU emacs cvs
checkout w/o any problems -- only one changelog hunk failed, no
wonder, the changelogs are constantly changing... ;-)
> 1. my most serious concern is with the unpatched pgg code. the text that
> it encrypts is altered from the original, in order to append \r carriage
> returns to the text (using pgg-as-lbt / pgg-convert-lbt).
>
> the problem with this is that decryption on unix-ish platforms with
> anything other than pgg will result in text that is different than the
> original.
This is supposed to be a feature, not a bug.
But read on, there actually _is_ a bug in PGG...
Please note RfC 2440 5.9.:
The last sentence gives a short summary on the subject
Text data is stored with <CR><LF> text endings (i.e. network-normal
line endings). These should be converted to native line endings by
the receiving software.
As PGG tries to implement RfC conform OpenPGP, and it handles is text,
not binary data, this always applies.
Please read also on the `--textmode' option of gpg.
THE BUG: pgg does the newline conversion by it self (I'm not quite
sure why) but fails to tell the backend (gpg) that it should operate
in textmode, so the Data Packet is tagged as binary, not text data...
Please try if the appended patch (only against pgg-gpg.el) fixes this
issue.
[passphrase caching]
As I'm short of time, I'll look into this issues later, sorry...
> 4. in the patched version, the symmetric encryption does not replace the
> original text with the encrypted text - it's only available in the
> hidden " *PGG output*" buffer, but not put in place.
I think, you want to use `pgg-encrypt-symmetric-region', which
encapsulates the backend function `pgg-gpg-encrypt-symmetric-region'
and puts the encrypted text in place.
cheers
sascha
--
Sascha Wilde
A conclusion is simply the place where someone got tired of thinking.
[-- Attachment #1.1.2: pgg-gpg_textmode.patch --]
[-- Type: text/plain, Size: 3075 bytes --]
*** pgg-gpg.el 09 Aug 2005 12:53:45 +0200 1.6
--- pgg-gpg.el 07 Okt 2005 11:47:44 +0200
***************
*** 4,9 ****
--- 4,10 ----
;; 2005 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
+ ;; Symmetric encryption added by: Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/10/28
;; Keywords: PGP, OpenPGP, GnuPG
***************
*** 150,156 ****
pgg-gpg-user-id)))
(args
(append
! (list "--batch" "--armor" "--always-trust" "--encrypt")
(if sign (list "--sign" "--local-user" pgg-gpg-user-id))
(if recipients
(apply #'nconc
--- 151,157 ----
pgg-gpg-user-id)))
(args
(append
! (list "--batch" "--textmode" "--armor" "--always-trust" "--encrypt")
(if sign (list "--sign" "--local-user" pgg-gpg-user-id))
(if recipients
(apply #'nconc
***************
*** 169,174 ****
--- 170,185 ----
(pgg-gpg-possibly-cache-passphrase passphrase)))
(pgg-process-when-success)))
+ (defun pgg-gpg-encrypt-symmetric-region (start end)
+ "Encrypt the current region between START and END with symmetric cipher."
+ (let* ((passphrase
+ (pgg-read-passphrase "GnuPG passphrase for symmetric encryption: "))
+ (args
+ (append (list "--batch" "--textmode" "--armor" "--symmetric" ))))
+ (pgg-as-lbt start end 'CRLF
+ (pgg-gpg-process-region start end passphrase pgg-gpg-program args))
+ (pgg-process-when-success)))
+
(defun pgg-gpg-decrypt-region (start end)
"Decrypt the current region between START and END."
(let* ((current-buffer (current-buffer))
***************
*** 180,186 ****
(pgg-gpg-user-id (or key pgg-gpg-user-id pgg-default-user-id))
(passphrase
(pgg-read-passphrase
! (format "GnuPG passphrase for %s: " pgg-gpg-user-id)
pgg-gpg-user-id))
(args '("--batch" "--decrypt")))
(pgg-gpg-process-region start end passphrase pgg-gpg-program args)
--- 191,200 ----
(pgg-gpg-user-id (or key pgg-gpg-user-id pgg-default-user-id))
(passphrase
(pgg-read-passphrase
! (format (if (pgg-gpg-symmetric-key-p message-keys)
! "Passphrase for symmetric dencryption: "
! "GnuPG passphrase for %s: ")
! pgg-gpg-user-id)
pgg-gpg-user-id))
(args '("--batch" "--decrypt")))
(pgg-gpg-process-region start end passphrase pgg-gpg-program args)
***************
*** 189,194 ****
--- 203,215 ----
(goto-char (point-min))
(re-search-forward "^\\[GNUPG:] DECRYPTION_OKAY\\>" nil t))))
+ (defun pgg-gpg-symmetric-key-p (message-keys)
+ "Check if MESSAGE-KEYS contains a symmetric encryption indicator."
+ (dolist (key message-keys result)
+ (when (and (eq (car key) 3)
+ (member '(symmetric-key-algorithm) key))
+ (setq result key))))
+
(defun pgg-gpg-select-matching-key (message-keys secret-keys)
"Choose a key from MESSAGE-KEYS that matches one of the keys in SECRET-KEYS."
(loop for message-key in message-keys
[-- Attachment #1.2: Type: application/pgp-signature, Size: 189 bytes --]
[-- Attachment #2: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-07 10:00 ` Sascha Wilde
@ 2005-10-07 18:06 ` Ken Manheimer
2005-10-07 21:49 ` Sascha Wilde
0 siblings, 1 reply; 156+ messages in thread
From: Ken Manheimer @ 2005-10-07 18:06 UTC (permalink / raw)
On 10/7/05, Sascha Wilde <wilde@sha-bang.de> wrote:
> On Thu, Oct 06, 2005 at 06:41:14PM -0400, Ken Manheimer wrote:
>
> > which) involve this pgg code with sascha's most recent symmetric-key
> > extensions patch (emacs-pgg-symmetric.patch-03) applied (by hand -
> > couldn't get it to work using 'patch').
>
> hmm, strange, I just applied the patch to a fresh GNU emacs cvs
> checkout w/o any problems -- only one changelog hunk failed, no
> wonder, the changelogs are constantly changing... ;-)
ironically, this was a due to the patch file having DOS-style line
endings. i didn't notice the "(DOS)" indicator on the emacs mode line
- but did notice it when i just looked at the .rej files. i visited
the file "literally" ('find-file-literally') and stripped the ^Ms, and
the patch worked.
(to complicate matters a little, 'patch' compensated for the ^M line
endings in the new patch you sent (pgg-gpg_textmode.patch). i don't know why
that compensation didn't happen with the other patch - maybe something to
do with this one being for a single file and the other being multi?
aargh.)
> > 1. my most serious concern is with the unpatched pgg code. the text that
> > it encrypts is altered from the original, in order to append \r carriage
> > returns to the text (using pgg-as-lbt / pgg-convert-lbt).
> >
> > the problem with this is that decryption on unix-ish platforms with
> > anything other than pgg will result in text that is different than the
> > original.
>
> This is supposed to be a feature, not a bug.
> But read on, there actually _is_ a bug in PGG...
>
> Please note RfC 2440 5.9.:
>
> The last sentence gives a short summary on the subject
>
> Text data is stored with <CR><LF> text endings (i.e. network-normal
> line endings). These should be converted to native line endings by
> the receiving software.
>
> As PGG tries to implement RfC conform OpenPGP, and it handles is text,
> not binary data, this always applies.
>
> Please read also on the `--textmode' option of gpg.
>
> THE BUG: pgg does the newline conversion by it self (I'm not quite
> sure why) but fails to tell the backend (gpg) that it should operate
> in textmode, so the Data Packet is tagged as binary, not text data...
pgg is definitely doing the wrong thing in converting the text to DOS
format, itself. that requires that pgg be the decryption program used
if the platform where the message is being decrypted does not use DOS
file-encoding.
> Please try if the appended patch (only against pgg-gpg.el) fixes this
> issue.
that didn't work, but lead me in the right direction to what looks like the fix.
it does work if you also remove the invocation of the pgg-as-lbt macro
which encloses the pgg-gpg-process-region call. i'm including a patch
which does that for all of the pgg-gpg.el routines which use
pgg-as-lbt.
once again, i'm not *sure* that's the right thing, but i'm pretty sure
that the way pgg-as-lbt is being used is the wrong thing. maybe that
was done to try to provide for versions of gpg that lacked the
--textmode option. i don't think that would be a good idea.
(since pgg-as-lbt is a macro, its effect is a little beguiling. it
does its processing _before_ the call to pgg-gpg-process-region,
despite the fact that the latter is placed as an argument to the
former, and in contrast to what would happen in regular functions,
where the innermost call would be conducted first...)
> [passphrase caching]
>
> As I'm short of time, I'll look into this issues later, sorry...
i've resolved part of the problem in my patch, specifically:
> > 3. this key caching problem of #2 is compounded in the context of sascha's
> > [...]
> > - the patched version will use the prompt for the symmetric key even when
> > doing a public-key decryption.
the problem was that the 'result' value in dolist was being setq'd,
but not made local, so the previous result is used in the case that no
new result is found. i added a '(let (result) ...)' around the
dolist, and it's now behaving properly. that's in my version of your
patch.
caching of the symmetric passphrase is going to take some more thought.
what i did in allout is to manipulate mailcrypt's caching mechanism to
cache the symmetric key according to the file path, if any, else the
buffer name. that way, there's one symmetric key cached per file. on
top of that, there's allowance in the password reading mechanism for
new or varying symmetric keys for a file, with provision for
presenting a user-supplied key hint in the prompt, as well. i would
like to refine pgg's password prompting mechanism to make it easy for
allout to provide the prompt and other behaviors without making it too
specialized and complicated. i'm going to leave that for a separate
patch, once i get it done.
finally (with regard to the passphrase stuff), pgg should be caching
the key-pair mode passphrases according to the actual identity of the
key being addressed, and not the default user id. that info is
available explicitly when encrypting, and i suspect that your
pgg-gpg-symmetric-key-p demonstrates that it's available (via
pgg-decode-armor-region) when decrypting. the caching should
discriminate, and the decryption prompt should indicate, on the basis
of that info, but i'll leave it to someone else to make those
refinements to the pgg code. i'm going to just try to make sure the
caching and password reading mechanisms are general enough.
> > 4. in the patched version, the symmetric encryption does not replace the
> > original text with the encrypted text - it's only available in the
> > hidden " *PGG output*" buffer, but not put in place.
>
> I think, you want to use `pgg-encrypt-symmetric-region', which
> encapsulates the backend function `pgg-gpg-encrypt-symmetric-region'
> and puts the encrypted text in place.
you're correct, that was my mistake.
we're making some good progress here. the --textmode fact was crucial
- it's looking like the use of pgg-as-lbt is somehow misguided. i'm
hoping that the major things are taken care of, and i can refine the
passphrase caching mechanism as i see necessary.
thanks for your help!
ken manheimer
ken.manheimer@gmail.com
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-07 18:06 ` Ken Manheimer
@ 2005-10-07 21:49 ` Sascha Wilde
2005-10-08 8:48 ` Simon Josefsson
0 siblings, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2005-10-07 21:49 UTC (permalink / raw)
Cc: sascha schwab (symmetric encryption patches),
Daiki Ueno (pgg author), emacs-devel, Richard M. Stallman,
Simon Josefsson (gnus maintainer of pgg)
[-- Attachment #1.1.1: Type: text/plain, Size: 3118 bytes --]
On Fri, Oct 07, 2005 at 02:06:55PM -0400, Ken Manheimer wrote:
> On 10/7/05, Sascha Wilde <wilde@sha-bang.de> wrote:
> > On Thu, Oct 06, 2005 at 06:41:14PM -0400, Ken Manheimer wrote:
> > > 1. my most serious concern is with the unpatched pgg code. the text that
> > > it encrypts is altered from the original, in order to append \r carriage
> > > returns to the text (using pgg-as-lbt / pgg-convert-lbt).
> > >
> > > the problem with this is that decryption on unix-ish platforms with
> > > anything other than pgg will result in text that is different than the
> > > original.
> >
> > This is supposed to be a feature, not a bug.
> > But read on, there actually _is_ a bug in PGG...
[...]
> > THE BUG: pgg does the newline conversion by it self (I'm not quite
> > sure why) but fails to tell the backend (gpg) that it should operate
> > in textmode, so the Data Packet is tagged as binary, not text data...
>
> pgg is definitely doing the wrong thing in converting the text to DOS
> format, itself. that requires that pgg be the decryption program used
> if the platform where the message is being decrypted does not use DOS
> file-encoding.
While I agree, that it is unnecessary (at least with gpg as backend) I
wouldn't say, that it is wrong. When the content of the data packet
is tag as text, _any_ decrypting application is required to convert
the <CR><LF> to the type of linebreak matching the local system.
> > Please try if the appended patch (only against pgg-gpg.el) fixes this
> > issue.
>
> that didn't work, but lead me in the right direction to what looks
> like the fix.
>
> it does work if you also remove the invocation of the pgg-as-lbt macro
> which encloses the pgg-gpg-process-region call.
As explained it shouldn't make any difference if the conversion is
done by pgg or gpg, as long as the data is tagged as text.
I tried it here with my latest patches and gpg and I was able to
encrypt a text using pgg and decrypt it with gpg on the command line
as well as with pgg within emacs and getting the right result (unix
like linebreakes, that is) in both cases. What happens when you try
it?
> i'm including a patch which does that for all of the pgg-gpg.el
> routines which use pgg-as-lbt.
hmm, I don't think you did... ;-) And, as explained, I think this
shouldn't be needed.
Anyway I found another (unrelated) bug in my code, please see the
attached patch.
> the problem was that the 'result' value in dolist was being setq'd,
> but not made local, so the previous result is used in the case that no
> new result is found. i added a '(let (result) ...)' around the
> dolist, and it's now behaving properly. that's in my version of your
> patch.
Yes, this was a bug. (Funny enough, I just found it m self)
Everybody: please attache the provided patch...
[...]
> we're making some good progress here.
yes, seems so! :-)
Thanks for your work.
cheers
sascha
--
Sascha Wilde : "Lies, was ich meine, nicht, was ich schreibe."
: (Urs Traenkner in de.alt.admin)
[-- Attachment #1.1.2: pgg-gpg_symmetric-key-p.patch --]
[-- Type: text/plain, Size: 794 bytes --]
--- /usr/share/emacs/22.0.50/lisp/gnus/pgg-gpg.el 2005-10-07 11:47:44.000000000 +0200
+++ /home/wilde/src/std-src/emacs/lisp/gnus/pgg-gpg.el 2005-10-07 23:29:57.000000000 +0200
@@ -205,10 +205,11 @@
(defun pgg-gpg-symmetric-key-p (message-keys)
"Check if MESSAGE-KEYS contains a symmetric encryption indicator."
- (dolist (key message-keys result)
- (when (and (eq (car key) 3)
- (member '(symmetric-key-algorithm) key))
- (setq result key))))
+ (let ((result))
+ (dolist (key message-keys result)
+ (when (and (eq (car key) 3)
+ (member '(symmetric-key-algorithm) key))
+ (setq result key)))))
(defun pgg-gpg-select-matching-key (message-keys secret-keys)
"Choose a key from MESSAGE-KEYS that matches one of the keys in SECRET-KEYS."
[-- Attachment #1.2: Type: application/pgp-signature, Size: 189 bytes --]
[-- Attachment #2: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-07 21:49 ` Sascha Wilde
@ 2005-10-08 8:48 ` Simon Josefsson
2005-10-08 10:36 ` Sascha Wilde
0 siblings, 1 reply; 156+ messages in thread
From: Simon Josefsson @ 2005-10-08 8:48 UTC (permalink / raw)
Cc: sascha schwab (symmetric encryption patches),
Daiki Ueno (pgg author), Richard M. Stallman, emacs-devel
It seems you are making some progress here. For simplicity, could you
post the complete patch (preferably in unified diff format) against
Emacs CVS you want to have installed? Unless somebody else has
already taken care of this...
Btw, I have merged some bug fixes of PGG from No Gnus CVS into Emacs
CVS. The changes between PGG in Emacs CVS and No Gnus are now only
related to password.el, which I believe we agreed to not install in
Emacs because it was too close to the release.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-08 8:48 ` Simon Josefsson
@ 2005-10-08 10:36 ` Sascha Wilde
2005-10-08 11:14 ` Simon Josefsson
2005-10-08 18:31 ` Ken Manheimer
0 siblings, 2 replies; 156+ messages in thread
From: Sascha Wilde @ 2005-10-08 10:36 UTC (permalink / raw)
Cc: sascha schwab (symmetric encryption patches), Ken Manheimer,
Daiki Ueno (pgg author), Richard M. Stallman, emacs-devel
[-- Attachment #1.1.1: Type: text/plain, Size: 655 bytes --]
On Sat, Oct 08, 2005 at 10:48:27AM +0200, Simon Josefsson wrote:
> It seems you are making some progress here. For simplicity, could you
> post the complete patch (preferably in unified diff format) against
> Emacs CVS you want to have installed? Unless somebody else has
> already taken care of this...
I attached the complete patch against the latest cvs checkout.
Thanks for your help.
cheers
sascha
--
Sascha Wilde
"Structure is _nothing_ if it is all you got. Skeletons _spook_ people if
thwy try to walk around on their own. I really wonder why XML does
not." -- Erik Naggum <erik@naggum.net> in comp.lang.lisp
[-- Attachment #1.1.2: emacs-pgg-symmetric.patch-04 --]
[-- Type: text/plain, Size: 7885 bytes --]
Index: man/pgg.texi
===================================================================
RCS file: /cvsroot/emacs/emacs/man/pgg.texi,v
retrieving revision 1.5
diff -u -r1.5 pgg.texi
--- man/pgg.texi 16 Sep 2005 22:11:00 -0000 1.5
+++ man/pgg.texi 8 Oct 2005 10:31:09 -0000
@@ -98,6 +98,8 @@
@lisp
(autoload 'pgg-encrypt-region "pgg"
"Encrypt the current region." t)
+(autoload 'pgg-encrypt-symmetric-region "pgg"
+ "Encrypt the current region with symmetric algorithm." t)
(autoload 'pgg-decrypt-region "pgg"
"Decrypt the current region." t)
(autoload 'pgg-sign-region "pgg"
@@ -140,6 +142,13 @@
with GnuPG.
@end deffn
+@deffn Command pgg-encrypt-symmetric-region start end
+Encrypt the current region between @var{start} and @var{end} using a
+symmetric cipher. After invocation you are asked for a passphrase.
+
+This is currently only implemented for GnuPG.
+@end deffn
+
@deffn Command pgg-decrypt-region start end
Decrypt the current region between @var{start} and @var{end}. If
decryption is successful, it replaces the current region contents (in
@@ -305,6 +314,13 @@
@var{recipients}. If @var{sign} is non-@code{nil}, do a combined sign
and encrypt. If encryption is successful, it returns @code{t},
otherwise @code{nil}.
+@end deffn
+
+@deffn Method pgg-scheme-encrypt-symmetric-region scheme start end
+Encrypt the current region between @var{start} and @var{end} using a
+symmetric cipher and a passphrases. If encryption is successful, it
+returns @code{t}, otherwise @code{nil}. This function is currently only
+implemented for GnuPG.
@end deffn
@deffn Method pgg-scheme-decrypt-region scheme start end
Index: man/ChangeLog
===================================================================
RCS file: /cvsroot/emacs/emacs/man/ChangeLog,v
retrieving revision 1.683
diff -u -r1.683 ChangeLog
--- man/ChangeLog 8 Oct 2005 02:55:16 -0000 1.683
+++ man/ChangeLog 8 Oct 2005 10:31:12 -0000
@@ -10,6 +10,14 @@
* building.texi (GDB Graphical Interface): Add variables and
functions to indices. Be more precise.
+2005-10-06 Sascha Wilde <swilde@sha-bang.de>
+
+ * pgg.texi (How to use): Added autoload line for
+ `pgg-encrypt-symmetric-region'.
+ (User Commands): Description of `pgg-encrypt-symmetric-region'.
+ (Backend methods): Describe new funktion
+ `pgg-scheme-encrypt-symmetric-region'.
+
2005-10-05 Nick Roberts <nickrob@snap.net.nz>
* speedbar.texi (GDB): Describe use of watch expressions.
Index: lisp/gnus/pgg.el
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/gnus/pgg.el,v
retrieving revision 1.8
diff -u -r1.8 pgg.el
--- lisp/gnus/pgg.el 26 Aug 2005 00:02:05 -0000 1.8
+++ lisp/gnus/pgg.el 8 Oct 2005 10:31:13 -0000
@@ -4,6 +4,7 @@
;; 2005 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
+;; Symmetric encryption added by: Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/10/28
;; Keywords: PGP
@@ -232,6 +233,32 @@
(pgg-save-coding-system start end
(pgg-invoke "encrypt-region" (or pgg-scheme pgg-default-scheme)
(point-min) (point-max) rcpts sign))))
+ (when (interactive-p)
+ (pgg-display-output-buffer start end status))
+ status))
+
+;;;###autoload
+(defun pgg-encrypt-symmetric-region (start end)
+ "Encrypt the current region between START and END symmetric with passphrase."
+ (interactive "r")
+ (let ((status
+ (pgg-save-coding-system start end
+ (pgg-invoke "encrypt-symmetric-region"
+ (or pgg-scheme pgg-default-scheme)
+ (point-min) (point-max)))))
+ (when (interactive-p)
+ (pgg-display-output-buffer start end status))
+ status))
+
+;;;###autoload
+(defun pgg-encrypt-symmetric (&optional start end)
+ "Encrypt the current buffer symmetric with passphrase.
+If optional arguments START and END are specified, only encrypt within
+the region."
+ (interactive)
+ (let* ((start (or start (point-min)))
+ (end (or end (point-max)))
+ (status (pgg-encrypt-symmetric-region start end)))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
Index: lisp/gnus/pgg-gpg.el
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/gnus/pgg-gpg.el,v
retrieving revision 1.7
diff -u -r1.7 pgg-gpg.el
--- lisp/gnus/pgg-gpg.el 8 Oct 2005 08:43:33 -0000 1.7
+++ lisp/gnus/pgg-gpg.el 8 Oct 2005 10:31:14 -0000
@@ -4,6 +4,7 @@
;; 2005 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
+;; Symmetric encryption added by: Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/10/28
;; Keywords: PGP, OpenPGP, GnuPG
@@ -150,7 +151,7 @@
pgg-gpg-user-id)))
(args
(append
- (list "--batch" "--armor" "--always-trust" "--encrypt")
+ (list "--batch" "--textmode" "--armor" "--always-trust" "--encrypt")
(if sign (list "--sign" "--local-user" pgg-gpg-user-id))
(if recipients
(apply #'nconc
@@ -169,6 +170,16 @@
(pgg-gpg-possibly-cache-passphrase passphrase)))
(pgg-process-when-success)))
+(defun pgg-gpg-encrypt-symmetric-region (start end)
+ "Encrypt the current region between START and END with symmetric cipher."
+ (let* ((passphrase
+ (pgg-read-passphrase "GnuPG passphrase for symmetric encryption: "))
+ (args
+ (append (list "--batch" "--textmode" "--armor" "--symmetric" ))))
+ (pgg-as-lbt start end 'CRLF
+ (pgg-gpg-process-region start end passphrase pgg-gpg-program args))
+ (pgg-process-when-success)))
+
(defun pgg-gpg-decrypt-region (start end)
"Decrypt the current region between START and END."
(let* ((current-buffer (current-buffer))
@@ -180,7 +191,10 @@
(pgg-gpg-user-id (or key pgg-gpg-user-id pgg-default-user-id))
(passphrase
(pgg-read-passphrase
- (format "GnuPG passphrase for %s: " pgg-gpg-user-id)
+ (format (if (pgg-gpg-symmetric-key-p message-keys)
+ "Passphrase for symmetric dencryption: "
+ "GnuPG passphrase for %s: ")
+ pgg-gpg-user-id)
pgg-gpg-user-id))
(args '("--batch" "--decrypt")))
(pgg-gpg-process-region start end passphrase pgg-gpg-program args)
@@ -188,6 +202,14 @@
(pgg-gpg-possibly-cache-passphrase passphrase pgg-gpg-user-id)
(goto-char (point-min))
(re-search-forward "^\\[GNUPG:] DECRYPTION_OKAY\\>" nil t))))
+
+(defun pgg-gpg-symmetric-key-p (message-keys)
+ "Check if MESSAGE-KEYS contains a symmetric encryption indicator."
+ (let ((result))
+ (dolist (key message-keys result)
+ (when (and (eq (car key) 3)
+ (member '(symmetric-key-algorithm) key))
+ (setq result key)))))
(defun pgg-gpg-select-matching-key (message-keys secret-keys)
"Choose a key from MESSAGE-KEYS that matches one of the keys in SECRET-KEYS."
Index: lisp/gnus/ChangeLog
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/gnus/ChangeLog,v
retrieving revision 1.392
diff -u -r1.392 ChangeLog
--- lisp/gnus/ChangeLog 8 Oct 2005 08:45:31 -0000 1.392
+++ lisp/gnus/ChangeLog 8 Oct 2005 10:31:16 -0000
@@ -1,3 +1,15 @@
+2005-10-06 Sascha Wilde <swilde@sha-bang.de>
+
+ * pgg-gpg.el (pgg-gpg-encrypt-symmetric-region): New function for
+ symmetric encryption.
+ (pgg-gpg-symmetric-key-p): New function to check for an symmetric
+ encrypted session key.
+ (pgg-gpg-decrypt-region): When decrypting a symmetric encrypted
+ message ask for the passphrase in a proper way.
+
+ * pgg.el (pgg-encrypt-symmetric,pgg-encrypt-symmetric-region):
+ New user commands for symmetric encryption.
+
2005-01-21 Derek Atkins <warlord@MIT.EDU> (tiny change)
* pgg-pgp.el (pgg-pgp-decrypt-region): Use passphrase cache.
[-- Attachment #1.2: Type: application/pgp-signature, Size: 189 bytes --]
[-- Attachment #2: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-08 10:36 ` Sascha Wilde
@ 2005-10-08 11:14 ` Simon Josefsson
2005-10-08 12:56 ` Ken Manheimer
2005-10-08 13:43 ` Sascha Wilde
2005-10-08 18:31 ` Ken Manheimer
1 sibling, 2 replies; 156+ messages in thread
From: Simon Josefsson @ 2005-10-08 11:14 UTC (permalink / raw)
Cc: sascha schwab (symmetric encryption patches),
Daiki Ueno (pgg author), Richard M. Stallman, emacs-devel
Sascha Wilde <wilde@sha-bang.de> writes:
> On Sat, Oct 08, 2005 at 10:48:27AM +0200, Simon Josefsson wrote:
>> It seems you are making some progress here. For simplicity, could you
>> post the complete patch (preferably in unified diff format) against
>> Emacs CVS you want to have installed? Unless somebody else has
>> already taken care of this...
>
> I attached the complete patch against the latest cvs checkout.
>
> Thanks for your help.
Thanks! The patch looks good. I think this is a non-trivial change,
though, so installing it would require signing papers to transfer the
copyright to the FSF. Have all the authors done this? Would you be
willing to do it? Thanks.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-08 11:14 ` Simon Josefsson
@ 2005-10-08 12:56 ` Ken Manheimer
2005-10-08 22:56 ` Richard M. Stallman
2005-10-08 13:43 ` Sascha Wilde
1 sibling, 1 reply; 156+ messages in thread
From: Ken Manheimer @ 2005-10-08 12:56 UTC (permalink / raw)
Cc: sascha schwab (symmetric encryption patches),
Daiki Ueno (pgg author), Richard M. Stallman, emacs-devel
On 10/8/05, Simon Josefsson <jas@extundo.com> wrote:
> Sascha Wilde <wilde@sha-bang.de> writes:
>
> > On Sat, Oct 08, 2005 at 10:48:27AM +0200, Simon Josefsson wrote:
> >> It seems you are making some progress here. For simplicity, could you
> >> post the complete patch (preferably in unified diff format) against
> >> Emacs CVS you want to have installed? Unless somebody else has
> >> already taken care of this...
> >
> > I attached the complete patch against the latest cvs checkout.
> >
> > Thanks for your help.
>
> Thanks! The patch looks good. I think this is a non-trivial change,
> though, so installing it would require signing papers to transfer the
> copyright to the FSF. Have all the authors done this? Would you be
> willing to do it? Thanks.
how imminent is the release? i have an initial revision of the code,
on top of sascha's patches, to enable explicit management of
passphrase caching by the calling code. that still might change as i
develop my code that uses it, though. so i'm unsure whether i have
toto post those revisions immediately, so i can get them into the
release, or whether i have a few days to develop the other code and
resolve the changes i'd ideally like in the pgg code.
as for the copyright assignment, i have papers on file from a long
time ago, for allout and icomplete, but i believe it covers whatever i
want to contribute. all the lines in the current patch were written
by sascha, anyway, my suggestions just motivated some of them.
ken manheimer
ken.manheimer@gmail.com
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-08 11:14 ` Simon Josefsson
2005-10-08 12:56 ` Ken Manheimer
@ 2005-10-08 13:43 ` Sascha Wilde
1 sibling, 0 replies; 156+ messages in thread
From: Sascha Wilde @ 2005-10-08 13:43 UTC (permalink / raw)
Cc: sascha schwab (symmetric encryption patches), Ken Manheimer,
Daiki Ueno (pgg author), Richard M. Stallman, emacs-devel
[-- Attachment #1.1: Type: text/plain, Size: 830 bytes --]
On Sat, Oct 08, 2005 at 01:14:59PM +0200, Simon Josefsson wrote:
> Sascha Wilde <wilde@sha-bang.de> writes:
>
> > On Sat, Oct 08, 2005 at 10:48:27AM +0200, Simon Josefsson wrote:
> > I attached the complete patch against the latest cvs checkout.
> >
> > Thanks for your help.
>
> Thanks! The patch looks good. I think this is a non-trivial
> change, though, so installing it would require signing papers to
> transfer the copyright to the FSF. Have all the authors done this?
No, I haven't yet.
> Would you be willing to do it? Thanks.
Sure. Could you please guide me how to do this?
cheers
sascha
--
Sascha Wilde : xedit? Das sieht zwar wie vi aus als könne es nix, aber im
: Gegensatz zu vi kann es wirklich nix und nix ist noch geschönt!
: (Michael Core in dafc)
[-- Attachment #1.2: Type: application/pgp-signature, Size: 189 bytes --]
[-- Attachment #2: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-08 10:36 ` Sascha Wilde
2005-10-08 11:14 ` Simon Josefsson
@ 2005-10-08 18:31 ` Ken Manheimer
2005-10-08 19:16 ` Ken Manheimer
2005-10-10 21:15 ` Ken Manheimer
1 sibling, 2 replies; 156+ messages in thread
From: Ken Manheimer @ 2005-10-08 18:31 UTC (permalink / raw)
On 10/8/05, Sascha Wilde <wilde@sha-bang.de> wrote:
> On Sat, Oct 08, 2005 at 10:48:27AM +0200, Simon Josefsson wrote:
> > It seems you are making some progress here. For simplicity, could you
> > post the complete patch (preferably in unified diff format) against
> > Emacs CVS you want to have installed? Unless somebody else has
> > already taken care of this...
>
> I attached the complete patch against the latest cvs checkout.
i've got another take on the cumulative patch, with the addition of
some refinements i would like to add.
the patch is against the gnu.org repository, and incorporates recent
checkins there as of a few minutes ago.
here are the details of my further refinements, which are included in
this patch. their purpose is to enable external management of the
passphrases, including prompting and caching, while still using the
pgg encryption and cache mechanisms. the changes have two thrusts:
- extend the (generic pgg and gpg scheme) encryption and decryption
routines to take an optional passphrase argument, and when provided,
use its value instead of prompting for the passphrase
- extend the passphrase caching and prompting routines to take an optional
'notruncate' argument, to enable caching of passphrases for keys besides
those that have the format of the short pgp packet key id.
i think that these, together, will enable me to do the passphrase
handling and extend it to symmetric keys, while still leveraging the
features of the pgg mechanism (in particular, passphrase expiration).
i am pretty sure it's all backwards compatible - all the additional
functionality hinges on using the new optional arguments, there should
be no operational changes if you don't use them.
(i am very puzzled about why the passphrase cache was restricted to
the length of the short pgp packet key ids. seems like you want to
couple the passphrases with the user identity for which the message is
being encoded, in the case of key-pair ciphers, or some arbitrary
string for symmetric ciphers - eg, file name is what i want to use for
symmetric keys in allout, since the symmetric keys are associated with
the files. but once again i don't know the pgp territory well enough
to wade in, and want to minimize the chance of inadvertantly breaking
anything.
if this approach is deemed to be fine, i can easily provide an
additional patch to adjust the pgg-pgp and pgg-pgp5 modules similarly.
ken
ken.manheimer@gmail.com
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-08 18:31 ` Ken Manheimer
@ 2005-10-08 19:16 ` Ken Manheimer
2005-10-10 21:15 ` Ken Manheimer
1 sibling, 0 replies; 156+ messages in thread
From: Ken Manheimer @ 2005-10-08 19:16 UTC (permalink / raw)
[-- Attachment #1: Type: text/plain, Size: 3189 bytes --]
damn! i'm absolutely sure i attached it that time. (i even ditched
the first attachment and reattached a new copy, when i noticed a
revision to add.) i'm going to try again as an attachment, and if it
doesn't go through i'll send it inline.
---------- Forwarded message ----------
From: Ken Manheimer <ken.manheimer@gmail.com>
Date: Oct 8, 2005 2:31 PM
Subject: Re: pgg symmetric encryption patch
To: Simon Josefsson <jas@extundo.com>, Ken Manheimer
<ken.manheimer@gmail.com>, "sascha schwab (symmetric encryption
patches)" <schwab@suse.de>, "Daiki Ueno (pgg author)"
<ueno@unixuser.org>, "Richard M. Stallman" <rms@gnu.org>,
emacs-devel@gnu.org
On 10/8/05, Sascha Wilde <wilde@sha-bang.de> wrote:
> On Sat, Oct 08, 2005 at 10:48:27AM +0200, Simon Josefsson wrote:
> > It seems you are making some progress here. For simplicity, could you
> > post the complete patch (preferably in unified diff format) against
> > Emacs CVS you want to have installed? Unless somebody else has
> > already taken care of this...
>
> I attached the complete patch against the latest cvs checkout.
i've got another take on the cumulative patch, with the addition of
some refinements i would like to add.
the patch is against the gnu.org repository, and incorporates recent
checkins there as of a few minutes ago.
here are the details of my further refinements, which are included in
this patch. their purpose is to enable external management of the
passphrases, including prompting and caching, while still using the
pgg encryption and cache mechanisms. the changes have two thrusts:
- extend the (generic pgg and gpg scheme) encryption and decryption
routines to take an optional passphrase argument, and when provided,
use its value instead of prompting for the passphrase
- extend the passphrase caching and prompting routines to take an optional
'notruncate' argument, to enable caching of passphrases for keys besides
those that have the format of the short pgp packet key id.
i think that these, together, will enable me to do the passphrase
handling and extend it to symmetric keys, while still leveraging the
features of the pgg mechanism (in particular, passphrase expiration).
i am pretty sure it's all backwards compatible - all the additional
functionality hinges on using the new optional arguments, there should
be no operational changes if you don't use them.
(i am very puzzled about why the passphrase cache was restricted to
the length of the short pgp packet key ids. seems like you want to
couple the passphrases with the user identity for which the message is
being encoded, in the case of key-pair ciphers, or some arbitrary
string for symmetric ciphers - eg, file name is what i want to use for
symmetric keys in allout, since the symmetric keys are associated with
the files. but once again i don't know the pgp territory well enough
to wade in, and want to minimize the chance of inadvertantly breaking
anything.
if this approach is deemed to be fine, i can easily provide an
additional patch to adjust the pgg-pgp and pgg-pgp5 modules similarly.
ken
ken.manheimer@gmail.com
[-- Attachment #2: emacs-pgg-symmetric.patch-05 --]
[-- Type: application/octet-stream, Size: 17286 bytes --]
Index: man/pgg.texi
===================================================================
RCS file: /cvsroot/emacs/emacs/man/pgg.texi,v
retrieving revision 1.5
diff -u -r1.5 pgg.texi
--- man/pgg.texi 16 Sep 2005 22:11:00 -0000 1.5
+++ man/pgg.texi 8 Oct 2005 10:31:09 -0000
@@ -98,6 +98,8 @@
@lisp
(autoload 'pgg-encrypt-region "pgg"
"Encrypt the current region." t)
+(autoload 'pgg-encrypt-symmetric-region "pgg"
+ "Encrypt the current region with symmetric algorithm." t)
(autoload 'pgg-decrypt-region "pgg"
"Decrypt the current region." t)
(autoload 'pgg-sign-region "pgg"
@@ -140,6 +142,13 @@
with GnuPG.
@end deffn
+@deffn Command pgg-encrypt-symmetric-region start end
+Encrypt the current region between @var{start} and @var{end} using a
+symmetric cipher. After invocation you are asked for a passphrase.
+
+This is currently only implemented for GnuPG.
+@end deffn
+
@deffn Command pgg-decrypt-region start end
Decrypt the current region between @var{start} and @var{end}. If
decryption is successful, it replaces the current region contents (in
@@ -305,6 +314,13 @@
@var{recipients}. If @var{sign} is non-@code{nil}, do a combined sign
and encrypt. If encryption is successful, it returns @code{t},
otherwise @code{nil}.
+@end deffn
+
+@deffn Method pgg-scheme-encrypt-symmetric-region scheme start end
+Encrypt the current region between @var{start} and @var{end} using a
+symmetric cipher and a passphrases. If encryption is successful, it
+returns @code{t}, otherwise @code{nil}. This function is currently only
+implemented for GnuPG.
@end deffn
@deffn Method pgg-scheme-decrypt-region scheme start end
Index: man/ChangeLog
===================================================================
RCS file: /cvsroot/emacs/emacs/man/ChangeLog,v
retrieving revision 1.683
diff -u -r1.683 ChangeLog
--- man/ChangeLog 8 Oct 2005 02:55:16 -0000 1.683
+++ man/ChangeLog 8 Oct 2005 10:31:12 -0000
@@ -10,6 +10,14 @@
* building.texi (GDB Graphical Interface): Add variables and
functions to indices. Be more precise.
+2005-10-06 Sascha Wilde <swilde@sha-bang.de>
+
+ * pgg.texi (How to use): Added autoload line for
+ `pgg-encrypt-symmetric-region'.
+ (User Commands): Description of `pgg-encrypt-symmetric-region'.
+ (Backend methods): Describe new funktion
+ `pgg-scheme-encrypt-symmetric-region'.
+
2005-10-05 Nick Roberts <nickrob@snap.net.nz>
* speedbar.texi (GDB): Describe use of watch expressions.
Index: ChangeLog
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/gnus/ChangeLog,v
retrieving revision 1.392
diff -u -r1.392 ChangeLog
--- ChangeLog 8 Oct 2005 08:45:31 -0000 1.392
+++ ChangeLog 8 Oct 2005 17:58:09 -0000
@@ -1,3 +1,41 @@
+
+2005-10-08 Ken Manheimer <ken.manheimer+emacs@gmail.com>
+
+ * pgg.el (pgg-encrypt-region, pgg-encrypt-symmetric-region,
+ pgg-encrypt-symmetric, pgg-encrypt, pgg-decrypt-region,
+ pgg-decrypt, pgg-sign-region, pgg-sign):
+ add optional 'passphrase' argument to all these routines, so the
+ passphrase can be managed externally and then passed in to the
+ system.
+
+ * pgg.el (pgg-read-passphrase, pgg-add-passphrase-cache,
+ pgg-remove-passphrase-cache): add optional 'notruncate' argument,
+ so the passphrase cache can be used reliably with identifiers
+ besides a pgp packet's key id.
+
+ * pgg-gpg.el (pgg-pgp-encrypt-region,
+ pgg-pgp-encrypt-symmetric-region, pgg-pgp-encrypt-symmetric,
+ pgg-pgp-encrypt, pgg-pgp-decrypt-region, pgg-pgp-decrypt,
+ pgg-pgp-sign-region, pgg-pgp-sign): add optional 'passphrase'
+ argument to all these routines, so the passphrase can be managed
+ externally and passed in to the system.
+
+ * pgg-gpg.el (pgg-gpg-possibly-cache-passphrase): add optional
+ 'notruncate' argument, so the passphrase cache can be used
+ reliably with identifiers besides a pgp packet's key id.
+
+2005-10-06 Sascha Wilde <swilde@sha-bang.de>
+
+ * pgg-gpg.el (pgg-gpg-encrypt-symmetric-region): New function for
+ symmetric encryption.
+ (pgg-gpg-symmetric-key-p): New function to check for an symmetric
+ encrypted session key.
+ (pgg-gpg-decrypt-region): When decrypting a symmetric encrypted
+ message ask for the passphrase in a proper way.
+
+ * pgg.el (pgg-encrypt-symmetric,pgg-encrypt-symmetric-region):
+ New user commands for symmetric encryption.
+
2005-01-21 Derek Atkins <warlord@MIT.EDU> (tiny change)
* pgg-pgp.el (pgg-pgp-decrypt-region): Use passphrase cache.
Index: pgg-gpg.el
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/gnus/pgg-gpg.el,v
retrieving revision 1.7
diff -u -r1.7 pgg-gpg.el
--- pgg-gpg.el 8 Oct 2005 08:43:33 -0000 1.7
+++ pgg-gpg.el 8 Oct 2005 17:58:09 -0000
@@ -4,6 +4,7 @@
;; 2005 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
+;; Symmetric encryption added by: Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/10/28
;; Keywords: PGP, OpenPGP, GnuPG
@@ -96,7 +97,7 @@
(delete-file output-file-name))
(set-default-file-modes orig-mode))))
-(defun pgg-gpg-possibly-cache-passphrase (passphrase &optional key)
+(defun pgg-gpg-possibly-cache-passphrase (passphrase &optional key notruncate)
(if (and pgg-cache-passphrase
(progn
(goto-char (point-min))
@@ -108,7 +109,8 @@
(if (re-search-forward
"^\\[GNUPG:] NEED_PASSPHRASE\\(_PIN\\)? \\w+ ?\\w*" nil t)
(substring (match-string 0) -8))))
- passphrase)))
+ passphrase
+ notruncate)))
(defvar pgg-gpg-all-secret-keys 'unknown)
@@ -139,18 +141,23 @@
nil t)
(substring (match-string 2) 8)))))
-(defun pgg-gpg-encrypt-region (start end recipients &optional sign)
+(defun pgg-gpg-encrypt-region (start end recipients &optional sign passphrase)
"Encrypt the current region between START and END.
-If optional argument SIGN is non-nil, do a combined sign and encrypt."
+
+If optional argument SIGN is non-nil, do a combined sign and encrypt.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
- (passphrase
- (when sign
- (pgg-read-passphrase
- (format "GnuPG passphrase for %s: " pgg-gpg-user-id)
- pgg-gpg-user-id)))
+ (passphrase (or passphrase
+ (when sign
+ (pgg-read-passphrase
+ (format "GnuPG passphrase for %s: "
+ pgg-gpg-user-id)
+ pgg-gpg-user-id))))
(args
(append
- (list "--batch" "--armor" "--always-trust" "--encrypt")
+ (list "--batch" "--textmode" "--armor" "--always-trust" "--encrypt")
(if sign (list "--sign" "--local-user" pgg-gpg-user-id))
(if recipients
(apply #'nconc
@@ -169,8 +176,25 @@
(pgg-gpg-possibly-cache-passphrase passphrase)))
(pgg-process-when-success)))
-(defun pgg-gpg-decrypt-region (start end)
- "Decrypt the current region between START and END."
+(defun pgg-gpg-encrypt-symmetric-region (start end &optional passphrase)
+ "Encrypt the current region between START and END with symmetric cipher.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
+ (let* ((passphrase (or passphrase
+ (pgg-read-passphrase
+ "GnuPG passphrase for symmetric encryption: ")))
+ (args
+ (append (list "--batch" "--textmode" "--armor" "--symmetric" ))))
+ (pgg-as-lbt start end 'CRLF
+ (pgg-gpg-process-region start end passphrase pgg-gpg-program args))
+ (pgg-process-when-success)))
+
+(defun pgg-gpg-decrypt-region (start end &optional passphrase)
+ "Decrypt the current region between START and END.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(let* ((current-buffer (current-buffer))
(message-keys (with-temp-buffer
(insert-buffer-substring current-buffer)
@@ -178,16 +202,27 @@
(secret-keys (pgg-gpg-lookup-all-secret-keys))
(key (pgg-gpg-select-matching-key message-keys secret-keys))
(pgg-gpg-user-id (or key pgg-gpg-user-id pgg-default-user-id))
- (passphrase
- (pgg-read-passphrase
- (format "GnuPG passphrase for %s: " pgg-gpg-user-id)
- pgg-gpg-user-id))
+ (passphrase (or passphrase
+ (pgg-read-passphrase
+ (format (if (pgg-gpg-symmetric-key-p message-keys)
+ "Passphrase for symmetric decryption: "
+ "GnuPG passphrase for %s: ")
+ pgg-gpg-user-id)
+ pgg-gpg-user-id)))
(args '("--batch" "--decrypt")))
(pgg-gpg-process-region start end passphrase pgg-gpg-program args)
(with-current-buffer pgg-errors-buffer
(pgg-gpg-possibly-cache-passphrase passphrase pgg-gpg-user-id)
(goto-char (point-min))
(re-search-forward "^\\[GNUPG:] DECRYPTION_OKAY\\>" nil t))))
+
+(defun pgg-gpg-symmetric-key-p (message-keys)
+ "Check if MESSAGE-KEYS contains a symmetric encryption indicator."
+ (let (result)
+ (dolist (key message-keys result)
+ (when (and (eq (car key) 3)
+ (member '(symmetric-key-algorithm) key))
+ (setq result key)))))
(defun pgg-gpg-select-matching-key (message-keys secret-keys)
"Choose a key from MESSAGE-KEYS that matches one of the keys in SECRET-KEYS."
Index: pgg.el
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/gnus/pgg.el,v
retrieving revision 1.8
diff -u -r1.8 pgg.el
--- pgg.el 26 Aug 2005 00:02:05 -0000 1.8
+++ pgg.el 8 Oct 2005 17:58:10 -0000
@@ -4,6 +4,7 @@
;; 2005 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
+;; Symmetric encryption added by: Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/10/28
;; Keywords: PGP
@@ -81,9 +82,10 @@
(defvar pgg-passphrase-cache (make-vector 7 0))
-(defun pgg-read-passphrase (prompt &optional key)
+(defun pgg-read-passphrase (prompt &optional key notruncate)
(or (and pgg-cache-passphrase
- key (setq key (pgg-truncate-key-identifier key))
+ key (or (not notruncate)
+ (setq key (pgg-truncate-key-identifier key)))
(symbol-value (intern-soft key pgg-passphrase-cache)))
(read-passwd prompt)))
@@ -159,15 +161,15 @@
(pgg-run-at-time-1 time repeat function args))
(defalias 'pgg-run-at-time 'run-at-time)))
-(defun pgg-add-passphrase-cache (key passphrase)
- (setq key (pgg-truncate-key-identifier key))
+(defun pgg-add-passphrase-cache (key passphrase &optional notruncate)
+ (if (not notruncate) (setq key (pgg-truncate-key-identifier key)))
(set (intern key pgg-passphrase-cache)
passphrase)
(pgg-run-at-time pgg-passphrase-cache-expiry nil
#'pgg-remove-passphrase-cache
key))
-(defun pgg-remove-passphrase-cache (key)
+(defun pgg-remove-passphrase-cache (key &optional notruncate)
(let ((passphrase (symbol-value (intern-soft key pgg-passphrase-cache))))
(when passphrase
(fillarray passphrase ?_)
@@ -222,52 +224,101 @@
;;;
;;;###autoload
-(defun pgg-encrypt-region (start end rcpts &optional sign)
+(defun pgg-encrypt-region (start end rcpts &optional sign passphrase)
"Encrypt the current region between START and END for RCPTS.
-If optional argument SIGN is non-nil, do a combined sign and encrypt."
+
+If optional argument SIGN is non-nil, do a combined sign and encrypt.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(interactive
(list (region-beginning)(region-end)
(split-string (read-string "Recipients: ") "[ \t,]+")))
(let ((status
(pgg-save-coding-system start end
(pgg-invoke "encrypt-region" (or pgg-scheme pgg-default-scheme)
- (point-min) (point-max) rcpts sign))))
+ (point-min) (point-max) rcpts sign passphrase))))
+ (when (interactive-p)
+ (pgg-display-output-buffer start end status))
+ status))
+
+;;;###autoload
+(defun pgg-encrypt-symmetric-region (start end &optional passphrase)
+ "Encrypt the current region between START and END symmetric with passphrase.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+cache or user."
+ (interactive "r")
+ (let ((status
+ (pgg-save-coding-system start end
+ (pgg-invoke "encrypt-symmetric-region"
+ (or pgg-scheme pgg-default-scheme)
+ (point-min) (point-max) passphrase))))
+ (when (interactive-p)
+ (pgg-display-output-buffer start end status))
+ status))
+
+;;;###autoload
+(defun pgg-encrypt-symmetric (&optional start end passphrase)
+ "Encrypt the current buffer using a symmetric, rather than key-pair, cipher.
+
+If optional arguments START and END are specified, only encrypt within
+the region.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
+ (interactive)
+ (let* ((start (or start (point-min)))
+ (end (or end (point-max)))
+ (status (pgg-encrypt-symmetric-region start end passphrase)))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
;;;###autoload
-(defun pgg-encrypt (rcpts &optional sign start end)
+(defun pgg-encrypt (rcpts &optional sign start end passphrase)
"Encrypt the current buffer for RCPTS.
+
If optional argument SIGN is non-nil, do a combined sign and encrypt.
+
If optional arguments START and END are specified, only encrypt within
-the region."
+the region.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(interactive (list (split-string (read-string "Recipients: ") "[ \t,]+")))
(let* ((start (or start (point-min)))
(end (or end (point-max)))
- (status (pgg-encrypt-region start end rcpts sign)))
+ (status (pgg-encrypt-region start end rcpts sign passphrase)))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
;;;###autoload
-(defun pgg-decrypt-region (start end)
- "Decrypt the current region between START and END."
+(defun pgg-decrypt-region (start end &optional passphrase)
+ "Decrypt the current region between START and END.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(interactive "r")
(let* ((buf (current-buffer))
(status
(pgg-save-coding-system start end
(pgg-invoke "decrypt-region" (or pgg-scheme pgg-default-scheme)
- (point-min) (point-max)))))
+ (point-min) (point-max) passphrase))))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
;;;###autoload
-(defun pgg-decrypt (&optional start end)
+(defun pgg-decrypt (&optional start end passphrase)
"Decrypt the current buffer.
+
If optional arguments START and END are specified, only decrypt within
-the region."
+the region.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(interactive "")
(let* ((start (or start (point-min)))
(end (or end (point-max)))
@@ -277,38 +328,52 @@
status))
;;;###autoload
-(defun pgg-sign-region (start end &optional cleartext)
+(defun pgg-sign-region (start end &optional cleartext passphrase)
"Make the signature from text between START and END.
+
If the optional 3rd argument CLEARTEXT is non-nil, it does not create
a detached signature.
+
If this function is called interactively, CLEARTEXT is enabled
-and the the output is displayed."
+and the the output is displayed.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(interactive "r")
(let ((status (pgg-save-coding-system start end
(pgg-invoke "sign-region" (or pgg-scheme pgg-default-scheme)
(point-min) (point-max)
- (or (interactive-p) cleartext)))))
+ (or (interactive-p) cleartext)
+ passphrase))))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
;;;###autoload
-(defun pgg-sign (&optional cleartext start end)
+(defun pgg-sign (&optional cleartext start end passphrase)
"Sign the current buffer.
+
If the optional argument CLEARTEXT is non-nil, it does not create a
detached signature.
+
If optional arguments START and END are specified, only sign data
within the region.
+
If this function is called interactively, CLEARTEXT is enabled
-and the the output is displayed."
+and the the output is displayed.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(interactive "")
(let* ((start (or start (point-min)))
(end (or end (point-max)))
- (status (pgg-sign-region start end (or (interactive-p) cleartext))))
+ (status (pgg-sign-region start end
+ (or (interactive-p) cleartext)
+ passphrase)))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
-
+
;;;###autoload
(defun pgg-verify-region (start end &optional signature fetch)
"Verify the current region between START and END.
[-- Attachment #3: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-08 12:56 ` Ken Manheimer
@ 2005-10-08 22:56 ` Richard M. Stallman
2005-10-10 21:50 ` Ken Manheimer
0 siblings, 1 reply; 156+ messages in thread
From: Richard M. Stallman @ 2005-10-08 22:56 UTC (permalink / raw)
Cc: schwab, ueno, emacs-devel, jas
Pretesting surely won't start in the next few weeks.
Your papers cover only the specific files you assigned,
but they do cover changes to those files. So if you change
the code in allout.el to work with pgg, we will have no trouble
using that change.
But we do need papers from Sascha Wilde. I will start arranging that.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-05 19:16 ` Ken Manheimer
@ 2005-10-10 4:15 ` Richard M. Stallman
0 siblings, 0 replies; 156+ messages in thread
From: Richard M. Stallman @ 2005-10-10 4:15 UTC (permalink / raw)
Cc: schwab, ken.manheimer, ueno, emacs-devel
i would have
to change pgg's key caching stuff to enable me, for instance, to query
for the presence of a key, and also change the encryption/decryption
function signatures to take explictly passed-in keys. it will not be
trivial, and i don't want to launch into the work if there's no chance
the pgg changes will be accepted.
I see no reason to reject them, assuming you do a good job writing
them, provided you preserve upward-compatibility for the existing PGG
interface functions.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-08 18:31 ` Ken Manheimer
2005-10-08 19:16 ` Ken Manheimer
@ 2005-10-10 21:15 ` Ken Manheimer
2005-10-10 21:16 ` Ken Manheimer
2005-10-12 23:47 ` Ken Manheimer
1 sibling, 2 replies; 156+ messages in thread
From: Ken Manheimer @ 2005-10-10 21:15 UTC (permalink / raw)
for those of you following the developments at home (:-), here's an
incremental patch on top of what i sent out a few days ago. i fixed a
small stack of bugs in pgg-gpg.el that settles my complaint about
prompting with the secret key identity, and also filled in a small
oversight in the changes i sent out a few days ago.
while this could be the last pgg patch, i'm still developing, hence
the incremental. i plan to send out a full patch when i've finished
transitioning allout to pgg, at which point i expect my mucking with
pgg to be settled. so, repository maintainers may want to wait for
that, while i'm hoping those actively involved (eg, sascha) will
scrutinize and, ideally, exercise these patches.
we'll see if the attached patch makes it through this time. (i
haven't re-attached it, which i think was the problem last time.) if
not, look forward to a followup...
thanks.
ken
ken.manheimer@gmail.com
On 10/8/05, Ken Manheimer <ken.manheimer@gmail.com> wrote:
> On 10/8/05, Sascha Wilde <wilde@sha-bang.de> wrote:
> > On Sat, Oct 08, 2005 at 10:48:27AM +0200, Simon Josefsson wrote:
> > > It seems you are making some progress here. For simplicity, could you
> > > post the complete patch (preferably in unified diff format) against
> > > Emacs CVS you want to have installed? Unless somebody else has
> > > already taken care of this...
> >
> > I attached the complete patch against the latest cvs checkout.
>
> i've got another take on the cumulative patch, with the addition of
> some refinements i would like to add.
>
> the patch is against the gnu.org repository, and incorporates recent
> checkins there as of a few minutes ago.
>
> here are the details of my further refinements, which are included in
> this patch. their purpose is to enable external management of the
> passphrases, including prompting and caching, while still using the
> pgg encryption and cache mechanisms. the changes have two thrusts:
>
> - extend the (generic pgg and gpg scheme) encryption and decryption
> routines to take an optional passphrase argument, and when provided,
> use its value instead of prompting for the passphrase
>
> - extend the passphrase caching and prompting routines to take an optional
> 'notruncate' argument, to enable caching of passphrases for keys besides
> those that have the format of the short pgp packet key id.
>
> i think that these, together, will enable me to do the passphrase
> handling and extend it to symmetric keys, while still leveraging the
> features of the pgg mechanism (in particular, passphrase expiration).
> i am pretty sure it's all backwards compatible - all the additional
> functionality hinges on using the new optional arguments, there should
> be no operational changes if you don't use them.
>
> (i am very puzzled about why the passphrase cache was restricted to
> the length of the short pgp packet key ids. seems like you want to
> couple the passphrases with the user identity for which the message is
> being encoded, in the case of key-pair ciphers, or some arbitrary
> string for symmetric ciphers - eg, file name is what i want to use for
> symmetric keys in allout, since the symmetric keys are associated with
> the files. but once again i don't know the pgp territory well enough
> to wade in, and want to minimize the chance of inadvertantly breaking
> anything.
>
> if this approach is deemed to be fine, i can easily provide an
> additional patch to adjust the pgg-pgp and pgg-pgp5 modules similarly.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-10 21:15 ` Ken Manheimer
@ 2005-10-10 21:16 ` Ken Manheimer
2005-10-12 23:47 ` Ken Manheimer
1 sibling, 0 replies; 156+ messages in thread
From: Ken Manheimer @ 2005-10-10 21:16 UTC (permalink / raw)
[-- Attachment #1: Type: text/plain, Size: 3862 bytes --]
shit. the attachment was dropped. shit. trying again. sorry about
the clutter.
On 10/10/05, Ken Manheimer <ken.manheimer@gmail.com> wrote:
> for those of you following the developments at home (:-), here's an
> incremental patch on top of what i sent out a few days ago. i fixed a
> small stack of bugs in pgg-gpg.el that settles my complaint about
> prompting with the secret key identity, and also filled in a small
> oversight in the changes i sent out a few days ago.
>
> while this could be the last pgg patch, i'm still developing, hence
> the incremental. i plan to send out a full patch when i've finished
> transitioning allout to pgg, at which point i expect my mucking with
> pgg to be settled. so, repository maintainers may want to wait for
> that, while i'm hoping those actively involved (eg, sascha) will
> scrutinize and, ideally, exercise these patches.
>
> we'll see if the attached patch makes it through this time. (i
> haven't re-attached it, which i think was the problem last time.) if
> not, look forward to a followup...
>
> thanks.
> ken
> ken.manheimer@gmail.com
>
> On 10/8/05, Ken Manheimer <ken.manheimer@gmail.com> wrote:
> > On 10/8/05, Sascha Wilde <wilde@sha-bang.de> wrote:
> > > On Sat, Oct 08, 2005 at 10:48:27AM +0200, Simon Josefsson wrote:
> > > > It seems you are making some progress here. For simplicity, could you
> > > > post the complete patch (preferably in unified diff format) against
> > > > Emacs CVS you want to have installed? Unless somebody else has
> > > > already taken care of this...
> > >
> > > I attached the complete patch against the latest cvs checkout.
> >
> > i've got another take on the cumulative patch, with the addition of
> > some refinements i would like to add.
> >
> > the patch is against the gnu.org repository, and incorporates recent
> > checkins there as of a few minutes ago.
> >
> > here are the details of my further refinements, which are included in
> > this patch. their purpose is to enable external management of the
> > passphrases, including prompting and caching, while still using the
> > pgg encryption and cache mechanisms. the changes have two thrusts:
> >
> > - extend the (generic pgg and gpg scheme) encryption and decryption
> > routines to take an optional passphrase argument, and when provided,
> > use its value instead of prompting for the passphrase
> >
> > - extend the passphrase caching and prompting routines to take an optional
> > 'notruncate' argument, to enable caching of passphrases for keys besides
> > those that have the format of the short pgp packet key id.
> >
> > i think that these, together, will enable me to do the passphrase
> > handling and extend it to symmetric keys, while still leveraging the
> > features of the pgg mechanism (in particular, passphrase expiration).
> > i am pretty sure it's all backwards compatible - all the additional
> > functionality hinges on using the new optional arguments, there should
> > be no operational changes if you don't use them.
> >
> > (i am very puzzled about why the passphrase cache was restricted to
> > the length of the short pgp packet key ids. seems like you want to
> > couple the passphrases with the user identity for which the message is
> > being encoded, in the case of key-pair ciphers, or some arbitrary
> > string for symmetric ciphers - eg, file name is what i want to use for
> > symmetric keys in allout, since the symmetric keys are associated with
> > the files. but once again i don't know the pgp territory well enough
> > to wade in, and want to minimize the chance of inadvertantly breaking
> > anything.
> >
> > if this approach is deemed to be fine, i can easily provide an
> > additional patch to adjust the pgg-pgp and pgg-pgp5 modules similarly.
>
[-- Attachment #2: pgg-symmetric_incremental_05_1.patch --]
[-- Type: application/octet-stream, Size: 3987 bytes --]
Index: ChangeLog
===================================================================
RCS file: /home/klm/.cvs/aside/src/gnus/ChangeLog,v
retrieving revision 1.5
diff -u -r1.5 ChangeLog
--- ChangeLog 8 Oct 2005 17:58:23 -0000 1.5
+++ ChangeLog 10 Oct 2005 20:56:06 -0000
@@ -1,3 +1,17 @@
+2005-10-15 Ken Manheimer <ken.manheimer@gmail.com>
+
+ * pgg-gpe.el
+ (pgg-gpg-select-matching-key): fixed: look at the right part of the
+ decoded armor to find the key-identifier
+ (pgg-gpg-lookup-key-owner): new function to return the
+ human-readable identifier of a key owner.
+ (pgg-gpg-decrypt-region): prompt with the key owner (rather
+ than the key value) if we have a key and can match it against a
+ secret key. also, added an XXX note pointing out fact that the
+ prompt only indicates the first matching key.
+
+ * pgg.el (pgg-decrypt): passing along 'passphrase' in call to
+ pgg-decrypt-region; i overlooked this one in my previous patch.
2005-10-08 Ken Manheimer <ken.manheimer+emacs@gmail.com>
Index: pgg-gpg.el
===================================================================
RCS file: /home/klm/.cvs/aside/src/gnus/pgg-gpg.el,v
retrieving revision 1.6
diff -u -r1.6 pgg-gpg.el
--- pgg-gpg.el 8 Oct 2005 17:36:41 -0000 1.6
+++ pgg-gpg.el 10 Oct 2005 20:56:06 -0000
@@ -141,6 +141,24 @@
nil t)
(substring (match-string 2) 8)))))
+(defun pgg-gpg-lookup-key-owner (string &optional all)
+ "Search keys associated with STRING and return owner of identified key.
+
+Optional ALL non-nil means search all keys, including secret keys."
+ (let ((args (list "--with-colons" "--no-greeting" "--batch"
+ (if all "--list-secret-keys" "--list-keys")
+ string))
+ (key-regexp (concat "^\\(sec\\|pub\\)"
+ ":[^:]*:[^:]*:[^:]*:\\([^:]*\\):[^:]*"
+ ":[^:]*:[^:]*:[^:]*:\\([^:]*\\):"))
+ )
+ (with-temp-buffer
+ (apply #'call-process pgg-gpg-program nil t nil args)
+ (goto-char (point-min))
+ (if (re-search-forward key-regexp
+ nil t)
+ (match-string 3)))))
+
(defun pgg-gpg-encrypt-region (start end recipients &optional sign passphrase)
"Encrypt the current region between START and END.
@@ -200,8 +218,14 @@
(insert-buffer-substring current-buffer)
(pgg-decode-armor-region (point-min) (point-max))))
(secret-keys (pgg-gpg-lookup-all-secret-keys))
+ ;; XXX the user is stuck if they have the passphrase for the
+ ;; second or later secret key for which the message is
+ ;; encrypted. ideally, we would incrementally give them a
+ ;; chance with subsequent keys each time they fail with one.
(key (pgg-gpg-select-matching-key message-keys secret-keys))
- (pgg-gpg-user-id (or key pgg-gpg-user-id pgg-default-user-id))
+ (key-owner (and key (pgg-gpg-lookup-key-owner key t)))
+ (pgg-gpg-user-id (or key-owner key
+ pgg-gpg-user-id pgg-default-user-id))
(passphrase (or passphrase
(pgg-read-passphrase
(format (if (pgg-gpg-symmetric-key-p message-keys)
@@ -217,7 +241,7 @@
(re-search-forward "^\\[GNUPG:] DECRYPTION_OKAY\\>" nil t))))
(defun pgg-gpg-symmetric-key-p (message-keys)
- "Check if MESSAGE-KEYS contains a symmetric encryption indicator."
+ "True if decoded armor MESSAGE-KEYS has symmetric encryption indicator."
(let (result)
(dolist (key message-keys result)
(when (and (eq (car key) 3)
@@ -228,7 +252,8 @@
"Choose a key from MESSAGE-KEYS that matches one of the keys in SECRET-KEYS."
(loop for message-key in message-keys
for message-key-id = (and (equal (car message-key) 1)
- (cdr (assq 'key-identifier message-key)))
+ (cdr (assq 'key-identifier
+ (cdr message-key))))
for key = (and message-key-id (pgg-lookup-key message-key-id 'encrypt))
when (and key (member key secret-keys)) return key))
[-- Attachment #3: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-08 22:56 ` Richard M. Stallman
@ 2005-10-10 21:50 ` Ken Manheimer
2005-10-11 14:44 ` Richard M. Stallman
0 siblings, 1 reply; 156+ messages in thread
From: Ken Manheimer @ 2005-10-10 21:50 UTC (permalink / raw)
Cc: schwab, ueno, emacs-devel, jas
On 10/8/05, Richard M. Stallman <rms@gnu.org> wrote:
> Pretesting surely won't start in the next few weeks.
i'll continue on, happy to have breathing room.
> Your papers cover only the specific files you assigned,
> but they do cover changes to those files. So if you change
> the code in allout.el to work with pgg, we will have no trouble
> using that change.
in the pgg patchs i've sent so far, there's probably around 70 lines
of mine in pgg.el and around 37 in pgg-gpe.el. i don't think there
will be too many more changes, but these are essential. is that small
enough that no copyright assignment is required?
ken
ken.manheimer@gmail.com
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-10 21:50 ` Ken Manheimer
@ 2005-10-11 14:44 ` Richard M. Stallman
0 siblings, 0 replies; 156+ messages in thread
From: Richard M. Stallman @ 2005-10-11 14:44 UTC (permalink / raw)
Cc: schwab, ueno, emacs-devel, jas
in the pgg patchs i've sent so far, there's probably around 70 lines
of mine in pgg.el and around 37 in pgg-gpe.el. i don't think there
will be too many more changes, but these are essential. is that small
enough that no copyright assignment is required?
Over 10 to 15 lines needs papers. I will send you what you need.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-10 21:15 ` Ken Manheimer
2005-10-10 21:16 ` Ken Manheimer
@ 2005-10-12 23:47 ` Ken Manheimer
2005-10-20 14:08 ` Ken Manheimer
1 sibling, 1 reply; 156+ messages in thread
From: Ken Manheimer @ 2005-10-12 23:47 UTC (permalink / raw)
[-- Attachment #1: Type: text/plain, Size: 2751 bytes --]
as threatened, here is a complete patch against the current gnu.org
lisp/gnus repository. i've migrated all the allout encryption
functionality to pgg and exercised this stuff pretty substantially,
and am very comfortable with the way it works.
there are a bunch of fixes, as well as extensions so the passphrases
can be managed by the calling functions, as well as refinement of the
passphrase caching mechanism (so multiple timeouts don't pileup for a
single passphrase - the last one replaces the prior ones). lotsa
goodies. the patch includes sascha wilde's symmetric-encryption
additions - basically, the whole deal.
what it does not include is revision of the pgg-pgp.el and pgg-pgp5.el
modules, to track changes to the pgg api. i started in on that, only
to discover that they were already broken by the addition of a 'sign'
parameter to some of the encryption functions. there's no way to
repair that short of implementing the feature for the other packages,
and i'm not in a position to do that. (plus, i'm not sure i am
comfortable with the way it was done for pgg-gpg.)
so it looks like pgg-pgp.el and pgg-pgp5.el are disfunctional already,
without my changes. i'm hoping that's not going to prevent the
introduction of my changes.
i'm going to be heading offline for five days, starting tomorrow, so
it'll be a bit before i can respond to questions. i hope the patch
i'm sending (which includes detaild ChangeLog entries) will be
helpful to anyone that wishes to navigate them.
and once again, i'm not sure the attachment will be delivered this
time. (it wasn't on a recent try, but then was on a subsequent
message. this is the first awkward gmail bug i've hit...)
ken
ken.manheimer@gmail.com
On 10/10/05, Ken Manheimer <ken.manheimer@gmail.com> wrote:
> for those of you following the developments at home (:-), here's an
> incremental patch on top of what i sent out a few days ago. i fixed a
> small stack of bugs in pgg-gpg.el that settles my complaint about
> prompting with the secret key identity, and also filled in a small
> oversight in the changes i sent out a few days ago.
>
> while this could be the last pgg patch, i'm still developing, hence
> the incremental. i plan to send out a full patch when i've finished
> transitioning allout to pgg, at which point i expect my mucking with
> pgg to be settled. so, repository maintainers may want to wait for
> that, while i'm hoping those actively involved (eg, sascha) will
> scrutinize and, ideally, exercise these patches.
>
> we'll see if the attached patch makes it through this time. (i
> haven't re-attached it, which i think was the problem last time.) if
> not, look forward to a followup...
[-- Attachment #2: emacs-pgg-omnnibus.patch-06 --]
[-- Type: application/octet-stream, Size: 24517 bytes --]
Index: ChangeLog
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/gnus/ChangeLog,v
retrieving revision 1.393
diff -u -r1.393 ChangeLog
--- ChangeLog 9 Oct 2005 15:39:09 -0000 1.393
+++ ChangeLog 12 Oct 2005 23:31:39 -0000
@@ -1,3 +1,78 @@
+2005-10-12 Ken Manheimer <ken.manheimer@gmail.com>
+
+ * pgg-gpg.el
+ (pgg-gpg-select-matching-key): fixed: look at the right part of the
+ decoded armor to find the key-identifier
+ (pgg-gpg-lookup-key-owner): new function to return the
+ human-readable identifier of a key owner.
+ (pgg-gpg-lookup-id-from-key-owner): make it easy to identify the
+ key itself.
+ (pgg-gpg-decrypt-region): prompt with the key owner (rather
+ than the key value) if we have a key and can match it against a
+ secret key. also, added an XXX note pointing out fact that the
+ prompt only indicates the first matching key.
+ (pgg-add-passphrase-to-cache): <= pgg-add-passphrase-cache
+ (pgg-remove-passphrase-from-cache) <= pgg-remove-passphrase-cache
+
+ * pgg.el (pgg-decrypt): passing along 'passphrase' in call to
+ pgg-decrypt-region; i overlooked this one in my previous patch.
+ (pgg-pending-timers): a new hash for tracking the passphrase cache
+ timers, so that new ones supercede old ones.
+ (pgg-add-passphrase-to-cache): renamed from
+ `pgg-add-passphrase-cache' to reduce confusion. and modified to
+ cancel old timers when new ones are added.
+ (pgg-remove-passphrase-from-cache): renamed from
+ `pgg-remove-passphrase-cache' to reduce confusion. and modified
+ to cancel old timers when their keys are removed from the cache.
+ (pgg-cancel-timer): in mainline gnu emacs, an alias for
+ cancel-timer; in xemacs, an indirection to delete-itimer.
+ (pgg-read-passphrase-from-cache, pgg-read-passphrase): extracted
+ pgg-read-passphrase-from-cache from pgg-read-passphrase so users
+ can only check cache without risk of prompting. corrected bug in
+ notruncate behavior.
+ (pgg-read-passphrase-from-cache, pgg-read-passphrase,
+ pgg-add-passphrase-cache, pgg-remove-passphrase-cache): added
+ informative docstrings.
+ (pgg-decrypt): convey provided passphrase in subordinate call to
+ pgg-decrypt-region (missed that in a prior patch)
+
+2005-10-08 Ken Manheimer <ken.manheimer+emacs@gmail.com>
+
+ * pgg.el (pgg-encrypt-region, pgg-encrypt-symmetric-region,
+ pgg-encrypt-symmetric, pgg-encrypt, pgg-decrypt-region,
+ pgg-decrypt, pgg-sign-region, pgg-sign):
+ add optional 'passphrase' argument to all these routines, so the
+ passphrase can be managed externally and then passed in to the
+ system.
+
+ * pgg.el (pgg-read-passphrase, pgg-add-passphrase-cache,
+ pgg-remove-passphrase-cache): add optional 'notruncate' argument,
+ so the passphrase cache can be used reliably with identifiers
+ besides a pgp packet's key id.
+
+ * pgg-gpg.el (pgg-pgp-encrypt-region,
+ pgg-pgp-encrypt-symmetric-region, pgg-pgp-encrypt-symmetric,
+ pgg-pgp-encrypt, pgg-pgp-decrypt-region, pgg-pgp-decrypt,
+ pgg-pgp-sign-region, pgg-pgp-sign): add optional 'passphrase'
+ argument to all these routines, so the passphrase can be managed
+ externally and passed in to the system.
+
+ * pgg-gpg.el (pgg-gpg-possibly-cache-passphrase): add optional
+ 'notruncate' argument, so the passphrase cache can be used
+ reliably with identifiers besides a pgp packet's key id.
+
+2005-10-06 Sascha Wilde <swilde@sha-bang.de>
+
+ * pgg-gpg.el (pgg-gpg-encrypt-symmetric-region): New function for
+ symmetric encryption.
+ (pgg-gpg-symmetric-key-p): New function to check for an symmetric
+ encrypted session key.
+ (pgg-gpg-decrypt-region): When decrypting a symmetric encrypted
+ message ask for the passphrase in a proper way.
+
+ * pgg.el (pgg-encrypt-symmetric,pgg-encrypt-symmetric-region):
+ New user commands for symmetric encryption.
+
2005-10-09 Daniel Brockman <daniel@brockman.se>
* format-spec.el (format-spec): Propagate text properties of % spec.
Index: pgg.el
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/gnus/pgg.el,v
retrieving revision 1.8
diff -u -r1.8 pgg.el
--- pgg.el 26 Aug 2005 00:02:05 -0000 1.8
+++ pgg.el 12 Oct 2005 23:31:39 -0000
@@ -4,6 +4,7 @@
;; 2005 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
+;; Symmetric encryption added by: Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/10/28
;; Keywords: PGP
@@ -67,26 +68,110 @@
(set-window-buffer window buffer)
(shrink-window-if-larger-than-buffer window)))
+;; XXX `pgg-display-output-buffer' is a horrible name for this function.
+;; It should be something like `pgg-situate-output-or-display-error'.
(defun pgg-display-output-buffer (start end status)
+ "Situate en/decryption results or pop up an error buffer.
+
+Text from START to END is replaced by contents of output buffer if STATUS
+is true, or else the output buffer is displayed."
(if status
- (progn
- (delete-region start end)
- (insert-buffer-substring pgg-output-buffer)
- (decode-coding-region start (point) buffer-file-coding-system))
- (let ((temp-buffer-show-function
- (function pgg-temp-buffer-show-function)))
- (with-output-to-temp-buffer pgg-echo-buffer
- (set-buffer standard-output)
- (insert-buffer-substring pgg-errors-buffer)))))
+ (pgg-situate-output start end)
+ (pgg-display-error-buffer)))
+
+(defun pgg-situate-output (start end)
+ "Place en/decryption result in place of current text from START to END."
+ (delete-region start end)
+ (insert-buffer-substring pgg-output-buffer)
+ (decode-coding-region start (point) buffer-file-coding-system))
+
+(defun pgg-display-error-buffer ()
+ "Pop up an error buffer indicating the reason for an en/decryption failure."
+ (let ((temp-buffer-show-function
+ (function pgg-temp-buffer-show-function)))
+ (with-output-to-temp-buffer pgg-echo-buffer
+ (set-buffer standard-output)
+ (insert-buffer-substring pgg-errors-buffer))))
(defvar pgg-passphrase-cache (make-vector 7 0))
-(defun pgg-read-passphrase (prompt &optional key)
- (or (and pgg-cache-passphrase
- key (setq key (pgg-truncate-key-identifier key))
- (symbol-value (intern-soft key pgg-passphrase-cache)))
+(defvar pgg-pending-timers (make-vector 7 0)
+ "Hash table for managing scheduled pgg cache management timers.
+
+We associate key and timer, so the timer can be cancelled if a new
+timeout for the key is set while an old one is still pending.")
+
+(defun pgg-read-passphrase (prompt &optional key notruncate)
+ "Using PROMPT, obtain passphrase for KEY from cache or user.
+
+Truncate the key to 8 trailing characters unless NOTRUNCATE is true
+\(default false).
+
+Custom variables `pgg-cache-passphrase' and `pgg-passphrase-cache-expiry'
+regulate cache behavior."
+ (or (pgg-read-passphrase-from-cache key notruncate)
(read-passwd prompt)))
+(defun pgg-read-passphrase-from-cache (key &optional notruncate)
+ "Obtain passphrase for KEY from time-limited passphrase cache.
+
+Truncate the key to 8 trailing characters unless NOTRUNCATE is true
+\(default false).
+
+Custom variables `pgg-cache-passphrase' and `pgg-passphrase-cache-expiry'
+regulate cache behavior."
+ (and pgg-cache-passphrase
+ key (or notruncate
+ (setq key (pgg-truncate-key-identifier key)))
+ (symbol-value (intern-soft key pgg-passphrase-cache))))
+
+(defun pgg-add-passphrase-to-cache (key passphrase &optional notruncate)
+ "Associate KEY with PASSPHRASE in time-limited passphrase cache.
+
+Truncate the key to 8 trailing characters unless NOTRUNCATE is true
+\(default false).
+
+Custom variables `pgg-cache-passphrase' and `pgg-passphrase-cache-expiry'
+regulate cache behavior."
+
+ (let* ((key (if notruncate key (pgg-truncate-key-identifier key)))
+ (interned-timer-key (intern-soft key pgg-pending-timers))
+ (old-timer (symbol-value interned-timer-key))
+ new-timer)
+ (when old-timer
+ (cancel-timer old-timer)
+ (unintern interned-timer-key pgg-pending-timers))
+ (set (intern key pgg-passphrase-cache)
+ passphrase)
+ (set (intern key pgg-pending-timers)
+ (pgg-run-at-time pgg-passphrase-cache-expiry nil
+ #'pgg-remove-passphrase-from-cache
+ key notruncate))))
+
+(defun pgg-remove-passphrase-from-cache (key &optional notruncate)
+ "Omit passphrase associated with KEY in time-limited passphrase cache.
+
+Truncate the key to 8 trailing characters unless NOTRUNCATE is true
+\(default false).
+
+This is a no-op if there is not entry for KEY (eg, it's already expired.
+
+The memory for the passphrase is filled with underscores to clear any
+references to it.
+
+Custom variables `pgg-cache-passphrase' and `pgg-passphrase-cache-expiry'
+regulate cache behavior."
+ (let* ((passphrase (pgg-read-passphrase-from-cache key notruncate))
+ (key (if notruncate key (pgg-truncate-key-identifier key)))
+ (interned-timer-key (intern-soft key pgg-pending-timers))
+ (old-timer (symbol-value interned-timer-key)))
+ (when passphrase
+ (fillarray passphrase ?_)
+ (unintern key pgg-passphrase-cache))
+ (when old-timer
+ (pgg-cancel-timer old-timer)
+ (unintern interned-timer-key pgg-pending-timers))))
+
(eval-when-compile
(defmacro pgg-run-at-time-1 (time repeat function args)
(when (featurep 'xemacs)
@@ -151,27 +236,19 @@
(eval-and-compile
(if (featurep 'xemacs)
- (defun pgg-run-at-time (time repeat function &rest args)
- "Emulating function run as `run-at-time'.
+ (progn
+ (defun pgg-run-at-time (time repeat function &rest args)
+ "Emulating function run as `run-at-time'.
TIME should be nil meaning now, or a number of seconds from now.
Return an itimer object which can be used in either `delete-itimer'
or `cancel-timer'."
- (pgg-run-at-time-1 time repeat function args))
- (defalias 'pgg-run-at-time 'run-at-time)))
-
-(defun pgg-add-passphrase-cache (key passphrase)
- (setq key (pgg-truncate-key-identifier key))
- (set (intern key pgg-passphrase-cache)
- passphrase)
- (pgg-run-at-time pgg-passphrase-cache-expiry nil
- #'pgg-remove-passphrase-cache
- key))
-
-(defun pgg-remove-passphrase-cache (key)
- (let ((passphrase (symbol-value (intern-soft key pgg-passphrase-cache))))
- (when passphrase
- (fillarray passphrase ?_)
- (unintern key pgg-passphrase-cache))))
+ (pgg-run-at-time-1 time repeat function args))
+ (defun pgg-cancel-timer (timer)
+ "Emulate cancel-timer for xemacs."
+ (delete-itimer timer))
+ )
+ (defalias 'pgg-run-at-time 'run-at-time)
+ (defalias 'pgg-cancel-timer 'cancel-timer)))
(defmacro pgg-convert-lbt-region (start end lbt)
`(let ((pgg-conversion-end (set-marker (make-marker) ,end)))
@@ -222,93 +299,156 @@
;;;
;;;###autoload
-(defun pgg-encrypt-region (start end rcpts &optional sign)
+(defun pgg-encrypt-region (start end rcpts &optional sign passphrase)
"Encrypt the current region between START and END for RCPTS.
-If optional argument SIGN is non-nil, do a combined sign and encrypt."
+
+If optional argument SIGN is non-nil, do a combined sign and encrypt.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(interactive
(list (region-beginning)(region-end)
(split-string (read-string "Recipients: ") "[ \t,]+")))
(let ((status
(pgg-save-coding-system start end
(pgg-invoke "encrypt-region" (or pgg-scheme pgg-default-scheme)
- (point-min) (point-max) rcpts sign))))
+ (point-min) (point-max) rcpts sign passphrase))))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
;;;###autoload
-(defun pgg-encrypt (rcpts &optional sign start end)
+(defun pgg-encrypt-symmetric-region (start end &optional passphrase)
+ "Encrypt the current region between START and END symmetric with passphrase.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+cache or user."
+ (interactive "r")
+ (let ((status
+ (pgg-save-coding-system start end
+ (pgg-invoke "encrypt-symmetric-region"
+ (or pgg-scheme pgg-default-scheme)
+ (point-min) (point-max) passphrase))))
+ (when (interactive-p)
+ (pgg-display-output-buffer start end status))
+ status))
+
+;;;###autoload
+(defun pgg-encrypt-symmetric (&optional start end passphrase)
+ "Encrypt the current buffer using a symmetric, rather than key-pair, cipher.
+
+If optional arguments START and END are specified, only encrypt within
+the region.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
+ (interactive)
+ (let* ((start (or start (point-min)))
+ (end (or end (point-max)))
+ (status (pgg-encrypt-symmetric-region start end passphrase)))
+ (when (interactive-p)
+ (pgg-display-output-buffer start end status))
+ status))
+
+;;;###autoload
+(defun pgg-encrypt (rcpts &optional sign start end passphrase)
"Encrypt the current buffer for RCPTS.
+
If optional argument SIGN is non-nil, do a combined sign and encrypt.
+
If optional arguments START and END are specified, only encrypt within
-the region."
+the region.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(interactive (list (split-string (read-string "Recipients: ") "[ \t,]+")))
(let* ((start (or start (point-min)))
(end (or end (point-max)))
- (status (pgg-encrypt-region start end rcpts sign)))
+ (status (pgg-encrypt-region start end rcpts sign passphrase)))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
;;;###autoload
-(defun pgg-decrypt-region (start end)
- "Decrypt the current region between START and END."
+(defun pgg-decrypt-region (start end &optional passphrase)
+ "Decrypt the current region between START and END.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(interactive "r")
(let* ((buf (current-buffer))
(status
(pgg-save-coding-system start end
(pgg-invoke "decrypt-region" (or pgg-scheme pgg-default-scheme)
- (point-min) (point-max)))))
+ (point-min) (point-max) passphrase))))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
;;;###autoload
-(defun pgg-decrypt (&optional start end)
+(defun pgg-decrypt (&optional start end passphrase)
"Decrypt the current buffer.
+
If optional arguments START and END are specified, only decrypt within
-the region."
+the region.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(interactive "")
(let* ((start (or start (point-min)))
(end (or end (point-max)))
- (status (pgg-decrypt-region start end)))
+ (status (pgg-decrypt-region start end passphrase)))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
;;;###autoload
-(defun pgg-sign-region (start end &optional cleartext)
+(defun pgg-sign-region (start end &optional cleartext passphrase)
"Make the signature from text between START and END.
+
If the optional 3rd argument CLEARTEXT is non-nil, it does not create
a detached signature.
+
If this function is called interactively, CLEARTEXT is enabled
-and the the output is displayed."
+and the the output is displayed.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(interactive "r")
(let ((status (pgg-save-coding-system start end
(pgg-invoke "sign-region" (or pgg-scheme pgg-default-scheme)
(point-min) (point-max)
- (or (interactive-p) cleartext)))))
+ (or (interactive-p) cleartext)
+ passphrase))))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
;;;###autoload
-(defun pgg-sign (&optional cleartext start end)
+(defun pgg-sign (&optional cleartext start end passphrase)
"Sign the current buffer.
+
If the optional argument CLEARTEXT is non-nil, it does not create a
detached signature.
+
If optional arguments START and END are specified, only sign data
within the region.
+
If this function is called interactively, CLEARTEXT is enabled
-and the the output is displayed."
+and the the output is displayed.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(interactive "")
(let* ((start (or start (point-min)))
(end (or end (point-max)))
- (status (pgg-sign-region start end (or (interactive-p) cleartext))))
+ (status (pgg-sign-region start end
+ (or (interactive-p) cleartext)
+ passphrase)))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
-
+
;;;###autoload
(defun pgg-verify-region (start end &optional signature fetch)
"Verify the current region between START and END.
Index: pgg-gpg.el
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/gnus/pgg-gpg.el,v
retrieving revision 1.7
diff -u -r1.7 pgg-gpg.el
--- pgg-gpg.el 8 Oct 2005 08:43:33 -0000 1.7
+++ pgg-gpg.el 12 Oct 2005 23:31:39 -0000
@@ -4,6 +4,7 @@
;; 2005 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
+;; Symmetric encryption added by: Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/10/28
;; Keywords: PGP, OpenPGP, GnuPG
@@ -96,19 +97,20 @@
(delete-file output-file-name))
(set-default-file-modes orig-mode))))
-(defun pgg-gpg-possibly-cache-passphrase (passphrase &optional key)
+(defun pgg-gpg-possibly-cache-passphrase (passphrase &optional key notruncate)
(if (and pgg-cache-passphrase
(progn
(goto-char (point-min))
(re-search-forward "^\\[GNUPG:] \\(GOOD_PASSPHRASE\\>\\)\\|\\(SIG_CREATED\\)" nil t)))
- (pgg-add-passphrase-cache
+ (pgg-add-passphrase-to-cache
(or key
(progn
(goto-char (point-min))
(if (re-search-forward
"^\\[GNUPG:] NEED_PASSPHRASE\\(_PIN\\)? \\w+ ?\\w*" nil t)
(substring (match-string 0) -8))))
- passphrase)))
+ passphrase
+ notruncate)))
(defvar pgg-gpg-all-secret-keys 'unknown)
@@ -139,18 +141,53 @@
nil t)
(substring (match-string 2) 8)))))
-(defun pgg-gpg-encrypt-region (start end recipients &optional sign)
+(defun pgg-gpg-lookup-key-owner (string &optional all)
+ "Search keys associated with STRING and return owner of identified key.
+
+The value may be just the bare key id, or it may be a combination of the
+user name associated with the key and the key id, with the key id enclosed
+in \"<...>\" angle brackets.
+
+Optional ALL non-nil means search all keys, including secret keys."
+ (let ((args (list "--with-colons" "--no-greeting" "--batch"
+ (if all "--list-secret-keys" "--list-keys")
+ string))
+ (key-regexp (concat "^\\(sec\\|pub\\)"
+ ":[^:]*:[^:]*:[^:]*:\\([^:]*\\):[^:]*"
+ ":[^:]*:[^:]*:[^:]*:\\([^:]*\\):"))
+ )
+ (with-temp-buffer
+ (apply #'call-process pgg-gpg-program nil t nil args)
+ (goto-char (point-min))
+ (if (re-search-forward key-regexp
+ nil t)
+ (match-string 3)))))
+
+(defun pgg-gpg-key-id-from-key-owner (key-owner)
+ (cond ((not key-owner) nil)
+ ;; Extract bare key id from outermost paired angle brackets, if any:
+ ((string-match "[^<]*<\\(.+\\)>[^>]*" key-owner)
+ (substring key-owner (match-beginning 1)(match-end 1)))
+ (key-owner))
+ )
+
+(defun pgg-gpg-encrypt-region (start end recipients &optional sign passphrase)
"Encrypt the current region between START and END.
-If optional argument SIGN is non-nil, do a combined sign and encrypt."
+
+If optional argument SIGN is non-nil, do a combined sign and encrypt.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
- (passphrase
- (when sign
- (pgg-read-passphrase
- (format "GnuPG passphrase for %s: " pgg-gpg-user-id)
- pgg-gpg-user-id)))
+ (passphrase (or passphrase
+ (when sign
+ (pgg-read-passphrase
+ (format "GnuPG passphrase for %s: "
+ pgg-gpg-user-id)
+ pgg-gpg-user-id))))
(args
(append
- (list "--batch" "--armor" "--always-trust" "--encrypt")
+ (list "--batch" "--textmode" "--armor" "--always-trust" "--encrypt")
(if sign (list "--sign" "--local-user" pgg-gpg-user-id))
(if recipients
(apply #'nconc
@@ -169,19 +206,46 @@
(pgg-gpg-possibly-cache-passphrase passphrase)))
(pgg-process-when-success)))
-(defun pgg-gpg-decrypt-region (start end)
- "Decrypt the current region between START and END."
+(defun pgg-gpg-encrypt-symmetric-region (start end &optional passphrase)
+ "Encrypt the current region between START and END with symmetric cipher.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
+ (let* ((passphrase (or passphrase
+ (pgg-read-passphrase
+ "GnuPG passphrase for symmetric encryption: ")))
+ (args
+ (append (list "--batch" "--textmode" "--armor" "--symmetric" ))))
+ (pgg-as-lbt start end 'CRLF
+ (pgg-gpg-process-region start end passphrase pgg-gpg-program args))
+ (pgg-process-when-success)))
+
+(defun pgg-gpg-decrypt-region (start end &optional passphrase)
+ "Decrypt the current region between START and END.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(let* ((current-buffer (current-buffer))
(message-keys (with-temp-buffer
(insert-buffer-substring current-buffer)
(pgg-decode-armor-region (point-min) (point-max))))
(secret-keys (pgg-gpg-lookup-all-secret-keys))
+ ;; XXX the user is stuck if they need to use the passphrase for
+ ;; any but the first secret key for which the message is
+ ;; encrypted. ideally, we would incrementally give them a
+ ;; chance with subsequent keys each time they fail with one.
(key (pgg-gpg-select-matching-key message-keys secret-keys))
- (pgg-gpg-user-id (or key pgg-gpg-user-id pgg-default-user-id))
- (passphrase
- (pgg-read-passphrase
- (format "GnuPG passphrase for %s: " pgg-gpg-user-id)
- pgg-gpg-user-id))
+ (key-owner (and key (pgg-gpg-lookup-key-owner key t)))
+ (key-id (pgg-gpg-key-id-from-key-owner key-owner))
+ (pgg-gpg-user-id (or key-id key
+ pgg-gpg-user-id pgg-default-user-id))
+ (passphrase (or passphrase
+ (pgg-read-passphrase
+ (format (if (pgg-gpg-symmetric-key-p message-keys)
+ "Passphrase for symmetric decryption: "
+ "GnuPG passphrase for %s: ")
+ (or key-owner "??"))
+ pgg-gpg-user-id)))
(args '("--batch" "--decrypt")))
(pgg-gpg-process-region start end passphrase pgg-gpg-program args)
(with-current-buffer pgg-errors-buffer
@@ -189,11 +253,20 @@
(goto-char (point-min))
(re-search-forward "^\\[GNUPG:] DECRYPTION_OKAY\\>" nil t))))
+(defun pgg-gpg-symmetric-key-p (message-keys)
+ "True if decoded armor MESSAGE-KEYS has symmetric encryption indicator."
+ (let (result)
+ (dolist (key message-keys result)
+ (when (and (eq (car key) 3)
+ (member '(symmetric-key-algorithm) key))
+ (setq result key)))))
+
(defun pgg-gpg-select-matching-key (message-keys secret-keys)
"Choose a key from MESSAGE-KEYS that matches one of the keys in SECRET-KEYS."
(loop for message-key in message-keys
for message-key-id = (and (equal (car message-key) 1)
- (cdr (assq 'key-identifier message-key)))
+ (cdr (assq 'key-identifier
+ (cdr message-key))))
for key = (and message-key-id (pgg-lookup-key message-key-id 'encrypt))
when (and key (member key secret-keys)) return key))
[-- Attachment #3: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: new version of allout.el - patch and ChangeLog
2005-10-01 22:33 ` Ken Manheimer
@ 2005-10-20 13:57 ` Ken Manheimer
0 siblings, 0 replies; 156+ messages in thread
From: Ken Manheimer @ 2005-10-20 13:57 UTC (permalink / raw)
Cc: rms
[-- Attachment #1: Type: text/plain, Size: 612 bytes --]
This is a patch, ChangeLog, and NEWS file for a new version of allout.
the allout version differs from the version i submitted recently in
that it bases it's new encryption features on pgg instead of
mailcrypt/crypt++ - mailcrypt/crypt++ are out of the picture.
the new encryption features depend on the new pgg version of my recent
pgg patches, also posted here. i'm hoping the upgrades can be
coordinated so it all comes out harmoniously with the next release.
(i'm going to post something in the pgg thread asking about the
disposition of those patches.)
tnx!
ken
ken.manheimer@gmail.com
[-- Attachment #2: allout-news.txt --]
[-- Type: text/plain, Size: 1176 bytes --]
** allout (extensive outline navigation and authoring mode), significantly
updated:
- topic cryptography added, enabling easy gpg topic encryption and
decryption. per-topic basis enables interspersing encrypted-text and
clear-text within a single file to your hearts content, using symmetric
and/or public key modes. time-limited key caching, user-provided
symmetric key hinting and consitency verification, auto-encryption of
pending topics on save, and more, make it easy to use encryption in
powerful ways.
- many substantial fixes and refinements, including:
- repaired inhibition of inadvertant edits to concealed text
- repaired retention of topic body hanging indent upon topic depth shifts
- prevent "containment discontinuities" where a topic is shifted deeper
than the offspring-depth of its' container
- easy to adopt the distinctive bullet of a topic in a topic created
relative to it, or else select a new one, or else use the common topic
bullet
- plain bullets, by default, now alternate between only two characters
('.' and ','), yielding less cluttered outlines.
- many internal fixes.
[-- Attachment #3: allout-ChangeLog.txt --]
[-- Type: text/plain, Size: 6996 bytes --]
2005-09-30 Ken Manheimer <ken.manheimer@gmail.com>
* allout.el: omnibus changes
- new subsystem supporting easy gpg topic encryption/decryption.
(function-specific change details are below the following
synopsis)
salient features:
- both public- and symmetric-key modes are supported.
- encryption being on a per-topic basis means you can
intersperse encrypted and clear-text data in a single file
to your heart's content.
- user-provided symmetric-key hints, with consistency
verification to help user avoid confusion
- time-limited passphrase reuse, a la (and using) pgg's
passphrase cache
- write-file-hook and auto-save-hook activities to support auto
encryption of pending topics on save; provision to skip
currently-edited topic to avoid editing disturbance
topic encryption functionality depends on the latst verion of
pgg. (non-encryption allout functionality does not depend on
them.)
docstring for `allout-toggle-current-subtree-encryption'
and customization variables provide detailed description.
code changes:
'allout customization subgroup now positioned in 'outlines
group (instead of prior 'editing group)
central topic-encryption entry point:
(outline-toggle-current-subtree-encryption)
other new encryption routines:
(allout-encrypt-string, allout-encrypted-topic-p,
allout-encrypted-text-type, allout-obtain-passphrase,
allout-create-encryption-passphrase-verifier,
allout-update-passphrase-mnemonic-aids,
allout-get-encryption-passphrase-verifier,
allout-verify-passphrase, allout-next-topic-pending-encryption,
allout-encrypt-decrypted, allout-encrypted-type-prefix)
new customization variables:
(outline-topic-encryption-bullet,
outline-passphrase-verifier-handling,
outline-passphrase-hint-handling,
outline-encrypt-unencrypted-on-saves)
new operational variables:
(allout-file-passphrase-verifier-string, allout-encryption-scheme,
allout-passphrase-verifier-string, allout-passphrase-hint-string,
allout-after-save-decrypt)
new hook functions for auto-encryption of pending topics:
(allout-write-file-hook-handler, allout-auto-save-hook-handler,
allout-after-saves-handler)
(allout-post-command-business): do allout-after-save-decrypt
- added mechanism for adding and adjusting settings of Emacs file
variables.
(allout-enable-file-variable-adjustment): custom var to enable
mechanism
(allout-adjust-file-variable, allout-file-vars-section-data):
mechanism implementation
(outlineify-sticky): use file vars mechanism
- replaced broken mechanism for inhibition of concealed-text edits
using read-only text instead of before-change-functions,
because the latter can no longer veto the changes without being
disabled. read-only text is more suitable and less
complicated, anyway.
(it also noticably slows massive exposure changes, but i
consider the performance acceptable. eg, i have blanket
auto-exposure set for my daily-notes log, which has real-world
intricacy in a 1.1 Mb, 7000 topic outline, and have no problems
working with it on a 200 MhZ windows laptop.)
(allout-inhibit-protection, allout-during-write-cue,
allout-override-protect, allout-before-change-protect): removed
(allout-flag-region, allout-open-topic): revised to adjust
read-only text
(allout-open-line-not-read-only): added to facilitate read-only
text based protection
(allout-kill-line): revised to adjust read-only text, clue the
user about the inhibition
- (allout-unprotected): robustified with an unwind-protect
- disallow manually shifting a topic deeper than the offspring
depth of the previous topic - avoiding confusing "containment
discontinuities"
(allout-shift-in, allout-shift-out)
- fixed retention of body relative hanging indent during
promotion of collapsed bodies
(allout-reindent-bodies)
- made it easy to open new topic with same bullet as current
topic - topic creation functions provided with any universal
argument provokes now prompt for bullet, defaulting to the
bullet of the previous topic. very ergonomic.
(allout-open-topic)
- (allout-plain-bullets-string, allout-distinctive-bullets-string):
plain bullet alternates '.' period and ',' comma only. all
other bullets are relegated to special status (but
customizable)
- (allout-end-of-entry): renamed from 'allout-end-of-current-entry
since it actually operates w.r.t. most immediately containing
entry, visible or not
(allout-hide-current-entry, allout-show-current-entry): use the
revised version
- (allout-old-expose-topic): solidify deprecation.
- (allout-end-of-subtree): added, so we can span concealed as
well as visible topics.
(allout-end-of-current-subtree): use `allout-end-of-subtree'.
- (allout-end-of-current-heading): tweaked to just respect the
first line
- (allout-get-body-text): added
- (allout-ascend-to-depth, allout-ascend): position at end of
prefix when invoked interactively
- (allout-up-current-level): use `interactive-p'
- (allout-mode, allout-init): miscellaneous docstring and
operational refinements, as well as hookups of new encryption
stuff
- comments and routine names better distinguish between:
- topic body - the text contained after a header
- topic header - the first line, before the body
- topic entry - the header, body, and offspring
- (allout-beginning-of-current-entry): now works as advertised
- (allout-end-of-current-entry): relieved of superfluous
allout-show-entry
- (allout-isearch-rectification): refine condition for isearching
(allout-isearch-abort, allout-enwrap-isearch)
- reconciled with distributed allout.el 1.61 (current CVS version
as of 09/30/2005), including interactive-p fixes, typo and
coding style fixes, change of function prefix to "allout-", etc,
and fixed problem created in outline yanking due to the
interactive-p fixes
- using key substitution placeholders in allout-mode decstring.
- relocated some macros
(allout-flag-region, my-region-active-p)
- refined many docstrings, including anything from correcting
typos to conceptual clarification and correction
- (allout-title): fallback title is '(buffer-name)', not
non-existing '(current-buffer-name)'
- (subst-char-in-string): define if absent (for some xemacs versions)
- using `(featurep 'xemacs)' to distinguish between emacs and
xemacs.
- corrected commentary 'keywords' to legitimate ones
- updated comentary author info (using my current email address,
obscurified)
[-- Attachment #4: allout.el-patch --]
[-- Type: application/octet-stream, Size: 119044 bytes --]
Index: allout.el
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/allout.el,v
retrieving revision 1.61
diff -u -r1.61 allout.el
--- allout.el 6 Aug 2005 22:13:41 -0000 1.61
+++ allout.el 20 Oct 2005 13:47:00 -0000
@@ -3,10 +3,11 @@
;; Copyright (C) 1992, 1993, 1994, 2001, 2002, 2003, 2004,
;; 2005 Free Software Foundation, Inc.
-;; Author: Ken Manheimer <klm@zope.com>
-;; Maintainer: Ken Manheimer <klm@zope.com>
+;; Author: Ken Manheimer <ken dot manheimer at gmail dot com>
+;; Maintainer: Ken Manheimer <ken dot manheimer at gmail dot com>
;; Created: Dec 1991 - first release to usenet
-;; Keywords: outlines mode wp languages
+;; Version: $Id: allout.el,v 1.76 2005/10/20 05:26:32 klm Exp $||
+;; Keywords: outlines wp languages
;; This file is part of GNU Emacs.
@@ -34,43 +35,60 @@
;; programming languages. (For an example, see the allout code
;; itself, which is organized in ;; an outline framework.)
;;
-;; In addition to outline navigation and exposure, allout includes:
+;; Some features:
;;
-;; - topic-oriented repositioning, cut, and paste
-;; - integral outline exposure-layout
-;; - incremental search with dynamic exposure and reconcealment of hidden text
+;; - classic outline-mode topic-oriented navigation and exposure adjustment
+;; - topic-oriented editing including coherent topic and subtopic
+;; creation, promotion, demotion, cut/paste across depths, etc
+;; - incremental search with dynamic exposure and reconcealment of text
+;; - customizable bullet format enbles programming-language specific
+;; outlining, for ultimate code-folding editing. (allout code itself is
+;; formatted as an outline - do ESC-x eval-current-buffer in allout.el
+;; to try it out.)
+;; - configurable per-file initial exposure settings
+;; - symmetric-key and key-pair topic encryption, plus symmetric passphrase
+;; mnemonic support, with verification against an established passphrase
+;; (using a stashed encrypted dummy string) and user-supplied hint
+;; maintenance. (see allout-toggle-current-subtree-encryption docstring.)
;; - automatic topic-number maintenance
-;; - "Hot-spot" operation, for single-keystroke maneuvering and
-;; exposure control. (See the `allout-mode' docstring.)
+;; - "hot-spot" operation, for single-keystroke maneuvering and
+;; exposure control (see the allout-mode docstring)
+;; - easy rendering of exposed portions into numbered, latex, indented, etc
+;; outline styles
;;
-;; and many other features.
+;; and more.
;;
;; The outline menubar additions provide quick reference to many of
-;; the features, and see the docstring of the function `allout-init'
-;; for instructions on priming your Emacs session for automatic
-;; activation of `allout-mode'.
+;; the features, and see the docstring of the variable `allout-init'
+;; for instructions on priming your emacs session for automatic
+;; activation of allout-mode.
;;
;; See the docstring of the variables `allout-layout' and
;; `allout-auto-activation' for details on automatic activation of
-;; allout `allout-mode' as a minor mode. (It has changed since allout
+;; `allout-mode' as a minor mode. (It has changed since allout
;; 3.x, for those of you that depend on the old method.)
;;
;; Note - the lines beginning with `;;;_' are outline topic headers.
;; Just `ESC-x eval-current-buffer' to give it a whirl.
-;; Ken Manheimer klm@zope.com
+;; ken manheimer (ken dot manheimer at gmail dot com)
;;; Code:
;;;_* Provide
+;(provide 'outline)
(provide 'allout)
+;;;_* Dependency autoloads
+(eval-when-compile 'cl) ; otherwise, flet compilation fouls
+(autoload 'pgg-gpg-symmetric-key-p "pgg-gpg"
+ "True if decoded armor MESSAGE-KEYS has symmetric encryption indicator.")
+
;;;_* USER CUSTOMIZATION VARIABLES:
(defgroup allout nil
"Extensive outline mode for use alone and with other modes."
:prefix "allout-"
- :group 'editing
- :version "22.1")
+ :group 'outlines)
;;;_ + Layout, Mode, and Topic Header Configuration
@@ -111,8 +129,8 @@
A list value specifies a default layout for the current buffer, to be
applied upon activation of `allout-mode'. Any non-nil value will
-automatically trigger `allout-mode', provided `allout-init'
-has been called to enable it.
+automatically trigger `allout-mode' \(provided `allout-init' has been called
+to enable this behavior).
See the docstring for `allout-init' for details on setting up for
auto-mode-activation, and for `allout-expose-topic' for the format of
@@ -171,7 +189,7 @@
:group 'allout)
(make-variable-buffer-local 'allout-primary-bullet)
;;;_ = allout-plain-bullets-string
-(defcustom allout-plain-bullets-string ".:,;"
+(defcustom allout-plain-bullets-string ".,"
"*The bullets normally used in outline topic prefixes.
See `allout-distinctive-bullets-string' for the other kind of
@@ -185,7 +203,7 @@
:group 'allout)
(make-variable-buffer-local 'allout-plain-bullets-string)
;;;_ = allout-distinctive-bullets-string
-(defcustom allout-distinctive-bullets-string "*+-=>([{}&!?#%\"X@$~_\\"
+(defcustom allout-distinctive-bullets-string "*+-=>()[{}&!?#%\"X@$~_\\:;^"
"*Persistent outline header bullets used to distinguish special topics.
These bullets are used to distinguish topics from the run-of-the-mill
@@ -198,12 +216,13 @@
`?' question topics
`\(' parenthetic comment \(with a matching close paren inside)
`[' meta-note \(with a matching close ] inside)
- `\"' a quote
+ `\"' a quotation
`=' value settings
`~' \"more or less\"
+ `^' see above
-... just for example. (`#' typically has a special meaning to the
-software, according to the value of `allout-numbered-bullet'.)
+ ... for example. (`#' typically has a special meaning to the software,
+according to the value of `allout-numbered-bullet'.)
See `allout-plain-bullets-string' for the selection of
alternating bullets.
@@ -337,7 +356,6 @@
Set this var to the bullet you want to use for file cross-references."
:type '(choice (const nil) string)
:group 'allout)
-
;;;_ = allout-presentation-padding
(defcustom allout-presentation-padding 2
"*Presentation-format white-space padding factor, for greater indent."
@@ -381,7 +399,7 @@
:type 'string
:group 'allout)
;;;_ - allout-title
-(defcustom allout-title '(or buffer-file-name (current-buffer-name))
+(defcustom allout-title '(or buffer-file-name (buffer-name))
"*Expression to be evaluated to determine the title for LaTeX
formatted copy."
:type 'sexp
@@ -397,6 +415,69 @@
:type 'string
:group 'allout)
+;;;_ + Topic encryption
+;;;_ = allout-topic-encryption-bullet
+(defcustom allout-topic-encryption-bullet "~"
+ "*Bullet signifying encryption of the entry's body."
+ :type '(choice (const nil) string)
+ :group 'allout)
+;;;_ = allout-passphrase-verifier-handling
+(defcustom allout-passphrase-verifier-handling t
+ "*Enable use of symmetric encryption passphrase verifier if non-nil.
+
+See the docstring for the `allout-enable-file-variable-adjustment'
+variable for details about allout ajustment of file variables."
+ :type 'boolean
+ :group 'allout)
+(make-variable-buffer-local 'allout-passphrase-verifier-handling)
+;;;_ = allout-passphrase-hint-handling
+(defcustom allout-passphrase-hint-handling 'always
+ "*Dictate outline encryption passphrase reminder handling:
+
+ always - always show reminder when prompting
+ needed - show reminder on passphrase entry failure
+ disabled - never present or adjust reminder
+
+See the docstring for the `allout-enable-file-variable-adjustment'
+variable for details about allout ajustment of file variables."
+ :type '(choice (const always)
+ (const needed)
+ (const disabled))
+ :group 'allout)
+(make-variable-buffer-local 'allout-passphrase-hint-handling)
+;;;_ = allout-encrypt-unencrypted-on-saves
+(defcustom allout-encrypt-unencrypted-on-saves 'except-current
+ "*When saving, should topics pending encryption be encrypted?
+
+The idea is to prevent file-system exposure of any un-encrypted stuff, and
+mostly covers both deliberate file writes and auto-saves.
+
+ - Yes: encrypt all topics pending encryption, even if it's the one
+ currently being edited. \(In that case, the currently edited topic
+ will be automatically decrypted before any user interaction, so they
+ can continue editing but the copy on the file system will be
+ encrypted.)
+ Auto-saves will use the \"All except current topic\" mode if this
+ one is selected, to avoid practical difficulties - see below.
+ - All except current topic: skip the topic currently being edited, even if
+ it's pending encryption. This may expose the current topic on the
+ file sytem, but avoids the nuisance of prompts for the encryption
+ passphrase in the middle of editing for, eg, autosaves.
+ This mode is used for auto-saves for both this option and \"Yes\".
+ - No: leave it to the user to encrypt any unencrypted topics.
+
+For practical reasons, auto-saves always use the 'except-current policy
+when auto-encryption is enabled. \(Otherwise, spurious passphrase prompts
+and unavoidable timing collisions are too disruptive.) If security for a
+file requires that even the current topic is never auto-saved in the clear,
+disable auto-saves for that file."
+
+ :type '(choice (const :tag "Yes" t)
+ (const :tag "All except current topic" except-current)
+ (const :tag "No" nil))
+ :group 'allout)
+(make-variable-buffer-local 'allout-encrypt-unencrypted-on-saves)
+
;;;_ + Miscellaneous customization
;;;_ = allout-command-prefix
@@ -422,13 +503,15 @@
("\C-f" allout-forward-current-level)
("\C-b" allout-backward-current-level)
("\C-a" allout-beginning-of-current-entry)
- ("\C-e" allout-end-of-current-entry)
+ ("\C-e" allout-end-of-entry)
; Exposure commands:
("\C-i" allout-show-children)
("\C-s" allout-show-current-subtree)
("\C-h" allout-hide-current-subtree)
+ ("h" allout-hide-current-subtree)
("\C-o" allout-show-current-entry)
("!" allout-show-all)
+ ("x" allout-toggle-current-subtree-encryption)
; Alteration commands:
(" " allout-open-sibtopic)
("." allout-open-subtopic)
@@ -489,19 +572,22 @@
(make-variable-buffer-local 'allout-reindent-bodies)
-;;;_ = allout-inhibit-protection
-(defcustom allout-inhibit-protection nil
- "*Non-nil disables warnings and confirmation-checks for concealed-text edits.
-
-Outline mode uses Emacs change-triggered functions to detect unruly
-changes to concealed regions. Set this var non-nil to disable the
-protection, potentially increasing text-entry responsiveness a bit.
-
-This var takes effect at `allout-mode' activation, so you may have to
-deactivate and then reactivate the mode if you want to toggle the
-behavior."
+;;;_ = allout-enable-file-variable-adjustment
+(defcustom allout-enable-file-variable-adjustment t
+ "*If non-nil, some allout outline actions edit Emacs local file var text.
+
+This can range from changes to existing entries, addition of new ones,
+and creation of a new local variables section when necessary.
+
+Emacs file variables adjustments are also inhibited if `enable-local-variables'
+is nil.
+
+Operations potentially causing edits include allout encryption routines.
+See the docstring for `allout-toggle-current-subtree-encryption' for
+details."
:type 'boolean
:group 'allout)
+(make-variable-buffer-local 'allout-enable-file-variable-adjustment)
;;;_* CODE - no user customizations below.
@@ -509,7 +595,7 @@
;;;_ : Version
;;;_ = allout-version
(defvar allout-version
- (let ((rcs-rev "$Revision$"))
+ (let ((rcs-rev "$Revision: 1.76 $"))
(condition-case err
(save-match-data
(string-match "Revision: \\([0-9]+\\.[0-9]+\\)" rcs-rev)
@@ -728,7 +814,16 @@
(car (cdr cell)))))))
keymap-list)
map))
-
+;;;_ = allout-prior-bindings - being deprecated.
+(defvar allout-prior-bindings nil
+ "Variable for use in V18, with allout-added-bindings, for
+resurrecting, on mode deactivation, bindings that existed before
+activation. Being deprecated.")
+;;;_ = allout-added-bindings - being deprecated
+(defvar allout-added-bindings nil
+ "Variable for use in V18, with allout-prior-bindings, for
+resurrecting, on mode deactivation, bindings that existed before
+activation. Being deprecated.")
;;;_ : Menu bar
(defvar allout-mode-exposure-menu)
(defvar allout-mode-editing-menu)
@@ -759,7 +854,11 @@
["Shift Topic Out" allout-shift-out t]
["Rebullet Topic" allout-rebullet-topic t]
["Rebullet Heading" allout-rebullet-current-heading t]
- ["Number Siblings" allout-number-siblings t]))
+ ["Number Siblings" allout-number-siblings t]
+ "----"
+ ["Toggle Topic Encryption"
+ allout-toggle-current-subtree-encryption
+ (> (allout-current-depth) 1)]))
(easy-menu-define allout-mode-navigation-menu
allout-mode-map
"Allout outline navigation menu."
@@ -775,7 +874,7 @@
"----"
["Beginning of Entry"
allout-beginning-of-current-entry t]
- ["End of Entry" allout-end-of-current-entry t]
+ ["End of Entry" allout-end-of-entry t]
["End of Subtree" allout-end-of-current-subtree t]))
(easy-menu-define allout-mode-misc-menu
allout-mode-map
@@ -855,13 +954,6 @@
(setq allout-mode-prior-settings rebuild)))))
)
;;;_ : Mode-specific incidentals
-;;;_ = allout-during-write-cue nil
-(defvar allout-during-write-cue nil
- "Used to inhibit outline change-protection during file write.
-
-See also `allout-post-command-business', `allout-write-file-hook',
-`allout-before-change-protect', and `allout-post-command-business'
-functions.")
;;;_ = allout-pre-was-isearching nil
(defvar allout-pre-was-isearching nil
"Cue for isearch-dynamic-exposure mechanism, implemented in
@@ -869,22 +961,28 @@
(make-variable-buffer-local 'allout-pre-was-isearching)
;;;_ = allout-isearch-prior-pos nil
(defvar allout-isearch-prior-pos nil
- "Cue for isearch-dynamic-exposure tracking, used by `allout-isearch-expose'.")
+ "Cue for isearch-dynamic-exposure tracking, used by
+`allout-isearch-expose'.")
(make-variable-buffer-local 'allout-isearch-prior-pos)
-;;;_ = allout-override-protect nil
-(defvar allout-override-protect nil
- "Used in `allout-mode' for regulate of concealed-text protection mechanism.
-
-Allout outline mode regulates alteration of concealed text to protect
-against inadvertent, unnoticed changes. This is for use by specific,
-native outline functions to temporarily override that protection.
-It's automatically reset to nil after every buffer modification.")
-(make-variable-buffer-local 'allout-override-protect)
+;;;_ = allout-isearch-did-quit
+(defvar allout-isearch-did-quit nil
+ "Distinguishes isearch conclusion and cancellation.
+
+Maintained by allout-isearch-abort \(which is wrapped around the real
+isearch-abort), and monitored by allout-isearch-expose for action.")
+(make-variable-buffer-local 'allout-isearch-did-quit)
;;;_ > allout-unprotected (expr)
-(defmacro allout-unprotected (expression)
- "Evaluate EXPRESSION with `allout-override-protect' let-bound to t."
- `(let ((allout-override-protect t))
- ,expression))
+(defmacro allout-unprotected (expr)
+ "Enable internal outline operations to alter read-only text."
+ `(let ((was-inhibit-r-o inhibit-read-only))
+ (unwind-protect
+ (progn
+ (setq inhibit-read-only t)
+ ,expr)
+ (setq inhibit-read-only was-inhibit-r-o)
+ )
+ )
+ )
;;;_ = allout-undo-aggregation
(defvar allout-undo-aggregation 30
"Amount of successive self-insert actions to bunch together per undo.
@@ -897,14 +995,102 @@
"Horrible hack used to prevent invalid multiple triggering of outline
mode from prop-line file-var activation. Used by `allout-mode' function
to track repeats.")
-;;;_ > allout-write-file-hook ()
-(defun allout-write-file-hook ()
- "In `allout-mode', run as a `write-contents-functions' activity.
-
-Currently just sets `allout-during-write-cue', so outline change-protection
-knows to keep inactive during file write."
- (setq allout-during-write-cue t)
- nil)
+;;;_ = allout-file-passphrase-verifier-string
+(defvar allout-file-passphrase-verifier-string nil
+ "Name for use as a file variable for verifying encryption passphrase
+across sessions.")
+(make-variable-buffer-local 'allout-file-passphrase-verifier-string)
+;;;_ = allout-passphrase-verifier-string
+(defvar allout-passphrase-verifier-string nil
+ "Setting used to test solicited encryption passphrases against the one
+already associated with a file.
+
+It consists of an encrypted random string useful only to verify that a
+passphrase entered by the user is effective for decryption. The passphrase
+itself is \*not* recorded in the file anywhere, and the encrypted contents
+are random binary characters to avoid exposing greater susceptibility to
+search attacks.
+
+The verifier string is retained as an Emacs file variable, as well as in
+the emacs buffer state, if file variable adjustments are enabled. See
+`allout-enable-file-variable-adjustment' for details about that.")
+(make-variable-buffer-local 'allout-passphrase-verifier-string)
+;;;_ = allout-passphrase-hint-string
+(defvar allout-passphrase-hint-string ""
+ "Variable used to retain reminder string for file's encryption passphrase.
+
+See the description of `allout-passphrase-hint-handling' for details about how
+the reminder is deployed.
+
+The hint is retained as an Emacs file variable, as well as in the emacs buffer
+state, if file variable adjustments are enabled. See
+`allout-enable-file-variable-adjustment' for details about that.")
+(make-variable-buffer-local 'allout-passphrase-hint-string)
+(setq-default allout-passphrase-hint-string "")
+;;;_ = allout-after-save-decrypt
+(defvar allout-after-save-decrypt nil
+ "Internal variable, is nil or has the value of two points:
+
+ - the location of a topic to be decrypted after saving is done
+ - where to situate the cursor after the decryption is performed
+
+This is used to decrypt the topic that was currently being edited, if it
+was encrypted automatically as part of a file write or autosave.")
+(make-variable-buffer-local 'allout-after-save-decrypt)
+;;;_ > allout-write-file-hook-handler ()
+(defun allout-write-file-hook-handler ()
+ "Implement `allout-encrypt-unencrypted-on-saves' policy for file writes."
+
+ (if (or (not (boundp 'allout-encrypt-unencrypted-on-saves))
+ (not allout-encrypt-unencrypted-on-saves))
+ nil
+ (let ((except-mark (and (equal allout-encrypt-unencrypted-on-saves
+ 'except-current)
+ (point-marker))))
+ (if (save-excursion (goto-char (point-min))
+ (allout-next-topic-pending-encryption except-mark))
+ (progn
+ (message "auto-encrypting pending topics")
+ (sit-for 2)
+ (condition-case failure
+ (setq allout-after-save-decrypt
+ (allout-encrypt-decrypted except-mark))
+ (error (progn
+ (message
+ "allout-write-file-hook-handler suppressing error %s"
+ failure)
+ (sit-for 2))))))
+ ))
+ nil)
+;;;_ > allout-auto-save-hook-handler ()
+(defun allout-auto-save-hook-handler ()
+ "Implement `allout-encrypt-unencrypted-on-saves' policy for auto saves."
+
+ (if allout-encrypt-unencrypted-on-saves
+ ;; Always implement 'except-current policy when enabled.
+ (let ((allout-encrypt-unencrypted-on-saves 'except-current))
+ (allout-write-file-hook-handler))))
+;;;_ > allout-after-saves-handler ()
+(defun allout-after-saves-handler ()
+ "Decrypt topic encrypted for save, if it's currently being edited.
+
+Ie, if it was pending encryption and contained the point in its body before
+the save.
+
+We use values stored in `allout-after-save-decrypt' to locate the topic
+and the place for the cursor after the decryption is done."
+ (if (not (and (allout-mode-p)
+ (boundp 'allout-after-save-decrypt)
+ allout-after-save-decrypt))
+ t
+ (goto-char (car allout-after-save-decrypt))
+ (let ((was-modified (buffer-modified-p)))
+ (allout-toggle-current-subtree-encryption)
+ (if (not was-modified)
+ (set-buffer-modified-p nil)))
+ (goto-char (cadr allout-after-save-decrypt))
+ (setq allout-after-save-decrypt nil))
+ )
;;;_ #2 Mode activation
;;;_ = allout-mode
@@ -916,11 +1102,10 @@
'allout-mode)
;;;_ = allout-explicitly-deactivated
(defvar allout-explicitly-deactivated nil
- "Non-nil if `allout-mode' was last deliberately deactivated.
+ "If t, `allout-mode's last deactivation was deliberate.
So `allout-post-command-business' should not reactivate it...")
(make-variable-buffer-local 'allout-explicitly-deactivated)
;;;_ > allout-init (&optional mode)
-;;;###autoload
(defun allout-init (&optional mode)
"Prime `allout-mode' to enable/disable auto-activation, wrt `allout-layout'.
@@ -939,9 +1124,9 @@
the `allout-layout' variable. (See `allout-layout' and
`allout-expose-topic' docstrings for more details on auto layout).
-`allout-init' works by setting up (or removing)
-`allout-find-file-hook' in `find-file-hook', and giving
-`allout-auto-activation' a suitable setting.
+`allout-init' works by setting up (or removing) the `allout-mode'
+find-file-hook, and giving `allout-auto-activation' a suitable
+setting.
To prime your Emacs session for full auto-outline operation, include
the following two lines in your Emacs init file:
@@ -949,32 +1134,35 @@
\(require 'allout)
\(allout-init t)"
- (interactive
- (let ((m (completing-read
- (concat "Select outline auto setup mode "
- "(empty for report, ? for options) ")
- '(("nil")("full")("activate")("deactivate")
- ("ask") ("report") (""))
- nil
- t)))
- (if (string= m "") 'report
- (intern-soft m))))
+ (interactive)
+ (if (interactive-p)
+ (progn
+ (setq mode
+ (completing-read
+ (concat "Select outline auto setup mode "
+ "(empty for report, ? for options) ")
+ '(("nil")("full")("activate")("deactivate")
+ ("ask") ("report") (""))
+ nil
+ t))
+ (if (string= mode "")
+ (setq mode 'report)
+ (setq mode (intern-soft mode)))))
(let
;; convenience aliases, for consistent ref to respective vars:
((hook 'allout-find-file-hook)
(curr-mode 'allout-auto-activation))
(cond ((not mode)
- (setq find-file-hook (delq hook find-file-hook))
+ (setq find-file-hooks (delq hook find-file-hooks))
(if (interactive-p)
(message "Allout outline mode auto-activation inhibited.")))
((eq mode 'report)
- (if (memq hook find-file-hook)
- ;; Just punt and use the reports from each of the modes:
- (allout-init (symbol-value curr-mode))
- (allout-init nil)
- (message "Allout outline mode auto-activation inhibited.")))
- (t (add-hook 'find-file-hook hook)
+ (if (not (memq hook find-file-hooks))
+ (allout-init nil)
+ ;; Just punt and use the reports from each of the modes:
+ (allout-init (symbol-value curr-mode))))
+ (t (add-hook 'find-file-hooks hook)
(set curr-mode ; `set', not `setq'!
(cond ((eq mode 'activate)
(message
@@ -1006,6 +1194,7 @@
(easy-menu-add cur))))
;;;_ > allout-mode (&optional toggle)
;;;_ : Defun:
+;;;###autoload
(defun allout-mode (&optional toggle)
;;;_ . Doc string:
"Toggle minor mode for controlling exposure and editing of text outlines.
@@ -1022,10 +1211,11 @@
In addition to outline navigation and exposure, allout includes:
- - topic-oriented repositioning, cut, and paste
+ - topic-oriented repositioning, promotion/demotion, cut, and paste
- integral outline exposure-layout
- incremental search with dynamic exposure and reconcealment of hidden text
- automatic topic-number maintenance
+ - easy topic encryption and decryption
- \"Hot-spot\" operation, for single-keystroke maneuvering and
exposure control. \(See the allout-mode docstring.)
@@ -1035,7 +1225,7 @@
special `allout-mode' features and terminology. See also the outline
menubar additions for quick reference to many of the features, and see
the docstring of the function `allout-init' for instructions on
-priming your Emacs session for automatic activation of `allout-mode'.
+priming your emacs session for automatic activation of `allout-mode'.
The bindings are dictated by the `allout-keybindings-list' and
@@ -1043,59 +1233,72 @@
Navigation: Exposure Control:
---------- ----------------
-C-c C-n allout-next-visible-heading | C-c C-h allout-hide-current-subtree
-C-c C-p allout-previous-visible-heading | C-c C-i allout-show-children
-C-c C-u allout-up-current-level | C-c C-s allout-show-current-subtree
-C-c C-f allout-forward-current-level | C-c C-o allout-show-current-entry
-C-c C-b allout-backward-current-level | ^U C-c C-s allout-show-all
-C-c C-e allout-end-of-current-entry | allout-hide-current-leaves
-C-c C-a allout-beginning-of-current-entry, alternately, goes to hot-spot
+\\[allout-next-visible-heading] allout-next-visible-heading | \\[allout-hide-current-subtree] allout-hide-current-subtree
+\\[allout-previous-visible-heading] allout-previous-visible-heading | \\[allout-show-children] allout-show-children
+\\[allout-up-current-level] allout-up-current-level | \\[allout-show-current-subtree] allout-show-current-subtree
+\\[allout-forward-current-level] allout-forward-current-level | \\[allout-show-current-entry] allout-show-current-entry
+\\[allout-backward-current-level] allout-backward-current-level | \\[allout-show-all] allout-show-all
+\\[allout-end-of-entry] allout-end-of-entry
+\\[allout-beginning-of-current-entry,] allout-beginning-of-current-entry, alternately, goes to hot-spot
Topic Header Production:
-----------------------
-C-c<SP> allout-open-sibtopic Create a new sibling after current topic.
-C-c . allout-open-subtopic ... an offspring of current topic.
-C-c , allout-open-supertopic ... a sibling of the current topic's parent.
+\\[allout-open-sibtopic] allout-open-sibtopic Create a new sibling after current topic.
+\\[allout-open-subtopic] allout-open-subtopic ... an offspring of current topic.
+\\[allout-open-supertopic] allout-open-supertopic ... a sibling of the current topic's parent.
Topic Level and Prefix Adjustment:
---------------------------------
-C-c > allout-shift-in Shift current topic and all offspring deeper.
-C-c < allout-shift-out ... less deep.
-C-c<CR> allout-rebullet-topic Reconcile bullets of topic and its offspring
+\\[allout-shift-in] allout-shift-in Shift current topic and all offspring deeper.
+\\[allout-shift-out] allout-shift-out ... less deep.
+\\[allout-rebullet-current-heading] allout-rebullet-current-heading Prompt for alternate bullet for
+ current topic.
+\\[allout-rebullet-topic] allout-rebullet-topic Reconcile bullets of topic and its offspring
- distinctive bullets are not changed, others
alternated according to nesting depth.
-C-c * allout-rebullet-current-heading Prompt for alternate bullet for
- current topic.
-C-c # allout-number-siblings Number bullets of topic and siblings - the
+\\[allout-number-siblings] allout-number-siblings Number bullets of topic and siblings - the
offspring are not affected. With repeat
count, revoke numbering.
Topic-oriented Killing and Yanking:
----------------------------------
-C-c C-k allout-kill-topic Kill current topic, including offspring.
-C-k allout-kill-line Like kill-line, but reconciles numbering, etc.
-C-y allout-yank Yank, adjusting depth of yanked topic to
+\\[allout-kill-topic] allout-kill-topic Kill current topic, including offspring.
+\\[allout-kill-line] allout-kill-line Like kill-line, but reconciles numbering, etc.
+\\[allout-yank] allout-yank Yank, adjusting depth of yanked topic to
depth of heading if yanking into bare topic
heading (ie, prefix sans text).
-M-y allout-yank-pop Is to allout-yank as yank-pop is to yank
+\\[allout-yank-pop] allout-yank-pop Is to allout-yank as yank-pop is to yank
Misc commands:
-------------
M-x outlineify-sticky Activate outline mode for current buffer,
and establish a default file-var setting
for `allout-layout'.
-C-c C-SPC allout-mark-topic
-C-c = c allout-copy-exposed-to-buffer
+\\[allout-mark-topic] allout-mark-topic
+\\[allout-copy-exposed-to-buffer] allout-copy-exposed-to-buffer
Duplicate outline, sans concealed text, to
- buffer with name derived from derived from
- that of current buffer - \"*XXX exposed*\".
-C-c = p allout-flatten-exposed-to-buffer
+ buffer with name derived from derived from that
+ of current buffer - \"*BUFFERNAME exposed*\".
+\\[allout-flatten-exposed-to-buffer] allout-flatten-exposed-to-buffer
Like above 'copy-exposed', but convert topic
prefixes to section.subsection... numeric
format.
ESC ESC (allout-init t) Setup Emacs session for outline mode
auto-activation.
+ Encrypted Entries
+
+Outline mode supports easily togglable gpg encryption of topics, with
+niceties like support for symmetric and key-pair modes, passphrase timeout,
+passphrase consistency checking, user-provided hinting for symmetric key
+mode, and auto-encryption of topics pending encryption on save. The aim is
+to enable reliable topic privacy while preventing accidents like neglected
+encryption, encryption with a mistaken passphrase, forgetting which
+passphrase was used, and other practical pitfalls.
+
+See the `allout-toggle-current-subtree-encryption' function and
+`allout-encrypt-unencrypted-on-saves' customization variable for details.
+
HOT-SPOT Operation
Hot-spot operation provides a means for easy, single-keystroke outline
@@ -1148,11 +1351,11 @@
HEADER: The first line of a topic, include the topic PREFIX and header
text.
-PREFIX: The leading text of a topic which distinguishes it from
- normal text. It has a strict form, which consists of a
- prefix-lead string, padding, and a bullet. The bullet may be
- followed by a number, indicating the ordinal number of the
- topic among its siblings, a space, and then the header text.
+PREFIX: The leading text of a topic which distinguishes it from normal
+ text. It has a strict form, which consists of a prefix-lead
+ string, padding, and a bullet. The bullet may be followed by a
+ number, indicating the ordinal number of the topic among its
+ siblings, a space, and then the header text.
The relative length of the PREFIX determines the nesting depth
of the topic.
@@ -1223,7 +1426,7 @@
;; off on second invocation, so we detect it as best we can, and
;; skip everything.
((and same-complex-command ; Still in same complex command
- ; as last time `allout-mode' invoked.
+ ; as last time `allout-mode' invoked.
active ; Already activated.
(not explicit-activation) ; Prop-line file-vars don't have args.
(string-match "^19.1[89]" ; Bug only known to be in v19.18 and
@@ -1238,6 +1441,19 @@
; active state or *de*activation
; specifically requested:
(setq allout-explicitly-deactivated t)
+ (if (string-match "^18\." emacs-version)
+ ; Revoke those keys that remain
+ ; as we set them:
+ (let ((curr-loc (current-local-map)))
+ (mapcar (function
+ (lambda (cell)
+ (if (eq (lookup-key curr-loc (car cell))
+ (car (cdr cell)))
+ (define-key curr-loc (car cell)
+ (assq (car cell) allout-prior-bindings)))))
+ allout-added-bindings)
+ (allout-resumptions 'allout-added-bindings)
+ (allout-resumptions 'allout-prior-bindings)))
(if allout-old-style-prefixes
(progn
@@ -1246,9 +1462,12 @@
(allout-resumptions 'selective-display)
(if (and (boundp 'before-change-functions) before-change-functions)
(allout-resumptions 'before-change-functions))
- (setq write-contents-functions
- (delq 'allout-write-file-hook
- write-contents-functions))
+ (setq local-write-file-hooks
+ (delq 'allout-write-file-hook-handler
+ local-write-file-hooks))
+ (setq auto-save-hook
+ (delq 'allout-auto-save-hook-handler
+ auto-save-hook))
(allout-resumptions 'paragraph-start)
(allout-resumptions 'paragraph-separate)
(allout-resumptions (if (string-match "^18" emacs-version)
@@ -1288,25 +1507,27 @@
(cons '(allout-mode . allout-mode-map)
minor-mode-map-alist))))
+ ; V18 minor-mode key bindings:
+ ; Stash record of added bindings
+ ; for later revocation:
+ (allout-resumptions 'allout-added-bindings
+ (list allout-keybindings-list))
+ (allout-resumptions 'allout-prior-bindings
+ (list (current-local-map)))
; and add them:
(use-local-map (produce-allout-mode-map allout-keybindings-list
(current-local-map)))
)
; selective-display is the
- ; Emacs conditional exposure
+ ; emacs conditional exposure
; mechanism:
(allout-resumptions 'selective-display '(t))
- (if allout-inhibit-protection
- t
- (allout-resumptions 'before-change-functions
- '(allout-before-change-protect)))
(add-hook 'pre-command-hook 'allout-pre-command-business)
(add-hook 'post-command-hook 'allout-post-command-business)
- ; Temporarily set by any outline
- ; functions that can be trusted to
- ; deal properly with concealed text.
- (add-hook 'write-contents-functions 'allout-write-file-hook)
+ (add-hook 'local-write-file-hooks 'allout-write-file-hook-handler)
+ (make-variable-buffer-local 'auto-save-hook)
+ (add-hook 'auto-save-hook 'allout-auto-save-hook-handler)
; Custom auto-fill func, to support
; respect for topic headline,
; hanging-indents, etc:
@@ -1337,7 +1558,8 @@
(if allout-layout
(setq do-layout t))
- (if allout-isearch-dynamic-expose
+ (if (and allout-isearch-dynamic-expose
+ (not (fboundp 'allout-real-isearch-abort)))
(allout-enwrap-isearch))
(run-hooks 'allout-mode-hook)
@@ -1376,7 +1598,6 @@
) ; let*
) ; defun
;;;_ > allout-minor-mode
-;;; XXX released verion doesn't do this?
(defalias 'allout-minor-mode 'allout-mode)
;;;_ #3 Internal Position State-Tracking - "allout-recent-*" funcs
@@ -1400,12 +1621,12 @@
"Buffer point last returned by `allout-end-of-current-subtree'.")
(make-variable-buffer-local 'allout-recent-end-of-subtree)
;;;_ > allout-prefix-data (beg end)
-(defmacro allout-prefix-data (beginning end)
+(defmacro allout-prefix-data (beg end)
"Register allout-prefix state data - BEGINNING and END of prefix.
For reference by `allout-recent' funcs. Returns BEGINNING."
`(setq allout-recent-prefix-end ,end
- allout-recent-prefix-beginning ,beginning))
+ allout-recent-prefix-beginning ,beg))
;;;_ > allout-recent-depth ()
(defmacro allout-recent-depth ()
"Return depth of last heading encountered by an outline maneuvering function.
@@ -1612,9 +1833,12 @@
"Produce a location \"chart\" of subtopics of the containing topic.
Optional argument LEVELS specifies the depth \(relative to start
-depth) for the chart.
+depth) for the chart. Subsequent optional args are not for public
+use.
+
+Point is left at the end of the subtree.
-Charts are used to capture outline structure, so that outline altering
+Charts are used to capture outline structure, so that outline-altering
routines need assess the structure only once, and then use the chart
for their elaborate manipulations.
@@ -1625,11 +1849,9 @@
The chart for a topics' offspring precedes the entry for the topic
itself.
-\(fn &optional LEVELS)"
-
- ;; The other function parameters are for internal recursion, and should
- ;; not be specified by external callers. ORIG-DEPTH is depth of topic at
- ;; starting point, and PREV-DEPTH is depth of prior topic."
+The other function parameters are for internal recursion, and should
+not be specified by external callers. ORIG-DEPTH is depth of topic at
+starting point, and PREV-DEPTH is depth of prior topic."
(let ((original (not orig-depth)) ; `orig-depth' set only in recursion.
chart curr-depth)
@@ -1835,11 +2057,18 @@
(if (re-search-forward allout-line-boundary-regexp nil 'move)
(prog1 (goto-char (match-beginning 0))
(allout-prefix-data (match-beginning 2)(match-end 2)))))
-;;;_ > allout-end-of-current-subtree ()
-(defun allout-end-of-current-subtree ()
- "Put point at the end of the last leaf in the currently visible topic."
- (interactive)
- (allout-back-to-current-heading)
+;;;_ > allout-end-of-subtree (&optional current)
+(defun allout-end-of-subtree (&optional current)
+ "Put point at the end of the last leaf in the containing topic.
+
+If optional CURRENT is true (default false), then put point at the end of
+the containing visible topic.
+
+Returns the value of point."
+ (interactive "P")
+ (if current
+ (allout-back-to-current-heading)
+ (allout-goto-prefix))
(let ((level (allout-recent-depth)))
(allout-next-heading)
(while (and (not (eobp))
@@ -1851,9 +2080,16 @@
'(?\n ?\r))
(forward-char -1))
(setq allout-recent-end-of-subtree (point))))
+;;;_ > allout-end-of-current-subtree ()
+(defun allout-end-of-current-subtree ()
+ "Put point at end of last leaf in currently visible containing topic.
+
+Returns the value of point."
+ (interactive)
+ (allout-end-of-subtree t))
;;;_ > allout-beginning-of-current-entry ()
(defun allout-beginning-of-current-entry ()
- "When not already there, position point at beginning of current topic's body.
+ "When not already there, position point at beginning of current topic header.
If already there, move cursor to bullet for hot-spot operation.
\(See `allout-mode' doc string for details on hot-spot operation.)"
@@ -1863,11 +2099,10 @@
(if (and (interactive-p)
(= (point) start-point))
(goto-char (allout-current-bullet-pos)))))
-;;;_ > allout-end-of-current-entry ()
-(defun allout-end-of-current-entry ()
+;;;_ > allout-end-of-entry ()
+(defun allout-end-of-entry ()
"Position the point at the end of the current topics' entry."
(interactive)
- (allout-show-entry)
(prog1 (allout-pre-next-preface)
(if (and (not (bobp))(looking-at "^$"))
(forward-char -1))))
@@ -1875,9 +2110,27 @@
(defun allout-end-of-current-heading ()
(interactive)
(allout-beginning-of-current-entry)
- (forward-line -1)
- (end-of-line))
+ (re-search-forward "[\n\r]" nil t)
+ (forward-char -1))
(defalias 'allout-end-of-heading 'allout-end-of-current-heading)
+;;;_ > allout-get-body-text ()
+(defun allout-get-body-text ()
+ "Return the unmangled body text of the topic immediately containing point."
+ (save-excursion
+ (allout-end-of-prefix)
+ (if (not (re-search-forward "[\n\r]" nil t))
+ nil
+ (backward-char 1)
+ (let ((pre-body (point)))
+ (if (not pre-body)
+ nil
+ (allout-end-of-entry)
+ (if (not (= pre-body (point)))
+ (buffer-substring-no-properties (1+ pre-body) (point))))
+ )
+ )
+ )
+ )
;;;_ - Depth-wise
;;;_ > allout-ascend-to-depth (depth)
@@ -1892,12 +2145,16 @@
(if (= (allout-recent-depth) depth)
(progn (goto-char allout-recent-prefix-beginning)
depth)
- (goto-char last-good)))))
+ (goto-char last-good)
+ nil))
+ (if (interactive-p) (allout-end-of-prefix))))
;;;_ > allout-ascend ()
(defun allout-ascend ()
"Ascend one level, returning t if successful, nil if not."
- (if (allout-beginning-of-level)
- (allout-previous-heading)))
+ (prog1
+ (if (allout-beginning-of-level)
+ (allout-previous-heading))
+ (if (interactive-p) (allout-end-of-prefix))))
;;;_ > allout-descend-to-depth (depth)
(defun allout-descend-to-depth (depth)
"Descend to depth DEPTH within current topic.
@@ -1917,13 +2174,13 @@
nil))
)
;;;_ > allout-up-current-level (arg &optional dont-complain)
-(defun allout-up-current-level (arg &optional dont-complain interactive)
+(defun allout-up-current-level (arg &optional dont-complain)
"Move out ARG levels from current visible topic.
Positions on heading line of containing topic. Error if unable to
ascend that far, or nil if unable to ascend but optional arg
DONT-COMPLAIN is non-nil."
- (interactive "p\np")
+ (interactive "p")
(allout-back-to-current-heading)
(let ((present-level (allout-recent-depth))
(last-good (point))
@@ -1944,12 +2201,12 @@
(if (or failed
(> arg 0))
(progn (goto-char last-good)
- (if interactive (allout-end-of-prefix))
+ (if (interactive-p) (allout-end-of-prefix))
(if (not dont-complain)
(error "Can't ascend past outermost level")
- (if interactive (allout-end-of-prefix))
+ (if (interactive-p) (allout-end-of-prefix))
nil))
- (if interactive (allout-end-of-prefix))
+ (if (interactive-p) (allout-end-of-prefix))
allout-recent-prefix-beginning)))
;;;_ - Linear
@@ -1981,7 +2238,7 @@
nil))))
;;;_ > allout-previous-sibling (&optional depth backward)
(defun allout-previous-sibling (&optional depth backward)
- "Like `allout-forward-current-level', but backwards & respect invisible topics.
+ "Like `allout-forward-current-level' backwards, respecting invisible topics.
Optional DEPTH specifies depth to traverse, default current depth.
@@ -2015,7 +2272,7 @@
(let ((depth (allout-depth)))
(while (allout-previous-sibling depth nil))
(prog1 (allout-recent-depth)
- (allout-end-of-prefix))))
+ (if (interactive-p) (allout-end-of-prefix)))))
;;;_ > allout-next-visible-heading (arg)
(defun allout-next-visible-heading (arg)
"Move to the next ARG'th visible heading line, backward if arg is negative.
@@ -2053,13 +2310,13 @@
(interactive "p")
(allout-next-visible-heading (- arg)))
;;;_ > allout-forward-current-level (arg)
-(defun allout-forward-current-level (arg &optional interactive)
+(defun allout-forward-current-level (arg)
"Position point at the next heading of the same level.
Takes optional repeat-count, goes backward if count is negative.
Returns resulting position, else nil if none found."
- (interactive "p\np")
+ (interactive "p")
(let ((start-depth (allout-current-depth))
(start-point (point))
(start-arg arg)
@@ -2087,7 +2344,7 @@
(= (allout-recent-depth) start-depth)))
allout-recent-prefix-beginning
(goto-char last-good)
- (if (not interactive)
+ (if (not (interactive-p))
nil
(allout-end-of-prefix)
(error "Hit %s level %d topic, traversed %d of %d requested"
@@ -2096,10 +2353,10 @@
(- (abs start-arg) arg)
(abs start-arg))))))
;;;_ > allout-backward-current-level (arg)
-(defun allout-backward-current-level (arg &optional interactive)
+(defun allout-backward-current-level (arg)
"Inverse of `allout-forward-current-level'."
- (interactive "p\np")
- (if interactive
+ (interactive "p")
+ (if (interactive-p)
(let ((current-prefix-arg (* -1 arg)))
(call-interactively 'allout-forward-current-level))
(allout-forward-current-level (* -1 arg))))
@@ -2107,121 +2364,6 @@
;;;_ #5 Alteration
;;;_ - Fundamental
-;;;_ > allout-before-change-protect (beg end)
-(defun allout-before-change-protect (beg end)
- "Outline before-change hook, regulates changes to concealed text.
-
-Reveal concealed text that would be changed by current command, and
-offer user choice to commit or forego the change. Unchanged text is
-reconcealed. User has option to have changed text reconcealed.
-
-Undo commands are specially treated - the user is not prompted for
-choice, the undoes are always committed (based on presumption that the
-things being undone were already subject to this regulation routine),
-and undoes always leave the changed stuff exposed.
-
-Changes to concealed regions are ignored while file is being written.
-\(This is for the sake of functions that do change the file during
-writes, like crypt and zip modes.)
-
-Locally bound in outline buffers to `before-change-functions', which
-in Emacs 19 is run before any change to the buffer.
-
-Any functions which set [`this-command' to `undo', or which set]
-`allout-override-protect' non-nil (as does, eg, allout-flag-chars)
-are exempt from this restriction."
- (if (and (allout-mode-p)
- ; allout-override-protect
- ; set by functions that know what
- ; they're doing, eg outline internals:
- (not allout-override-protect)
- (not allout-during-write-cue)
- (save-match-data ; Preserve operation position state.
- ; Both beginning and end chars must
- ; be exposed:
- (save-excursion (if (memq this-command '(newline open-line))
- ;; Compensate for stupid Emacs {new,
- ;; open-}line display optimization:
- (setq beg (1+ beg)
- end (1+ end)))
- (goto-char beg)
- (or (allout-hidden-p)
- (and (not (= beg end))
- (goto-char end)
- (allout-hidden-p))))))
- (save-match-data
- (if (equal this-command 'undo)
- ;; Allow undo without inhibition.
- ;; - Undoing new and open-line hits stupid Emacs redisplay
- ;; optimization (em 19 cmds.c, ~ line 200).
- ;; - Presumably, undoing what was properly protected when
- ;; done.
- ;; - Undo may be users' only recourse in protection faults.
- ;; So, expose what getting changed:
- (progn (message "Undo! - exposing concealed target...")
- (if (allout-hidden-p)
- (allout-show-children))
- (message "Undo!"))
- (let (response
- (rehide-completely (save-excursion (allout-goto-prefix)
- (allout-hidden-p)))
- rehide-place)
-
- (save-excursion
- (if (condition-case err
- ;; Condition case to catch keyboard quits during reads.
- (progn
- ; Give them a peek where
- (save-excursion
- (if (eolp) (setq rehide-place
- (allout-goto-prefix)))
- (allout-show-entry))
- ; Present the message, but...
- ; leave the cursor at the location
- ; until they respond:
- ; Then interpret the response:
- (while
- (progn
- (message (concat "Change inside concealed"
- " region - do it? "
- "(n or 'y'/'r'eclose)"))
- (setq response (read-char))
- (not
- (cond ((memq response '(?r ?R))
- (setq response 'reclose))
- ((memq response '(?y ?Y ? ))
- (setq response t))
- ((memq response '(?n ?N 127))
- (setq response nil)
- t)
- ((eq response ??)
- (message
- "`r' means `yes, then reclose'")
- nil)
- (t (message "Please answer y, n, or r")
- (sit-for 1)
- nil)))))
- response)
- ('quit nil))
- ; Continue:
- (if (eq response 'reclose)
- (save-excursion
- (if rehide-place (goto-char rehide-place))
- (if rehide-completely
- (allout-hide-current-entry-completely)
- (allout-hide-current-entry)))
- (if (allout-ascend-to-depth (1- (allout-recent-depth)))
- (allout-show-children)
- (allout-show-to-offshoot)))
- ; Prevent:
- (if rehide-completely
- (save-excursion
- (if rehide-place (goto-char rehide-place))
- (allout-hide-current-entry-completely))
- (allout-hide-current-entry))
- (error "Change within concealed region prevented"))))))
- ) ; if
- ) ; defun
;;;_ = allout-post-goto-bullet
(defvar allout-post-goto-bullet nil
"Outline internal var, for `allout-pre-command-business' hot-spot operation.
@@ -2236,24 +2378,20 @@
(defun allout-post-command-business ()
"Outline `post-command-hook' function.
-- Null `allout-override-protect', so it's not left open.
-
- Implement (and clear) `allout-post-goto-bullet', for hot-spot
outline commands.
-- Massages `buffer-undo-list' so successive, standard character self-inserts
- are aggregated. This kludge compensates for lack of undo bunching when
- `before-change-functions' is used."
+- Decrypt topic currently being edited if it was encrypted for a save.
+
+- Massage buffer-undo-list so successive, standard character self-inserts are
+ aggregated. This kludge compensates for lack of undo bunching when
+ before-change-functions is used."
; Apply any external change func:
(if (not (allout-mode-p)) ; In allout-mode.
nil
- (setq allout-override-protect nil)
(if allout-isearch-dynamic-expose
(allout-isearch-rectification))
- (if allout-during-write-cue
- ;; Was used by allout-before-change-protect, done with it now:
- (setq allout-during-write-cue nil))
;; Undo bunching business:
(if (and (listp buffer-undo-list) ; Undo history being kept.
(equal this-command 'self-insert-command)
@@ -2282,6 +2420,11 @@
(setq buffer-undo-list
(cons (cons prev-from cur-to)
(cdr (cdr (cdr buffer-undo-list))))))))
+
+ (if (and (boundp 'allout-after-save-decrypt)
+ allout-after-save-decrypt)
+ (allout-after-saves-handler))
+
;; Implement -post-goto-bullet, if set: (must be after undo business)
(if (and allout-post-goto-bullet
(allout-current-bullet-pos))
@@ -2304,8 +2447,9 @@
char. When in this mode you can use regular cursor-positioning
command/keystrokes to relocate the cursor off of a bullet character to
return to regular interpretation of self-insert characters."
+
(if (not (allout-mode-p))
- ;; Shouldn't be invoked if not in allout allout-mode, but just in case:
+ ;; Shouldn't be invoked if not in allout-mode, but just in case:
nil
;; Register isearch status:
(if (and (boundp 'isearch-mode) isearch-mode)
@@ -2317,8 +2461,11 @@
(let* ((this-key-num (cond
((numberp last-command-char)
last-command-char)
- ((fboundp 'char-to-int)
- (char-to-int last-command-char))
+ ;; Only xemacs has characterp.
+ ((and (fboundp 'characterp)
+ (apply 'characterp
+ (list last-command-char)))
+ (apply 'char-to-int (list last-command-char)))
(t 0)))
mapped-binding)
(if (zerop this-key-num)
@@ -2340,7 +2487,7 @@
this-command mapped-binding)))))))
;;;_ > allout-find-file-hook ()
(defun allout-find-file-hook ()
- "Activate `allout-mode' when `allout-auto-activation' & `allout-layout' are non-nil.
+ "Activate `allout-mode' when `allout-auto-activation', `allout-layout' non-nil.
See `allout-init' for setup instructions."
(if (and allout-auto-activation
@@ -2353,7 +2500,7 @@
Called as part of `allout-post-command-business'."
- (let ((isearching isearch-mode))
+ (let ((isearching (and (boundp 'isearch-mode) isearch-mode)))
(cond ((and isearching (not allout-pre-was-isearching))
(allout-isearch-expose 'start))
((and isearching allout-pre-was-isearching)
@@ -2361,24 +2508,11 @@
((and (not isearching) allout-pre-was-isearching)
(allout-isearch-expose 'final))
;; Not and wasn't isearching:
- (t (setq allout-isearch-prior-pos nil)))))
+ (t (setq allout-isearch-prior-pos nil)
+ (setq allout-isearch-did-quit nil)))))
;;;_ = allout-isearch-was-font-lock
(defvar allout-isearch-was-font-lock
(and (boundp 'font-lock-mode) font-lock-mode))
-
-;;;_ > allout-flag-region (from to flag)
-(defmacro allout-flag-region (from to flag)
- "Hide or show lines from FROM to TO, via Emacs `selective-display' FLAG char.
-Ie, text following flag C-m \(carriage-return) is hidden until the
-next C-j (newline) char.
-
-Returns the endpoint of the region."
- `(let ((buffer-read-only nil)
- (allout-override-protect t))
- (subst-char-in-region ,from ,to
- (if (= ,flag ?\n) ?\r ?\n)
- ,flag t)))
-
;;;_ > allout-isearch-expose (mode)
(defun allout-isearch-expose (mode)
"MODE is either 'clear, 'start, 'continue, or 'final."
@@ -2403,21 +2537,56 @@
(setq allout-isearch-prior-pos nil)
(if (not (eq mode 'final))
(setq allout-isearch-prior-pos (cons (point) (allout-show-entry)))
- (if isearch-mode-end-hook-quit
+ (if allout-isearch-did-quit
nil
(setq allout-isearch-prior-pos nil)
- (allout-show-children)))))
+ (allout-show-children))))
+ (setq allout-isearch-did-quit nil))
;;;_ > allout-enwrap-isearch ()
(defun allout-enwrap-isearch ()
- "Impose `isearch-abort' wrapper for dynamic exposure in isearch.
+ "Impose `allout-mode' isearch-abort wrapper for dynamic exposure in isearch.
The function checks to ensure that the rebinding is done only once."
- (add-hook 'isearch-mode-end-hook 'allout-isearch-rectification))
+
+ (add-hook 'isearch-mode-end-hook 'allout-isearch-rectification)
+ (if (fboundp 'allout-real-isearch-abort)
+ ;;
+ nil
+ ; Ensure load of isearch-mode:
+ (if (or (and (fboundp 'isearch-mode)
+ (fboundp 'isearch-abort))
+ (condition-case error
+ (load-library "isearch-mode")
+ ('file-error (message
+ "Skipping isearch-mode provisions - %s '%s'"
+ (car (cdr error))
+ (car (cdr (cdr error))))
+ (sit-for 1)
+ ;; Inhibit subsequent tries and return nil:
+ (setq allout-isearch-dynamic-expose nil))))
+ ;; Isearch-mode loaded, encapsulate specific entry points for
+ ;; outline dynamic-exposure business:
+ (progn
+ ;; stash crucial isearch-mode funcs under known, private
+ ;; names, then register wrapper functions under the old
+ ;; names, in their stead:
+ (fset 'allout-real-isearch-abort (symbol-function 'isearch-abort))
+ (fset 'isearch-abort 'allout-isearch-abort)))))
+;;;_ > allout-isearch-abort ()
+(defun allout-isearch-abort ()
+ "Wrapper for allout-real-isearch-abort \(which see), to register
+actual quits."
+ (interactive)
+ (setq allout-isearch-did-quit nil)
+ (condition-case what
+ (allout-real-isearch-abort)
+ ('quit (setq allout-isearch-did-quit t)
+ (signal 'quit nil))))
;;; Prevent unnecessary font-lock while isearching!
(defvar isearch-was-font-locking nil)
(defun isearch-inhibit-font-lock ()
- "Inhibit `font-lock-mode' while isearching - for use on `isearch-mode-hook'."
+ "Inhibit `font-lock' while isearching - for use on `isearch-mode-hook'."
(if (and (allout-mode-p) (boundp 'font-lock-mode) font-lock-mode)
(setq isearch-was-font-locking t
font-lock-mode nil)))
@@ -2465,6 +2634,14 @@
(if prefix
(allout-get-prefix-bullet prefix)
(allout-get-bullet)))))
+;;;_ > allout-encrypted-type-prefix (&optional prefix)
+(defun allout-encrypted-type-prefix (&optional prefix)
+ "True if current header prefix bullet is for an encrypted entry \(body)."
+ (and allout-topic-encryption-bullet
+ (string= allout-topic-encryption-bullet
+ (if prefix
+ (allout-get-prefix-bullet prefix)
+ (allout-get-bullet)))))
;;;_ > allout-bullet-for-depth (&optional depth)
(defun allout-bullet-for-depth (&optional depth)
"Return outline topic bullet suited to optional DEPTH, or current depth."
@@ -2625,15 +2802,15 @@
((allout-sibling-index))))))
)
)
-;;;_ > allout-open-topic (relative-depth &optional before use-sib-bullet)
-(defun allout-open-topic (relative-depth &optional before use-sib-bullet)
- "Open a new topic at depth RELATIVE-DEPTH.
+;;;_ > allout-open-topic (relative-depth &optional before use_recent_bullet)
+(defun allout-open-topic (relative-depth &optional before use_recent_bullet)
+ "Open a new topic at depth DEPTH.
New topic is situated after current one, unless optional flag BEFORE
is non-nil, or unless current line is complete empty (not even
whitespace), in which case open is done on current line.
-If USE-SIB-BULLET is true, use the bullet of the prior sibling.
+If USE_RECENT_BULLET is true, offer to use the bullet of the prior sibling.
Nuances:
@@ -2660,9 +2837,11 @@
(let* ((depth (+ (allout-current-depth) relative-depth))
(opening-on-blank (if (looking-at "^\$")
(not (setq before nil))))
- opening-numbered ; Will get while computing ref-topic, below
- ref-depth ; Will get while computing ref-topic, below
- ref-bullet ; Will get while computing ref-topic, next
+ ;; bunch o vars set while computing ref-topic
+ opening-numbered
+ opening-encrypted
+ ref-depth
+ ref-bullet
(ref-topic (save-excursion
(cond ((< relative-depth 0)
(allout-ascend-to-depth depth))
@@ -2680,6 +2859,13 @@
(allout-descend-to-depth depth))
(if (allout-numbered-type-prefix)
allout-numbered-bullet))))
+ (setq opening-encrypted
+ (save-excursion
+ (and allout-topic-encryption-bullet
+ (or (<= relative-depth 0)
+ (allout-descend-to-depth depth))
+ (if (allout-numbered-type-prefix)
+ allout-numbered-bullet))))
(point)))
dbl-space
doing-beginning)
@@ -2718,19 +2904,24 @@
(if (not (bobp))
(allout-previous-heading)))
(if (and before (bobp))
- (allout-unprotected (open-line 1))))
+ (allout-unprotected (allout-open-line-not-read-only))))
(if (<= relative-depth 0)
;; Not going inwards, don't snug up:
(if doing-beginning
- (allout-unprotected (open-line (if dbl-space 2 1)))
+ (allout-unprotected
+ (if (not dbl-space)
+ (allout-open-line-not-read-only)
+ (allout-open-line-not-read-only)
+ (allout-open-line-not-read-only)))
(if before
(progn (end-of-line)
(allout-pre-next-preface)
(while (= ?\r (following-char))
(forward-char 1))
(if (not (looking-at "^$"))
- (allout-unprotected (open-line 1))))
+ (allout-unprotected
+ (allout-open-line-not-read-only))))
(allout-end-of-current-subtree)))
;; Going inwards - double-space if first offspring is,
;; otherwise snug up.
@@ -2748,38 +2939,47 @@
(progn (forward-line -1)
(looking-at "^\\s-*$"))))
(progn (forward-line 1)
- (allout-unprotected (open-line 1))))
+ (allout-unprotected
+ (allout-open-line-not-read-only))
+ (forward-line 1)))
(end-of-line))
;;(if doing-beginning (goto-char doing-beginning))
(if (not (bobp))
+ ;; We insert a newline char rather than using open-line to
+ ;; avoid rear-stickiness inheritence of read-only property.
(progn (if (and (not (> depth ref-depth))
(not before))
- (allout-unprotected (open-line 1))
+ (allout-unprotected
+ (allout-open-line-not-read-only))
(if (> depth ref-depth)
- (allout-unprotected (newline 1))
+ (allout-unprotected
+ (allout-open-line-not-read-only))
(if dbl-space
- (allout-unprotected (open-line 1))
+ (allout-unprotected
+ (allout-open-line-not-read-only))
(if (not before)
(allout-unprotected (newline 1))))))
(if dbl-space
- (allout-unprotected (newline 1)))
+ (allout-unprotected (newline 1)))
(if (and (not (eobp))
(not (bolp)))
(forward-char 1))))
))
(insert (concat (allout-make-topic-prefix opening-numbered
- t
- depth)
- " "))
+ t
+ depth)
+ " "))
;;(if doing-beginning (save-excursion (newline (if dbl-space 2 1))))
- (allout-rebullet-heading (and use-sib-bullet ref-bullet);;; solicit
+ (allout-rebullet-heading (and use_recent_bullet ;;; solicit
+ ref-bullet)
depth ;;; depth
nil ;;; number-control
nil ;;; index
- t) (end-of-line)
+ t)
+ (end-of-line)
)
)
;;;_ . open-topic contingencies
@@ -2795,6 +2995,13 @@
;;;_ ; buffer boundaries - special provisions for beginning and end ob
;;;_ ; level 1 topics have special provisions also - double space.
;;;_ ; location of new topic
+;;;_ > allout-open-line-not-read-only ()
+(defun allout-open-line-not-read-only ()
+ "Open line and remove inherited read-only text prop from new char, if any."
+ (open-line 1)
+ (if (plist-get (text-properties-at (point)) 'read-only)
+ (allout-unprotected
+ (remove-text-properties (point) (+ 1 (point)) '(read-only nil)))))
;;;_ > allout-open-subtopic (arg)
(defun allout-open-subtopic (arg)
"Open new topic header at deeper level than the current one.
@@ -2802,7 +3009,7 @@
Negative universal arg means to open deeper, but place the new topic
prior to the current one."
(interactive "p")
- (allout-open-topic 1 (> 0 arg)))
+ (allout-open-topic 1 (> 0 arg) (< 1 arg)))
;;;_ > allout-open-sibtopic (arg)
(defun allout-open-sibtopic (arg)
"Open new topic header at same level as the current one.
@@ -2812,7 +3019,7 @@
Negative universal arg means to place the new topic prior to the current
one."
(interactive "p")
- (allout-open-topic 0 (> 0 arg) (< 1 arg)))
+ (allout-open-topic 0 (> 0 arg) (not (= 1 arg))))
;;;_ > allout-open-supertopic (arg)
(defun allout-open-supertopic (arg)
"Open new topic header at shallower level than the current one.
@@ -2821,7 +3028,7 @@
topic prior to the current one."
(interactive "p")
- (allout-open-topic -1 (> 0 arg)))
+ (allout-open-topic -1 (> 0 arg) (< 1 arg)))
;;;_ - Outline Alteration
;;;_ : Topic Modification
@@ -2877,15 +3084,15 @@
(setq old-indent-begin (match-beginning 1)
old-indent-end (match-end 1))
(not (looking-at allout-regexp)))
- (if (> 0 (setq excess (- (current-column)
- old-margin)))
+ (if (> 0 (setq excess (- (- old-indent-end old-indent-begin)
+ old-margin)))
;; Text starts left of old margin - don't adjust:
nil
;; Text was hanging at or right of old left margin -
;; reindent it, preserving its existing indentation
;; beyond the old margin:
(delete-region old-indent-begin old-indent-end)
- (indent-to (+ new-margin excess)))))))))
+ (indent-to (+ new-margin excess (current-column))))))))))
;;;_ > allout-rebullet-current-heading (arg)
(defun allout-rebullet-current-heading (arg)
"Solicit new bullet for current visible heading."
@@ -2922,28 +3129,30 @@
"Adjust bullet of current topic prefix.
+All args are optional.
+
If SOLICIT is non-nil, then the choice of bullet is solicited from
user. If it's a character, then that character is offered as the
default, otherwise the one suited to the context \(according to
distinction or depth) is offered. If non-nil, then the
context-specific bullet is just used.
-Second arg NEW-DEPTH forces the topic prefix to that depth, regardless
+Second arg DEPTH forces the topic prefix to that depth, regardless
of the topic's current depth.
Third arg NUMBER-CONTROL can force the prefix to or away from
numbered form. It has effect only if `allout-numbered-bullet' is
non-nil and soliciting was not explicitly invoked (via first arg).
Its effect, numbering or denumbering, then depends on the setting
-of the fourth arg, INDEX.
+of the forth arg, INDEX.
-If NUMBER-CONTROL is non-nil and fourth arg INDEX is nil, then the
+If NUMBER-CONTROL is non-nil and forth arg INDEX is nil, then the
prefix of the topic is forced to be non-numbered. Null index and
non-nil NUMBER-CONTROL forces denumbering. Non-nil INDEX (and
non-nil NUMBER-CONTROL) forces a numbered-prefix form. If non-nil
INDEX is a number, then that number is used for the numbered
prefix. Non-nil and non-number means that the index for the
-numbered prefix will be derived by `allout-make-topic-prefix'.
+numbered prefix will be derived by allout-make-topic-prefix.
Fifth arg DO-SUCCESSORS t means re-resolve count on succeeding
siblings.
@@ -2986,9 +3195,10 @@
; Put in new prefix:
(allout-unprotected (insert new-prefix))
- ;; Reindent the body if elected and margin changed:
+ ;; Reindent the body if elected, margin changed, and not encrypted body:
(if (and allout-reindent-bodies
- (not (= new-depth current-depth)))
+ (not (= new-depth current-depth))
+ (not (allout-encrypted-topic-p)))
(allout-reindent-body current-depth new-depth))
;; Recursively rectify successive siblings of orig topic if
@@ -3010,7 +3220,7 @@
) ; defun
;;;_ > allout-rebullet-topic (arg)
(defun allout-rebullet-topic (arg)
- "Like `allout-rebullet-topic-grunt', but start from topic visible at point.
+ "Rebullet the visible topic containing point and all contained subtopics.
Descends into invisible as well as visible topics, however.
@@ -3036,18 +3246,18 @@
starting-point
index
do-successors)
+ "Like `allout-rebullet-topic', but on nearest containing topic
+\(visible or not).
- "Rebullet the topic at point, visible or invisible, and all
-contained subtopics. See `allout-rebullet-heading' for rebulleting
-behavior.
+See `allout-rebullet-heading' for rebulleting behavior.
-Arg RELATIVE-DEPTH means to shift the depth of the entire
-topic that amount.
+All arguments are optional.
-\(fn &optional RELATIVE-DEPTH)"
+First arg RELATIVE-DEPTH means to shift the depth of the entire
+topic that amount.
- ;; All args except the first one are for internal recursive use by the
- ;; function itself.
+The rest of the args are for internal recursive use by the function
+itself. The are STARTING-DEPTH, STARTING-POINT, and INDEX."
(let* ((relative-depth (or relative-depth 0))
(new-depth (allout-depth))
@@ -3177,13 +3387,42 @@
(setq more (allout-next-sibling depth nil))))))
;;;_ > allout-shift-in (arg)
(defun allout-shift-in (arg)
- "Increase depth of current heading and any topics collapsed within it."
+ "Increase depth of current heading and any topics collapsed within it.
+
+We disallow shifts that would result in the topic having a depth more than
+one level greater than the immediately previous topic, to avoid containment
+discontinuity. The first topic in the file can be adjusted to any positive
+depth, however."
(interactive "p")
+ (if (> arg 0)
+ (save-excursion
+ (allout-back-to-current-heading)
+ (if (not (bobp))
+ (let* ((current-depth (allout-recent-depth))
+ (start-point (point))
+ (predecessor-depth (progn
+ (forward-char -1)
+ (allout-goto-prefix)
+ (if (< (point) start-point)
+ (allout-recent-depth)
+ 0))))
+ (if (and (> predecessor-depth 0)
+ (> (+ current-depth arg)
+ (1+ predecessor-depth)))
+ (error (concat "May not shift deeper than offspring depth"
+ " of previous topic")))))))
(allout-rebullet-topic arg))
;;;_ > allout-shift-out (arg)
(defun allout-shift-out (arg)
- "Decrease depth of current heading and any topics collapsed within it."
+ "Decrease depth of current heading and any topics collapsed within it.
+
+We disallow shifts that would result in the topic having a depth more than
+one level greater than the immediately previous topic, to avoid containment
+discontinuity. The first topic in the file can be adjusted to any positive
+depth, however."
(interactive "p")
+ (if (< arg 0)
+ (allout-shift-in (* arg -1)))
(allout-rebullet-topic (* arg -1)))
;;;_ : Surgery (kill-ring) functions with special provisions for outlines:
;;;_ > allout-kill-line (&optional arg)
@@ -3191,24 +3430,58 @@
"Kill line, adjusting subsequent lines suitably for outline mode."
(interactive "*P")
- (if (not (and (allout-mode-p) ; active outline mode,
- allout-numbered-bullet ; numbers may need adjustment,
- (bolp) ; may be clipping topic head,
- (looking-at allout-regexp))) ; are clipping topic head.
- ;; Above conditions do not obtain - just do a regular kill:
- (kill-line arg)
- ;; Ah, have to watch out for adjustments:
- (let* ((depth (allout-depth)))
- ; Do the kill:
- (kill-line arg)
+
+ (let ((start-point (point))
+ (leading-kill-ring-entry (car kill-ring))
+ binding)
+
+ (condition-case err
+
+ (if (not (and (allout-mode-p) ; active outline mode,
+ allout-numbered-bullet ; numbers may need adjustment,
+ (bolp) ; may be clipping topic head,
+ (looking-at allout-regexp))) ; are clipping topic head.
+ ;; Above conditions do not obtain - just do a regular kill:
+ (kill-line arg)
+ ;; Ah, have to watch out for adjustments:
+ (let* ((depth (allout-depth))
+ (start-point (point))
+ binding)
+ ; Do the kill, presenting option
+ ; for read-only text:
+ (kill-line arg)
; Provide some feedback:
- (sit-for 0)
- (save-excursion
+ (sit-for 0)
+ (save-excursion
; Start with the topic
; following killed line:
- (if (not (looking-at allout-regexp))
- (allout-next-heading))
- (allout-renumber-to-depth depth)))))
+ (if (not (looking-at allout-regexp))
+ (allout-next-heading))
+ (allout-renumber-to-depth depth))))
+ ;; condition case handler:
+ (text-read-only
+ (goto-char start-point)
+ (setq binding (where-is-internal 'allout-kill-topic nil t))
+ (cond ((not binding) (setq binding ""))
+ ((arrayp binding)
+ (setq binding (mapconcat 'key-description (list binding) ", ")))
+ (t (setq binding (format "%s" binding))))
+ ;; ensure prior kill-ring leader is properly restored:
+ (if (eq leading-kill-ring-entry (cadr kill-ring))
+ ;; Aborted kill got pushed on front - ditch it:
+ (let ((got (car kill-ring)))
+ (setq kill-ring (cdr kill-ring))
+ got)
+ ;; Aborted kill got appended to prior - resurrect prior:
+ (setcar kill-ring leading-kill-ring-entry))
+ ;; make last-command skip this failed command, so kill-appending
+ ;; conditions track:
+ (setq this-command last-command)
+ (error (concat "read-only text hit - use %s allout-kill-topic to"
+ " discard collapsed stuff")
+ binding)))
+ )
+ )
;;;_ > allout-kill-topic ()
(defun allout-kill-topic ()
"Kill topic together with subtopics.
@@ -3236,14 +3509,14 @@
(>= (allout-recent-depth) depth))))
(forward-char 1)))
- (kill-region beg (point))
+ (allout-unprotected (kill-region beg (point)))
(sit-for 0)
(save-excursion
(allout-renumber-to-depth depth))))
;;;_ > allout-yank-processing ()
(defun allout-yank-processing (&optional arg)
- "Incidental outline specific business to be done just after text yanks.
+ "Incidental outline-specific business to be done just after text yanks.
Does depth adjustment of yanked topics, when:
@@ -3259,7 +3532,7 @@
The point is left in front of yanked, adjusted topics, rather than
at the end (and vice-versa with the mark). Non-adjusted yanks,
-however, are left exactly like normal, not outline specific yanks."
+however, are left exactly like normal, non-allout-specific yanks."
(interactive "*P")
; Get to beginning, leaving
@@ -3463,6 +3736,60 @@
;;;_ #6 Exposure Control
;;;_ - Fundamental
+;;;_ > allout-flag-region (from to flag)
+(defun allout-flag-region (from to flag)
+ "Hide or show lines from FROM to TO, via Emacs selective-display FLAG char.
+Ie, text following flag C-m \(carriage-return) is hidden until the
+next C-j (newline) char.
+
+Returns the endpoint of the region."
+ ;; "OFR-" prefixes to avoid collisions with vars in code calling the macro.
+ ;; ie, elisp macro vars are not 'hygenic', so distinct names are necessary.
+ (let ((was-inhibit-r-o inhibit-read-only)
+ (was-undo-list buffer-undo-list)
+ (was-modified (buffer-modified-p))
+ trans)
+ (unwind-protect
+ (save-excursion
+ (setq inhibit-read-only t)
+ (setq buffer-undo-list t)
+ (if (> from to)
+ (setq trans from from to to trans))
+ (subst-char-in-region from to
+ (if (= flag ?\n) ?\r ?\n)
+ flag t)
+ ;; adjust character read-protection on all the affected lines.
+ ;; we handle the region line-by-line.
+ (goto-char to)
+ (end-of-line)
+ (setq to (min (+ 2 (point)) (point-max)))
+ (goto-char from)
+ (beginning-of-line)
+ (while (< (point) to)
+ ;; handle from start of exposed to beginning of hidden, or eol:
+ (remove-text-properties (point)
+ (progn (if (re-search-forward "[\r\n]"
+ nil t)
+ (forward-char -1))
+ (point))
+ '(read-only nil))
+ ;; handle from start of hidden, if any, to eol:
+ (if (and (not (eobp)) (= (char-after (point)) ?\r))
+ (put-text-property (point) (progn (end-of-line) (point))
+ 'read-only t))
+ ;; Handle the end-of-line to beginning of next line:
+ (if (not (eobp))
+ (progn (forward-char 1)
+ (remove-text-properties (1- (point)) (point)
+ '(read-only nil)))))
+ )
+ (if (not was-modified)
+ (set-buffer-modified-p nil))
+ (setq inhibit-read-only was-inhibit-r-o)
+ (setq buffer-undo-list was-undo-list)
+ )
+ )
+ )
;;;_ > allout-flag-current-subtree (flag)
(defun allout-flag-current-subtree (flag)
"Hide or show subtree of currently-visible topic.
@@ -3471,9 +3798,9 @@
(save-excursion
(allout-back-to-current-heading)
- (allout-flag-region (point)
- (progn (allout-end-of-current-subtree) (1- (point)))
- flag)))
+ (let ((from (point))
+ (to (progn (allout-end-of-current-subtree) (1- (point)))))
+ (allout-flag-region from to flag))))
;;;_ - Topic-specific
;;;_ > allout-show-entry ()
@@ -3482,7 +3809,7 @@
This is a way to give restricted peek at a concealed locality without the
expense of exposing its context, but can leave the outline with aberrant
-exposure. `allout-hide-current-entry-completely' or `allout-show-to-offshoot'
+exposure. `allout-hide-current-entry-completely' or `allout-show-offshoot'
should be used after the peek to rectify the exposure."
(interactive)
@@ -3602,7 +3929,7 @@
(allout-back-to-current-heading)
(save-excursion
(allout-flag-region (point)
- (progn (allout-end-of-current-entry) (point))
+ (progn (allout-end-of-entry) (point))
?\r)))
;;;_ > allout-show-current-entry (&optional arg)
(defun allout-show-current-entry (&optional arg)
@@ -3614,8 +3941,9 @@
(allout-hide-current-entry)
(save-excursion
(allout-flag-region (point)
- (progn (allout-end-of-current-entry) (point))
- ?\n))))
+ (progn (allout-end-of-entry) (point))
+ ?\n)
+ )))
;;;_ > allout-hide-current-entry-completely ()
; ... allout-hide-current-entry-completely also for isearch dynamic exposure:
(defun allout-hide-current-entry-completely ()
@@ -3846,7 +4174,11 @@
max-pos)))
;;;_ > allout-old-expose-topic (spec &rest followers)
(defun allout-old-expose-topic (spec &rest followers)
- "Dictate wholesale exposure scheme for current topic, according to SPEC.
+
+ "Deprecated. Use `allout-expose-topic' \(with different schema
+format) instead.
+
+Dictate wholesale exposure scheme for current topic, according to SPEC.
SPEC is either a number or a list. Optional successive args
dictate exposure for subsequent siblings of current topic.
@@ -3918,9 +4250,6 @@
(allout-old-expose-topic (car followers))
(setq followers (cdr followers)))
max-pos))
-(make-obsolete 'allout-old-expose-topic
- "use `allout-expose-topic' (with different schema format) instead."
- "19.23")
;;;_ > allout-new-exposure '()
(defmacro allout-new-exposure (&rest spec)
"Literal frontend for `allout-expose-topic', doesn't evaluate arguments.
@@ -3929,6 +4258,8 @@
Cursor is left at start position.
+Use this instead of obsolete `allout-exposure'.
+
Examples:
\(allout-new-exposure (-1 () () () 1) 0)
Close current topic at current level so only the immediate
@@ -4151,13 +4482,20 @@
(cdr format)))))))
;; Put the list with first at front, to last at back:
(nreverse result))))
+;;;_ > my-region-active-p ()
+(defmacro my-region-active-p ()
+ (if (fboundp 'region-active-p)
+ '(region-active-p)
+ 'mark-active))
;;;_ > allout-process-exposed (&optional func from to frombuf
;;; tobuf format)
(defun allout-process-exposed (&optional func from to frombuf tobuf
- format start-num)
+ format &optional start-num)
"Map function on exposed parts of current topic; results to another buffer.
-Apply FUNC to exposed portions FROM position TO position in buffer
+All args are options; default values itemized below.
+
+Apply FUNCTION to exposed portions FROM position TO position in buffer
FROMBUF to buffer TOBUF. Sixth optional arg, FORMAT, designates an
alternate presentation form:
@@ -4170,7 +4508,7 @@
except for distinctive bullets.
Defaults:
- FUNC: `allout-insert-listified'
+ FUNCTION: `allout-insert-listified'
FROM: region start, if region active, else start of buffer
TO: region end, if region active, else end of buffer
FROMBUF: current buffer
@@ -4219,9 +4557,7 @@
\`(depth prefix text)'
-or
-
- \`(depth prefix text bullet-plus)'
+or \`(depth prefix text bullet-plus)'
If `bullet-plus' is specified, it is inserted just after the entire prefix."
(setq listified (cdr listified))
@@ -4237,7 +4573,7 @@
(while text
(insert (car text))
(if (setq text (cdr text))
- (insert "\n")))
+ (insert-string "\n")))
(insert "\n")))
;;;_ > allout-copy-exposed-to-buffer (&optional arg tobuf format)
(defun allout-copy-exposed-to-buffer (&optional arg tobuf format)
@@ -4440,14 +4776,14 @@
body-content bop)
; Do the head line:
(insert (concat "\\OneHeadLine{\\verb\1 "
- (allout-latex-verb-quote bullet)
- "\1}{"
- depth
- "}{\\verb\1 "
- (if head-line
- (allout-latex-verb-quote head-line)
- "")
- "\1}\n"))
+ (allout-latex-verb-quote bullet)
+ "\1}{"
+ depth
+ "}{\\verb\1 "
+ (if head-line
+ (allout-latex-verb-quote head-line)
+ "")
+ "\1}\n"))
(if (not body-lines)
nil
;;(insert "\\beginlines\n")
@@ -4509,7 +4845,668 @@
(pop-to-buffer buf)
(goto-char start-pt)))
-;;;_ #8 miscellaneous
+;;;_ #8 Encryption
+;;;_ > allout-toggle-current-subtree-encryption (&optional fetch-pass)
+(defun allout-toggle-current-subtree-encryption (&optional fetch-pass)
+ "Encrypt clear text or decrypt encoded topic contents \(body and subtopics.)
+
+Optional FETCH-PASS universal argument provokes key-pair encryption with
+single universal argument. With doubled universal argument \(value = 16),
+it forces prompting for the passphrase regardless of availability from the
+passphrase cache. With no universal argument, the appropriate passphrase
+for the is obtained from the cache, if available, else from the user.
+
+Currently only GnuPG encryption is supported.
+
+\**NOTE WELL** that the encrypted text must be ascii-armored. For gnupg
+encryption, include the option ``armor'' in your ~/.gnupg/gpg.conf file.
+
+Both symmetric-key and key-pair encryption is implemented. Symmetric is
+the default, use a single \(x4) universal argument for keypair mode.
+
+Encrypted topic's bullet is set to a `~' to signal that the contents of the
+topic \(body and subtopics, but not heading) is pending encryption or
+encrypted. `*' asterisk immediately after the bullet signals that the body
+is encrypted, its' absence means the topic is meant to be encrypted but is
+not. When a file with topics pending encryption is saved, topics pending
+encryption are encrypted. See allout-encrypt-unencrypted-on-saves for
+auto-encryption specifics.
+
+\**NOTE WELL** that automatic encryption that happens during saves will
+default to symmetric encryption - you must manually \(re)encrypt key-pair
+encrypted topics if you want them to continue to use the key-pair cipher.
+
+Level-1 topics, with prefix consisting solely of an `*' asterisk, cannot be
+encrypted. If you want to encrypt the contents of a top-level topic, use
+\\[allout-shift-in] to increase its depth.
+
+ Passphrase Caching
+
+The encryption passphrase is solicited if not currently available in the
+passphrase cache from a recent encryption action.
+
+The solicited passphrase is retained for reuse in a buffer-specific cache
+for some set period of time \(default, 60 seconds), after which the string
+is nulled. The passphrase cache timeout is customized by setting
+`pgg-passphrase-cache-expiry'.
+
+ Symmetric Passphrase Hinting and Verification
+
+If the file previously had no associated passphrase, or had a different
+passphrase than specified, the user is prompted to repeat the new one for
+corroboration. A random string encrypted by the new passphrase is set on
+the buffer-specific variable `allout-passphrase-verifier-string', for
+confirmation of the passphrase when next obtained, before encrypting or
+decrypting anything with it. This helps avoid mistakenly shifting between
+keys.
+
+If allout customization var `allout-passphrase-verifier-handling' is
+non-nil, an entry for `allout-passphrase-verifier-string' and its value is
+added to an Emacs 'local variables' section at the end of the file, which
+is created if necessary. That setting is for retention of the passphrase
+verifier across emacs sessions.
+
+Similarly, `allout-passphrase-hint-string' stores a user-provided reminder
+about their passphrase, and `allout-passphrase-hint-handling' specifies
+when the hint is presented, or if passphrase hints are disabled. If
+enabled \(see the `allout-passphrase-hint-handling' docstring for details),
+the hint string is stored in the local-variables section of the file, and
+solicited whenever the passphrase is changed."
+
+ (interactive "P")
+ (save-excursion
+ (allout-end-of-prefix t)
+
+ (if (= (allout-recent-depth) 1)
+ (error (concat "Cannot encrypt or decrypt level 1 topics -"
+ " shift it in to make it encryptable")))
+
+ (let* ((allout-buffer (current-buffer))
+ ;; Asses location:
+ (after-bullet-pos (point))
+ (was-encrypted
+ (progn (if (= (point-max) after-bullet-pos)
+ (error "no body to encrypt"))
+ (allout-encrypted-topic-p)))
+ (was-collapsed (if (not (re-search-forward "[\n\r]" nil t))
+ nil
+ (backward-char 1)
+ (looking-at "\r")))
+ (subtree-beg (1+ (point)))
+ (subtree-end (allout-end-of-subtree))
+ (subject-text (buffer-substring-no-properties subtree-beg
+ subtree-end))
+ (subtree-end-char (char-after (1- subtree-end)))
+ (subtree-trailling-char (char-after subtree-end))
+ (place-holder (if (or (string= "" subject-text)
+ (string= "\n" subject-text))
+ (error "No topic contents to %scrypt"
+ (if was-encrypted "de" "en"))))
+ ;; Assess key parameters:
+ (key-info (or
+ ;; detect the type by which it is already encrypted
+ (and was-encrypted
+ (allout-encrypted-key-info subject-text))
+ (and (member fetch-pass '(4 (4)))
+ '(keypair nil))
+ '(symmetric nil)))
+ (for-key-type (car key-info))
+ (for-key-identity (cadr key-info))
+ (fetch-pass (and fetch-pass (member fetch-pass '(16 (16)))))
+ result-text)
+
+ (setq result-text
+ (allout-encrypt-string subject-text was-encrypted
+ (current-buffer)
+ for-key-type for-key-identity fetch-pass))
+
+ ;; Replace the subtree with the processed product.
+ (allout-unprotected
+ (progn
+ (set-buffer allout-buffer)
+ (delete-region subtree-beg subtree-end)
+ (insert result-text)
+ (if was-collapsed
+ (allout-flag-region subtree-beg (1- (point)) ?\r))
+ ;; adjust trailling-blank-lines to preserve topic spacing:
+ (if (not was-encrypted)
+ (if (and (member subtree-end-char '(?\r ?\n))
+ (member subtree-trailling-char '(?\r ?\n)))
+ (insert subtree-trailling-char)))
+ ;; Ensure that the item has an encrypted-entry bullet:
+ (if (not (string= (buffer-substring-no-properties
+ (1- after-bullet-pos) after-bullet-pos)
+ allout-topic-encryption-bullet))
+ (progn (goto-char (1- after-bullet-pos))
+ (delete-char 1)
+ (insert allout-topic-encryption-bullet)))
+ (if was-encrypted
+ ;; Remove the is-encrypted bullet qualifier:
+ (progn (goto-char after-bullet-pos)
+ (delete-char 1))
+ ;; Add the is-encrypted bullet qualifier:
+ (goto-char after-bullet-pos)
+ (insert "*"))
+ )
+ )
+ )
+ )
+ )
+;;;_ > allout-encrypt-string (text decrypt allout-buffer key-type for-key
+;;; fetch-pass &optional retried verifying
+;;; passphrase)
+(defun allout-encrypt-string (text decrypt allout-buffer key-type for-key
+ fetch-pass &optional retried verifying
+ passphrase)
+ "Encrypt or decrypt message TEXT.
+
+If DECRYPT is true (default false), then decrypt instead of encrypt.
+
+FETCH-PASS (default false) forces fresh prompting for the passphrase.
+
+KEY-TYPE indicates whether to use a 'symmetric or 'keypair cipher.
+
+FOR-KEY is human readable identification of the first of the user's
+eligible secret keys a keypair decryption targets, or else nil.
+
+Optional RETRIED is for internal use - conveys the number of failed keys
+that have been solicited in sequence leading to this current call.
+
+Optional PASSPHRASE enables explicit delivery of the decryption passphrase,
+for verification purposes.
+
+Returns the resulting string, or nil if the transformation fails."
+
+ (require 'pgg)
+
+ (let* ((scheme (upcase
+ (format "%s" (or pgg-scheme pgg-default-scheme "GPG"))))
+ (for-key (and (equal key-type 'keypair)
+ (or for-key
+ (split-string (read-string
+ (format "%s message recipients: "
+ scheme))
+ "[ \t,]+"))))
+ (target-prompt-id (if (equal key-type 'keypair)
+ (if (= (length for-key) 1)
+ (car for-key) for-key)
+ (buffer-name allout-buffer)))
+ (target-cache-id (format "%s-%s"
+ key-type
+ (if (equal key-type 'keypair)
+ target-prompt-id
+ (or (buffer-file-name allout-buffer)
+ target-prompt-id))))
+ (comment "Processed by allout driving pgg")
+ work-buffer result result-text status)
+
+ (if (and fetch-pass (not passphrase))
+ ;; Force later fetch by evicting passphrase from the cache.
+ (pgg-remove-passphrase-from-cache target-cache-id t))
+
+ (catch 'encryption-failed
+
+ ;; Obtain the passphrase if we don't already have one and we're not
+ ;; doing a keypair encryption:
+ (if (not (or passphrase
+ (and (equal key-type 'keypair)
+ (not decrypt))))
+
+ (setq passphrase (allout-obtain-passphrase for-key
+ target-cache-id
+ target-prompt-id
+ key-type
+ allout-buffer
+ retried fetch-pass)))
+ (with-temp-buffer
+
+ (insert (subst-char-in-string ?\r ?\n text))
+
+ (cond
+
+ ;; symmetric:
+ ((equal key-type 'symmetric)
+ (setq status
+ (if decrypt
+
+ (pgg-decrypt (point-min) (point-max) passphrase)
+
+ (pgg-encrypt-symmetric (point-min) (point-max)
+ passphrase)))
+
+ (if status
+ (pgg-situate-output (point-min) (point-max))
+ ;; failed - handle passphrase caching
+ (if verifying
+ (throw 'encryption-failed nil)
+ (pgg-remove-passphrase-from-cache target-cache-id t)
+ (error "Symmetric-cipher encryption failed - %s"
+ "try again with different passphrase."))))
+
+ ;; encrypt 'keypair:
+ ((not decrypt)
+
+ (setq status
+
+ (pgg-encrypt for-key
+ nil (point-min) (point-max) passphrase))
+
+ (if status
+ (pgg-situate-output (point-min) (point-max))
+ (error (pgg-remove-passphrase-from-cache target-cache-id t)
+ (error "encryption failed"))))
+
+ ;; decrypt 'keypair:
+ (t
+
+ (setq status
+ (pgg-decrypt (point-min) (point-max) passphrase))
+
+ (if status
+ (pgg-situate-output (point-min) (point-max))
+ (error (pgg-remove-passphrase-from-cache target-cache-id t)
+ (error "decryption failed"))))
+ )
+
+ (setq result-text
+ (buffer-substring 1 (- (point-max) (if decrypt 0 1))))
+
+ ;; validate result - non-empty
+ (cond ((not result-text)
+ (if verifying
+ nil
+ ;; transform was fruitless, retry w/new passphrase.
+ (pgg-remove-passphrase-from-cache target-cache-id t)
+ (allout-encrypt-string text allout-buffer decrypt nil
+ (if retried (1+ retried) 1)
+ passphrase)))
+
+ ;; Barf if encryption yields extraordinary control chars:
+ ((and (not decrypt)
+ (string-match "[\C-a\C-k\C-o-\C-z\C-@]"
+ result-text))
+ (error (concat "encryption produced unusable"
+ " non-armored text - reconfigure!")))
+
+ ;; valid result and just verifying or non-symmetric:
+ ((or verifying (not (equal key-type 'symmetric)))
+ (if (or verifying decrypt)
+ (pgg-add-passphrase-to-cache target-cache-id
+ passphrase t))
+ result-text)
+
+ ;; valid result and regular symmetric - "register"
+ ;; passphrase with mnemonic aids/cache.
+ (t
+ (set-buffer allout-buffer)
+ (if passphrase
+ (pgg-add-passphrase-to-cache target-cache-id
+ passphrase t))
+ (allout-update-passphrase-mnemonic-aids for-key passphrase
+ allout-buffer)
+ result-text)
+ )
+ )
+ )
+ )
+ )
+;;;_ > allout-obtain-passphrase (for-key cache-id prompt-id key-type
+;;; allout-buffer retried fetch-pass)
+(defun allout-obtain-passphrase (for-key cache-id prompt-id key-type
+ allout-buffer retried fetch-pass)
+ "Obtain passphrase for a key from the cache or else from the user.
+
+When obtaining from the user, symmetric-cipher passphrases are verified
+against either, if available and enabled, a random string that was
+encrypted against the passphrase, or else against repeated entry by the
+user for corroboration.
+
+FOR-KEY is the key for which the passphrase is being obtained.
+
+CACHE-ID is the cache id of the key for the passphrase.
+
+PROMPT-ID is the id for use when prompting the user.
+
+KEY-TYPE is either 'symmetric or 'keypair.
+
+ALLOUT-BUFFER is the buffer containing the entry being en/decrypted.
+
+RETRIED is the number of this attempt to obtain this passphrase.
+
+FETCH-PASS causes the passphrase to be solicited from the user, regardless
+of the availability of a cached copy."
+
+ (if (not (equal key-type 'symmetric))
+ ;; do regular passphrase read on non-symmetric passphrase:
+ (pgg-read-passphrase (format "%s passphrase%s: "
+ (upcase (format "%s" (or pgg-scheme
+ pgg-default-scheme
+ "GPG")))
+ (if prompt-id
+ (format " for %s" prompt-id)
+ ""))
+ cache-id t)
+
+ ;; Symmetric hereon:
+
+ (save-excursion
+ (set-buffer allout-buffer)
+ (let* ((hint (if (and (not (string= allout-passphrase-hint-string ""))
+ (or (equal allout-passphrase-hint-handling 'always)
+ (and (equal allout-passphrase-hint-handling
+ 'needed)
+ retried)))
+ (format " [%s]" allout-passphrase-hint-string)
+ ""))
+ (retry-message (if retried (format " (%s retry)" retried) ""))
+ (prompt-sans-hint (format "'%s' symmetric passphrase%s: "
+ prompt-id retry-message))
+ (full-prompt (format "'%s' symmetric passphrase%s%s: "
+ prompt-id hint retry-message))
+ (prompt full-prompt)
+ (verifier-string (allout-get-encryption-passphrase-verifier))
+
+ (cached (and (not fetch-pass)
+ (pgg-read-passphrase-from-cache cache-id t)))
+ (got-pass (or cached
+ (pgg-read-passphrase full-prompt cache-id t)))
+
+ confirmation)
+
+ (if (not got-pass)
+ nil
+
+ ;; Duplicate our handle on the passphrase so it's not clobbered by
+ ;; deactivate-passwd memory clearing:
+ (setq got-pass (format "%s" got-pass))
+
+ (cond (verifier-string
+ (save-window-excursion
+ (if (allout-encrypt-string verifier-string 'decrypt
+ allout-buffer 'symmetric
+ for-key nil 0 'verifying
+ got-pass)
+ (setq confirmation (format "%s" got-pass))))
+
+ (if (and (not confirmation)
+ (if (yes-or-no-p
+ (concat "Passphrase differs from established"
+ " - use new one instead? "))
+ ;; deactivate password for subsequent
+ ;; confirmation:
+ (progn
+ (pgg-remove-passphrase-from-cache cache-id t)
+ (setq prompt prompt-sans-hint)
+ nil)
+ t))
+ (progn (pgg-remove-passphrase-from-cache cache-id t)
+ (error "Wrong passphrase."))))
+ ;; No verifier string - force confirmation by repetition of
+ ;; (new) passphrase:
+ ((or fetch-pass (not cached))
+ (pgg-remove-passphrase-from-cache cache-id t))))
+ ;; confirmation vs new input - doing pgg-read-passphrase will do the
+ ;; right thing, in either case:
+ (if (not confirmation)
+ (setq confirmation
+ (pgg-read-passphrase (concat prompt
+ " ... confirm spelling: ")
+ cache-id t)))
+ (prog1
+ (if (equal got-pass confirmation)
+ confirmation
+ (if (yes-or-no-p (concat "spelling of original and"
+ " confirmation differ - retry? "))
+ (progn (setq retried (if retried (1+ retried) 1))
+ (pgg-remove-passphrase-from-cache cache-id t)
+ ;; recurse to this routine:
+ (pgg-read-passphrase prompt-sans-hint cache-id t))
+ (pgg-remove-passphrase-from-cache cache-id t)
+ (error "Confirmation failed.")))
+ ;; reduce opportunity for memory cherry-picking by zeroing duplicate:
+ (dotimes (i (length got-pass))
+ (aset got-pass i 0))
+ )
+ )
+ )
+ )
+ )
+;;;_ > allout-encrypted-topic-p ()
+(defun allout-encrypted-topic-p ()
+ "True if the current topic is encryptable and encrypted."
+ (save-excursion
+ (allout-end-of-prefix t)
+ (and (string= (buffer-substring-no-properties (1- (point)) (point))
+ allout-topic-encryption-bullet)
+ (looking-at "\\*"))
+ )
+ )
+;;;_ > allout-encrypted-key-info (text)
+;; XXX gpg-specific, alas
+(defun allout-encrypted-key-info (text)
+ "Return a pair of the key type and identity of a recipient's secret key.
+
+The key type is one of 'symmetric or 'keypair.
+
+if 'keypair, and some of the user's secret keys are among those for which
+the message was encoded, return the identity of the first. otherwise,
+return nil for the second item of the pair.
+
+An error is raised if the text is not encrypted."
+ (require 'pgg-parse)
+ (save-excursion
+ (with-temp-buffer
+ (insert (subst-char-in-string ?\r ?\n text))
+ (let* ((parsed-armor (pgg-parse-armor-region (point-min) (point-max)))
+ (type (if (pgg-gpg-symmetric-key-p parsed-armor)
+ 'symmetric
+ 'keypair))
+ secret-keys first-secret-key for-key-owner)
+ (if (equal type 'keypair)
+ (setq secret-keys (pgg-gpg-lookup-all-secret-keys)
+ first-secret-key (pgg-gpg-select-matching-key parsed-armor
+ secret-keys)
+ for-key-owner (and first-secret-key
+ (pgg-gpg-lookup-key-owner
+ first-secret-key))))
+ (list type (pgg-gpg-key-id-from-key-owner for-key-owner))
+ )
+ )
+ )
+ )
+;;;_ > allout-create-encryption-passphrase-verifier (passphrase)
+(defun allout-create-encryption-passphrase-verifier (passphrase)
+ "Encrypt random message for later validation of symmetric key's passphrase."
+ ;; use 20 random ascii characters, across the entire ascii range.
+ (random t)
+ (let ((spew (make-string 20 ?\0)))
+ (dotimes (i (length spew))
+ (aset spew i (1+ (random 254))))
+ (allout-encrypt-string spew nil (current-buffer) 'symmetric
+ nil nil 0 passphrase))
+ )
+;;;_ > allout-update-passphrase-mnemonic-aids (for-key passphrase
+;;; outline-buffer)
+(defun allout-update-passphrase-mnemonic-aids (for-key passphrase
+ outline-buffer)
+ "Update passphrase verifier and hint strings if necessary.
+
+See `allout-passphrase-verifier-string' and `allout-passphrase-hint-string'
+settings.
+
+PASSPHRASE is the passphrase being mnemonicized
+
+OUTLINE-BUFFER is the buffer of the outline being adjusted.
+
+These are used to help the user keep track of the passphrase they use for
+symmetric encryption in the file.
+
+Behavior is governed by `allout-passphrase-verifier-handling',
+`allout-passphrase-hint-handling', and also, controlling whether the values
+are preserved on Emacs local file variables,
+`allout-enable-file-variable-adjustment'."
+
+ ;; If passphrase doesn't agree with current verifier:
+ ;; - adjust the verifier
+ ;; - if passphrase hint handling is enabled, adjust the passphrase hint
+ ;; - if file var settings are enabled, adjust the file vars
+
+ (let* ((new-verifier-needed (not (allout-verify-passphrase
+ for-key passphrase outline-buffer)))
+ (new-verifier-string
+ (if new-verifier-needed
+ ;; Collapse to a single line and enclose in string quotes:
+ (subst-char-in-string
+ ?\n ?\C-a (allout-create-encryption-passphrase-verifier
+ passphrase))))
+ new-hint)
+ (when new-verifier-string
+ ;; do the passphrase hint first, since it's interactive
+ (when (and allout-passphrase-hint-handling
+ (not (equal allout-passphrase-hint-handling 'disabled)))
+ (setq new-hint
+ (read-from-minibuffer "Passphrase hint to jog your memory: "
+ allout-passphrase-hint-string))
+ (when (not (string= new-hint allout-passphrase-hint-string))
+ (setq allout-passphrase-hint-string new-hint)
+ (allout-adjust-file-variable "allout-passphrase-hint-string"
+ allout-passphrase-hint-string)))
+ (when allout-passphrase-verifier-handling
+ (setq allout-passphrase-verifier-string new-verifier-string)
+ (allout-adjust-file-variable "allout-passphrase-verifier-string"
+ allout-passphrase-verifier-string))
+ )
+ )
+ )
+;;;_ > allout-get-encryption-passphrase-verifier ()
+(defun allout-get-encryption-passphrase-verifier ()
+ "Return text of the encrypt passphrase verifier, unmassaged, or nil if none.
+
+Derived from value of `allout-file-passphrase-verifier-string'."
+
+ (let ((verifier-string (and (boundp 'allout-passphrase-verifier-string)
+ allout-passphrase-verifier-string)))
+ (if verifier-string
+ ;; Return it uncollapsed
+ (subst-char-in-string ?\C-a ?\n verifier-string))
+ )
+ )
+;;;_ > allout-verify-passphrase (key passphrase allout-buffer)
+(defun allout-verify-passphrase (key passphrase allout-buffer)
+ "True if passphrase successfully decrypts verifier, nil otherwise.
+
+\"Otherwise\" includes absence of passphrase verifier."
+ (save-excursion
+ (set-buffer allout-buffer)
+ (and (boundp 'allout-passphrase-verifier-string)
+ allout-passphrase-verifier-string
+ (allout-encrypt-string (allout-get-encryption-passphrase-verifier)
+ 'decrypt allout-buffer 'symmetric
+ key nil 0 'verifying passphrase)
+ t)))
+;;;_ > allout-next-topic-pending-encryption (&optional except-mark)
+(defun allout-next-topic-pending-encryption (&optional except-mark)
+ "Return the point of the next topic pending encryption, or nil if none.
+
+EXCEPT-MARK identifies a point whose containing topics should be excluded
+from encryption. This supports 'except-current mode of
+`allout-encrypt-unencrypted-on-saves'.
+
+Such a topic has the allout-topic-encryption-bullet without an
+immediately following '*' that would mark the topic as being encrypted. It
+must also have content."
+ (let (done got content-beg)
+ (while (not done)
+
+ (if (not (re-search-forward
+ (format "\\(\\`\\|[\n\r]\\)%s *%s[^*]"
+ (regexp-quote allout-header-prefix)
+ (regexp-quote allout-topic-encryption-bullet))
+ nil t))
+ (setq got nil
+ done t)
+ (goto-char (setq got (match-beginning 0)))
+ (if (looking-at "[\n\r]")
+ (forward-char 1))
+ (setq got (point)))
+
+ (cond ((not got)
+ (setq done t))
+
+ ((not (re-search-forward "[\n\r]"))
+ (setq got nil
+ done t))
+
+ ((eobp)
+ (setq got nil
+ done t))
+
+ (t
+ (setq content-beg (point))
+ (backward-char 1)
+ (allout-end-of-subtree)
+ (if (or (<= (point) content-beg)
+ (and except-mark
+ (<= content-beg except-mark)
+ (>= (point) except-mark)))
+ ;; Continue looking
+ (setq got nil)
+ ;; Got it!
+ (setq done t)))
+ )
+ )
+ (if got
+ (goto-char got))
+ )
+ )
+;;;_ > allout-encrypt-decrypted (&optional except-mark)
+(defun allout-encrypt-decrypted (&optional except-mark)
+ "Encrypt topics pending encryption except those containing exemption point.
+
+EXCEPT-MARK identifies a point whose containing topics should be excluded
+from encryption. This supports 'except-current mode of
+`allout-encrypt-unencrypted-on-saves'.
+
+If a topic that is currently being edited was encrypted, we return a list
+containing the location of the topic and the location of the cursor just
+before the topic was encrypted. This can be used, eg, to decrypt the topic
+and exactly resituate the cursor if this is being done as part of a file
+save. See `allout-encrypt-unencrypted-on-saves' for more info."
+
+ (interactive "p")
+ (save-excursion
+ (let ((current-mark (point-marker))
+ was-modified
+ bo-subtree
+ editing-topic editing-point)
+ (goto-char (point-min))
+ (while (allout-next-topic-pending-encryption except-mark)
+ (setq was-modified (buffer-modified-p))
+ (if (save-excursion
+ (and (boundp 'allout-encrypt-unencrypted-on-saves)
+ allout-encrypt-unencrypted-on-saves
+ (setq bo-subtree (re-search-forward "[\n\r]"))
+ ;; Not collapsed:
+ (string= (match-string 0) "\n")
+ (>= current-mark (point))
+ (allout-end-of-current-subtree)
+ (<= current-mark (point))))
+ (setq editing-topic (point)
+ ;; we had to wait for this 'til now so prior topics are
+ ;; encrypted, any relevant text shifts are in place:
+ editing-point (marker-position current-mark)))
+ (allout-toggle-current-subtree-encryption)
+ (if (not was-modified)
+ (set-buffer-modified-p nil))
+ )
+ (if (not was-modified)
+ (set-buffer-modified-p nil))
+ (if editing-topic (list editing-topic editing-point))
+ )
+ )
+ )
+
+;;;_ #9 miscellaneous
;;;_ > allout-mark-topic ()
(defun allout-mark-topic ()
"Put the region around topic currently containing point."
@@ -4521,7 +5518,9 @@
(exchange-point-and-mark))
;;;_ > outlineify-sticky ()
;; outlinify-sticky is correct spelling; provide this alias for sticklers:
+;;;###autoload
(defalias 'outlinify-sticky 'outlineify-sticky)
+;;;###autoload
(defun outlineify-sticky (&optional arg)
"Activate outline mode and establish file var so it is started subsequently.
@@ -4538,22 +5537,100 @@
t
(allout-open-topic 2)
(insert (concat "Dummy outline topic header - see"
- "`allout-mode' docstring: `^Hm'."))
- (forward-line 1)
+ "`allout-mode' docstring: `^Hm'."))
+ (allout-adjust-file-variable
+ "allout-layout" (format "%s" (or allout-layout '(-1 : 0)))))))
+;;;_ > allout-file-vars-section-data ()
+(defun allout-file-vars-section-data ()
+ "Return data identifying the file-vars section, or nil if none.
+
+Returns list `(beginning-point prefix-string suffix-string)'."
+ ;; minimally gleaned from emacs 21.4 files.el hack-local-variables function.
+ (let (beg prefix suffix)
+ (save-excursion
(goto-char (point-max))
- (open-line 1)
- (allout-open-topic 0)
- (insert "Local emacs vars.\n")
- (allout-open-topic 1)
- (insert "(`allout-layout' is for allout.el allout-mode)\n")
- (allout-open-topic 0)
- (insert "Local variables:\n")
- (allout-open-topic 0)
- (insert (format "allout-layout: %s\n"
- (or allout-layout
- '(-1 : 0))))
- (allout-open-topic 0)
- (insert "End:\n"))))
+ (search-backward "\n\^L" (max (- (point-max) 3000) (point-min)) 'move)
+ (if (let ((case-fold-search t))
+ (not (search-forward "Local Variables:" nil t)))
+ nil
+ (setq beg (- (point) 16))
+ (setq suffix (buffer-substring-no-properties
+ (point)
+ (progn (if (re-search-forward "[\n\r]" nil t)
+ (forward-char -1))
+ (point))))
+ (setq prefix (buffer-substring-no-properties
+ (progn (if (re-search-backward "[\n\r]" nil t)
+ (forward-char 1))
+ (point))
+ beg))
+ (list beg prefix suffix))
+ )
+ )
+ )
+;;;_ > allout-adjust-file-variable (varname value)
+(defun allout-adjust-file-variable (varname value)
+ "Adjust the setting of an emacs file variable named VARNAME to VALUE.
+
+This activity is inhibited if either `enable-local-variables'
+`allout-enable-file-variable-adjustment' are nil.
+
+When enabled, an entry for the variable is created if not already present,
+or changed if established with a different value. The section for the file
+variables, itself, is created if not already present. When created, the
+section lines \(including the section line) exist as second-level topics in
+a top-level topic at the end of the file.
+
+enable-local-variables must be true for any of this to happen."
+ (if (not (and enable-local-variables
+ allout-enable-file-variable-adjustment))
+ nil
+ (save-excursion
+ (let ((section-data (allout-file-vars-section-data))
+ beg prefix suffix)
+ (if section-data
+ (setq beg (car section-data)
+ prefix (cadr section-data)
+ suffix (car (cddr section-data)))
+ ;; create the section
+ (goto-char (point-max))
+ (open-line 1)
+ (allout-open-topic 0)
+ (end-of-line)
+ (insert "Local emacs vars.\n")
+ (allout-open-topic 1)
+ (setq beg (point)
+ suffix ""
+ prefix (buffer-substring-no-properties (progn
+ (beginning-of-line)
+ (point))
+ beg))
+ (goto-char beg)
+ (insert "Local variables:\n")
+ (allout-open-topic 0)
+ (insert "End:\n")
+ )
+ ;; look for existing entry or create one, leaving point for insertion
+ ;; of new value:
+ (goto-char beg)
+ (allout-show-to-offshoot)
+ (if (search-forward (concat "\n" prefix varname ":") nil t)
+ (let* ((value-beg (point))
+ (line-end (progn (if (re-search-forward "[\n\r]" nil t)
+ (forward-char -1))
+ (point)))
+ (value-end (- line-end (length suffix))))
+ (if (> value-end value-beg)
+ (delete-region value-beg value-end)))
+ (end-of-line)
+ (open-line 1)
+ (forward-line 1)
+ (insert (concat prefix varname ":")))
+ (insert (format " %S%s" value suffix))
+ )
+ )
+ )
+ )
;;;_ > solicit-char-in-string (prompt string &optional do-defaulting)
(defun solicit-char-in-string (prompt string &optional do-defaulting)
"Solicit (with first arg PROMPT) choice of a character from string STRING.
@@ -4594,8 +5671,7 @@
Representations of actual backslashes - '\\\\\\\\' - are left as a
single backslash.
-\(fn REGEXP)"
-;; Optional arg SUCCESSIVE-BACKSLASHES is used internally for recursion.
+Optional arg SUCCESSIVE-BACKSLASHES is used internally for recursion."
(if (string= regexp "")
""
@@ -4611,11 +5687,6 @@
(regexp-sans-escapes (substring regexp 1)))
;; Exclude first char, but maintain count:
(regexp-sans-escapes (substring regexp 1) successive-backslashes))))
-;;;_ > my-region-active-p ()
-(defmacro my-region-active-p ()
- (if (fboundp 'region-active-p)
- '(region-active-p)
- 'mark-active))
;;;_ - add-hook definition for divergent emacsen
;;;_ > add-hook (hook function &optional append)
(if (not (fboundp 'add-hook))
@@ -4636,17 +5707,29 @@
(if append
(nconc (symbol-value hook) (list function))
(cons function (symbol-value hook)))))))
+;;;_ > subst-char-in-string if necessary
+(if (not (fboundp 'subst-char-in-string))
+ (defun subst-char-in-string (fromchar tochar string &optional inplace)
+ "Replace FROMCHAR with TOCHAR in STRING each time it occurs.
+Unless optional argument INPLACE is non-nil, return a new string."
+ (let ((i (length string))
+ (newstr (if inplace string (copy-sequence string))))
+ (while (> i 0)
+ (setq i (1- i))
+ (if (eq (aref newstr i) fromchar)
+ (aset newstr i tochar)))
+ newstr)))
;;;_ : my-mark-marker to accommodate divergent emacsen:
(defun my-mark-marker (&optional force buffer)
"Accommodate the different signature for `mark-marker' across Emacsen.
-XEmacs takes two optional args, while GNU Emacs does not,
+XEmacs takes two optional args, while mainline GNU Emacs does not,
so pass them along when appropriate."
(if (featurep 'xemacs)
- (mark-marker force buffer)
+ (apply 'mark-marker force buffer)
(mark-marker)))
-;;;_ #9 Under development
+;;;_ #10 Under development
;;;_ > allout-bullet-isearch (&optional bullet)
(defun allout-bullet-isearch (&optional bullet)
"Isearch \(regexp) for topic with bullet BULLET."
[-- Attachment #5: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-12 23:47 ` Ken Manheimer
@ 2005-10-20 14:08 ` Ken Manheimer
2005-10-20 14:12 ` Simon Josefsson
0 siblings, 1 reply; 156+ messages in thread
From: Ken Manheimer @ 2005-10-20 14:08 UTC (permalink / raw)
i just posted a new version of my allout patches which depend on the
pgg revisions of sascha and mine, so i thought i'd post a query in
this thread on the status of these patches - the new allout encryption
features won't work without these pgg refinements in place. i also
should mention rms' initiative to relocate pgg to the lisp/ directory,
since pgg constitutes a facility in its own regard - i'm all for that.
i'm not attaching the pgg changes to this message, but can easily do
so if needed.
ken
ken.manheimer@gmail.com
On 10/12/05, Ken Manheimer <ken.manheimer@gmail.com> wrote:
> as threatened, here is a complete patch against the current gnu.org
> lisp/gnus repository. i've migrated all the allout encryption
> functionality to pgg and exercised this stuff pretty substantially,
> and am very comfortable with the way it works.
>
> there are a bunch of fixes, as well as extensions so the passphrases
> can be managed by the calling functions, as well as refinement of the
> passphrase caching mechanism (so multiple timeouts don't pileup for a
> single passphrase - the last one replaces the prior ones). lotsa
> goodies. the patch includes sascha wilde's symmetric-encryption
> additions - basically, the whole deal.
>
> what it does not include is revision of the pgg-pgp.el and pgg-pgp5.el
> modules, to track changes to the pgg api. i started in on that, only
> to discover that they were already broken by the addition of a 'sign'
> parameter to some of the encryption functions. there's no way to
> repair that short of implementing the feature for the other packages,
> and i'm not in a position to do that. (plus, i'm not sure i am
> comfortable with the way it was done for pgg-gpg.)
>
> so it looks like pgg-pgp.el and pgg-pgp5.el are disfunctional already,
> without my changes. i'm hoping that's not going to prevent the
> introduction of my changes.
>
> i'm going to be heading offline for five days, starting tomorrow, so
> it'll be a bit before i can respond to questions. i hope the patch
> i'm sending (which includes detaild ChangeLog entries) will be
> helpful to anyone that wishes to navigate them.
>
> and once again, i'm not sure the attachment will be delivered this
> time. (it wasn't on a recent try, but then was on a subsequent
> message. this is the first awkward gmail bug i've hit...)
>
> ken
> ken.manheimer@gmail.com
>
> On 10/10/05, Ken Manheimer <ken.manheimer@gmail.com> wrote:
> > for those of you following the developments at home (:-), here's an
> > incremental patch on top of what i sent out a few days ago. i fixed a
> > small stack of bugs in pgg-gpg.el that settles my complaint about
> > prompting with the secret key identity, and also filled in a small
> > oversight in the changes i sent out a few days ago.
> >
> > while this could be the last pgg patch, i'm still developing, hence
> > the incremental. i plan to send out a full patch when i've finished
> > transitioning allout to pgg, at which point i expect my mucking with
> > pgg to be settled. so, repository maintainers may want to wait for
> > that, while i'm hoping those actively involved (eg, sascha) will
> > scrutinize and, ideally, exercise these patches.
> >
> > we'll see if the attached patch makes it through this time. (i
> > haven't re-attached it, which i think was the problem last time.) if
> > not, look forward to a followup...
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-20 14:08 ` Ken Manheimer
@ 2005-10-20 14:12 ` Simon Josefsson
2005-10-20 14:30 ` Ken Manheimer
` (4 more replies)
0 siblings, 5 replies; 156+ messages in thread
From: Simon Josefsson @ 2005-10-20 14:12 UTC (permalink / raw)
Cc: sascha schwab (symmetric encryption patches),
Daiki Ueno (pgg author), Richard M. Stallman, emacs-devel
Hi. Thanks for reminding me. I thought we were waiting for copyright
assignment papers? Have the FSF received papers for all authors? The
best way to proceed is to wait for them to arrive, and then send me a
complete patch against the then-current CVS that I can install. I can
take care of installing it into Gnus CVS as well.
I'm all for relocating pgg. However, I suggest lisp/pgg/ instead.
The lisp/ directory is pretty large as it is.
Ken Manheimer <ken.manheimer@gmail.com> writes:
> i just posted a new version of my allout patches which depend on the
> pgg revisions of sascha and mine, so i thought i'd post a query in
> this thread on the status of these patches - the new allout encryption
> features won't work without these pgg refinements in place. i also
> should mention rms' initiative to relocate pgg to the lisp/ directory,
> since pgg constitutes a facility in its own regard - i'm all for that.
>
> i'm not attaching the pgg changes to this message, but can easily do
> so if needed.
>
> ken
> ken.manheimer@gmail.com
>
> On 10/12/05, Ken Manheimer <ken.manheimer@gmail.com> wrote:
>> as threatened, here is a complete patch against the current gnu.org
>> lisp/gnus repository. i've migrated all the allout encryption
>> functionality to pgg and exercised this stuff pretty substantially,
>> and am very comfortable with the way it works.
>>
>> there are a bunch of fixes, as well as extensions so the passphrases
>> can be managed by the calling functions, as well as refinement of the
>> passphrase caching mechanism (so multiple timeouts don't pileup for a
>> single passphrase - the last one replaces the prior ones). lotsa
>> goodies. the patch includes sascha wilde's symmetric-encryption
>> additions - basically, the whole deal.
>>
>> what it does not include is revision of the pgg-pgp.el and pgg-pgp5.el
>> modules, to track changes to the pgg api. i started in on that, only
>> to discover that they were already broken by the addition of a 'sign'
>> parameter to some of the encryption functions. there's no way to
>> repair that short of implementing the feature for the other packages,
>> and i'm not in a position to do that. (plus, i'm not sure i am
>> comfortable with the way it was done for pgg-gpg.)
>>
>> so it looks like pgg-pgp.el and pgg-pgp5.el are disfunctional already,
>> without my changes. i'm hoping that's not going to prevent the
>> introduction of my changes.
>>
>> i'm going to be heading offline for five days, starting tomorrow, so
>> it'll be a bit before i can respond to questions. i hope the patch
>> i'm sending (which includes detaild ChangeLog entries) will be
>> helpful to anyone that wishes to navigate them.
>>
>> and once again, i'm not sure the attachment will be delivered this
>> time. (it wasn't on a recent try, but then was on a subsequent
>> message. this is the first awkward gmail bug i've hit...)
>>
>> ken
>> ken.manheimer@gmail.com
>>
>> On 10/10/05, Ken Manheimer <ken.manheimer@gmail.com> wrote:
>> > for those of you following the developments at home (:-), here's an
>> > incremental patch on top of what i sent out a few days ago. i fixed a
>> > small stack of bugs in pgg-gpg.el that settles my complaint about
>> > prompting with the secret key identity, and also filled in a small
>> > oversight in the changes i sent out a few days ago.
>> >
>> > while this could be the last pgg patch, i'm still developing, hence
>> > the incremental. i plan to send out a full patch when i've finished
>> > transitioning allout to pgg, at which point i expect my mucking with
>> > pgg to be settled. so, repository maintainers may want to wait for
>> > that, while i'm hoping those actively involved (eg, sascha) will
>> > scrutinize and, ideally, exercise these patches.
>> >
>> > we'll see if the attached patch makes it through this time. (i
>> > haven't re-attached it, which i think was the problem last time.) if
>> > not, look forward to a followup...
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-20 14:12 ` Simon Josefsson
@ 2005-10-20 14:30 ` Ken Manheimer
2005-10-20 14:42 ` Sascha Wilde
` (3 subsequent siblings)
4 siblings, 0 replies; 156+ messages in thread
From: Ken Manheimer @ 2005-10-20 14:30 UTC (permalink / raw)
Cc: sascha schwab (symmetric encryption patches),
Daiki Ueno (pgg author), Richard M. Stallman, emacs-devel
On 10/20/05, Simon Josefsson <jas@extundo.com> wrote:
> Hi. Thanks for reminding me. I thought we were waiting for copyright
> assignment papers? Have the FSF received papers for all authors? The
i'll send my pgg copyright assignment papers right now. (they came
while i was away for a week.) my allout assignment has been on file
for a while, happily. dunno about status of sascha's assignment.
> best way to proceed is to wait for them to arrive, and then send me a
> complete patch against the then-current CVS that I can install. I can
> take care of installing it into Gnus CVS as well.
>
> I'm all for relocating pgg. However, I suggest lisp/pgg/ instead.
> The lisp/ directory is pretty large as it is.
lisp/pgg/ sounds like a good idea to me, too.
ken
ken.manheimer@gmail.com
> Ken Manheimer <ken.manheimer@gmail.com> writes:
>
> > i just posted a new version of my allout patches which depend on the
> > pgg revisions of sascha and mine, so i thought i'd post a query in
> > this thread on the status of these patches - the new allout encryption
> > features won't work without these pgg refinements in place. i also
> > should mention rms' initiative to relocate pgg to the lisp/ directory,
> > since pgg constitutes a facility in its own regard - i'm all for that.
> >
> > i'm not attaching the pgg changes to this message, but can easily do
> > so if needed.
> >
> > ken
> > ken.manheimer@gmail.com
> >
> > On 10/12/05, Ken Manheimer <ken.manheimer@gmail.com> wrote:
> >> as threatened, here is a complete patch against the current gnu.org
> >> lisp/gnus repository. i've migrated all the allout encryption
> >> functionality to pgg and exercised this stuff pretty substantially,
> >> and am very comfortable with the way it works.
> >>
> >> there are a bunch of fixes, as well as extensions so the passphrases
> >> can be managed by the calling functions, as well as refinement of the
> >> passphrase caching mechanism (so multiple timeouts don't pileup for a
> >> single passphrase - the last one replaces the prior ones). lotsa
> >> goodies. the patch includes sascha wilde's symmetric-encryption
> >> additions - basically, the whole deal.
> >>
> >> what it does not include is revision of the pgg-pgp.el and pgg-pgp5.el
> >> modules, to track changes to the pgg api. i started in on that, only
> >> to discover that they were already broken by the addition of a 'sign'
> >> parameter to some of the encryption functions. there's no way to
> >> repair that short of implementing the feature for the other packages,
> >> and i'm not in a position to do that. (plus, i'm not sure i am
> >> comfortable with the way it was done for pgg-gpg.)
> >>
> >> so it looks like pgg-pgp.el and pgg-pgp5.el are disfunctional already,
> >> without my changes. i'm hoping that's not going to prevent the
> >> introduction of my changes.
> >>
> >> i'm going to be heading offline for five days, starting tomorrow, so
> >> it'll be a bit before i can respond to questions. i hope the patch
> >> i'm sending (which includes detaild ChangeLog entries) will be
> >> helpful to anyone that wishes to navigate them.
> >>
> >> and once again, i'm not sure the attachment will be delivered this
> >> time. (it wasn't on a recent try, but then was on a subsequent
> >> message. this is the first awkward gmail bug i've hit...)
> >>
> >> ken
> >> ken.manheimer@gmail.com
> >>
> >> On 10/10/05, Ken Manheimer <ken.manheimer@gmail.com> wrote:
> >> > for those of you following the developments at home (:-), here's an
> >> > incremental patch on top of what i sent out a few days ago. i fixed a
> >> > small stack of bugs in pgg-gpg.el that settles my complaint about
> >> > prompting with the secret key identity, and also filled in a small
> >> > oversight in the changes i sent out a few days ago.
> >> >
> >> > while this could be the last pgg patch, i'm still developing, hence
> >> > the incremental. i plan to send out a full patch when i've finished
> >> > transitioning allout to pgg, at which point i expect my mucking with
> >> > pgg to be settled. so, repository maintainers may want to wait for
> >> > that, while i'm hoping those actively involved (eg, sascha) will
> >> > scrutinize and, ideally, exercise these patches.
> >> >
> >> > we'll see if the attached patch makes it through this time. (i
> >> > haven't re-attached it, which i think was the problem last time.) if
> >> > not, look forward to a followup...
>
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-20 14:12 ` Simon Josefsson
2005-10-20 14:30 ` Ken Manheimer
@ 2005-10-20 14:42 ` Sascha Wilde
2005-10-25 7:23 ` Sascha Wilde
2005-10-20 18:07 ` Relocating pgg*.el (was: pgg symmetric encryption patch) Reiner Steib
` (2 subsequent siblings)
4 siblings, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2005-10-20 14:42 UTC (permalink / raw)
Cc: sascha schwab (symmetric encryption patches), Ken Manheimer,
Daiki Ueno (pgg author), Richard M. Stallman, emacs-devel
[-- Attachment #1.1: Type: text/plain, Size: 567 bytes --]
On Thu, Oct 20, 2005 at 04:12:58PM +0200, Simon Josefsson wrote:
> Hi. Thanks for reminding me. I thought we were waiting for copyright
> assignment papers? Have the FSF received papers for all authors?
I signed papers and send them off by mail (from Germany) Saturday. I
haven't got an answer by the fsf yet, but they should receive them at
least quite soon.
cheers
sascha
--
Sascha Wilde
"Computers are good at following instructions,
but not at reading your mind."
D. E. Knuth, The TeXbook, Addison-Wesley 1984, 1986, 1996, p. 9
[-- Attachment #1.2: Type: application/pgp-signature, Size: 189 bytes --]
[-- Attachment #2: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Relocating pgg*.el (was: pgg symmetric encryption patch)
2005-10-20 14:12 ` Simon Josefsson
2005-10-20 14:30 ` Ken Manheimer
2005-10-20 14:42 ` Sascha Wilde
@ 2005-10-20 18:07 ` Reiner Steib
2005-10-20 22:22 ` Kim F. Storm
2005-10-20 23:38 ` pgg symmetric encryption patch Richard M. Stallman
2006-03-18 21:17 ` Small patch to enable use of gpg-agent with pgg Sascha Wilde
4 siblings, 1 reply; 156+ messages in thread
From: Reiner Steib @ 2005-10-20 18:07 UTC (permalink / raw)
On Thu, Oct 20 2005, Simon Josefsson wrote:
> I'm all for relocating pgg.
I wasn't sure about the "best practice" in order to keep CVS history
when moving files around.
> However, I suggest lisp/pgg/ instead. The lisp/ directory is pretty
> large as it is.
Shouldn't pgg*.el be put into a separate directory along with other
security or cryptography related libraries (maybe lisp/security or
lisp/crypto)?
PGG files:
gnus/pgg.el
gnus/pgg-pgp5.el
gnus/pgg-pgp.el
gnus/pgg-parse.el
gnus/pgg-gpg.el
gnus/pgg-def.el
Other files (used by Gnus):
gnus/sha1.el
gnus/starttls.el
net/tls.el
... and maybe others like password.el and encrypt.el (only in Gnus CVS
upto now). It has been discussed previously[1] that it would be
useful to add password.el and encrypt.el to Emacs, but it wasn't done
because of the feature freeze. I'd suggest to add those libraries.
Unless we start to modify existing Emacs 22 packages to use them, it
wouldn't destabilize anything.
Bye, Reiner.
[1] http://thread.gmane.org/gmane.emacs.gnus.general/58915
,----
| From: "Ted Zlatanov" <tzz@lifelogs.com>
| Subject: encrypt.el (was: pop3.el itegration with netrc.el)
| To: ding@gnus.org
| Cc: "emacs-devel" <emacs-devel@gnu.org>
| Date: Fri, 15 Oct 2004 21:14:59 +0200
| Message-ID: <4nfz4f94jw.fsf_-_@lifelogs.com>
`----
--
,,,
(o o)
---ooO-(_)-Ooo--- | PGP key available | http://rsteib.home.pages.de/
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Relocating pgg*.el (was: pgg symmetric encryption patch)
2005-10-20 18:07 ` Relocating pgg*.el (was: pgg symmetric encryption patch) Reiner Steib
@ 2005-10-20 22:22 ` Kim F. Storm
2005-10-21 4:49 ` Richard M. Stallman
0 siblings, 1 reply; 156+ messages in thread
From: Kim F. Storm @ 2005-10-20 22:22 UTC (permalink / raw)
Reiner Steib <reinersteib+gmane@imap.cc> writes:
> Shouldn't pgg*.el be put into a separate directory along with other
> security or cryptography related libraries (maybe lisp/security or
> lisp/crypto)?
I was thinking about using lisp/net, but a separate lisp/crypto
is a much better idea.
--
Kim F. Storm <storm@cua.dk> http://www.cua.dk
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-20 14:12 ` Simon Josefsson
` (2 preceding siblings ...)
2005-10-20 18:07 ` Relocating pgg*.el (was: pgg symmetric encryption patch) Reiner Steib
@ 2005-10-20 23:38 ` Richard M. Stallman
2005-10-21 7:07 ` Simon Josefsson
2006-03-18 21:17 ` Small patch to enable use of gpg-agent with pgg Sascha Wilde
4 siblings, 1 reply; 156+ messages in thread
From: Richard M. Stallman @ 2005-10-20 23:38 UTC (permalink / raw)
Cc: schwab, ken.manheimer, ueno, emacs-devel
I'm all for relocating pgg. However, I suggest lisp/pgg/ instead.
Please remember our policy not to have lots of small subdirectories.
We do not create directories of `lisp' for less than around 20 source
files.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Relocating pgg*.el (was: pgg symmetric encryption patch)
2005-10-20 22:22 ` Kim F. Storm
@ 2005-10-21 4:49 ` Richard M. Stallman
0 siblings, 0 replies; 156+ messages in thread
From: Richard M. Stallman @ 2005-10-21 4:49 UTC (permalink / raw)
Cc: emacs-devel
I was thinking about using lisp/net, but a separate lisp/crypto
is a much better idea.
It could be a good idea, if there are enough files that could be moved
from the top level Lisp directory so as to justify having another
subdirectory. So I suggest people look at which other files in `lisp'
might belong there.
It would be ok to move files from other subdirs if they fit better in
the new subdir, but that isn't really making progress.
gnus/pgg.el
gnus/pgg-pgp5.el
gnus/pgg-pgp.el
gnus/pgg-parse.el
gnus/pgg-gpg.el
gnus/pgg-def.el
gnus/sha1.el
gnus/starttls.el
net/tls.el
That isn't enough files to justify a subdirectory.
Also, the other three are not ones we plan to put in
the top level directory, so they won't be reducing its size.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-20 23:38 ` pgg symmetric encryption patch Richard M. Stallman
@ 2005-10-21 7:07 ` Simon Josefsson
0 siblings, 0 replies; 156+ messages in thread
From: Simon Josefsson @ 2005-10-21 7:07 UTC (permalink / raw)
Cc: schwab, ken.manheimer, ueno, emacs-devel
"Richard M. Stallman" <rms@gnu.org> writes:
> I'm all for relocating pgg. However, I suggest lisp/pgg/ instead.
>
> Please remember our policy not to have lots of small subdirectories.
> We do not create directories of `lisp' for less than around 20 source
> files.
Ok.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-20 14:42 ` Sascha Wilde
@ 2005-10-25 7:23 ` Sascha Wilde
2005-10-25 20:26 ` Ken Manheimer
0 siblings, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2005-10-25 7:23 UTC (permalink / raw)
Cc: sascha schwab (symmetric encryption patches), Ken Manheimer,
Daiki Ueno (pgg author), Richard M. Stallman, emacs-devel
[-- Attachment #1.1: Type: text/plain, Size: 759 bytes --]
Sascha Wilde <wilde@sha-bang.de> wrote:
> On Thu, Oct 20, 2005 at 04:12:58PM +0200, Simon Josefsson wrote:
>> Hi. Thanks for reminding me. I thought we were waiting for copyright
>> assignment papers? Have the FSF received papers for all authors?
>
> I signed papers and send them off by mail (from Germany) Saturday.
Ok, papers are ready now, and the assignment process is complete. So
feel free to commit the patches, including my pgg symmetric encryption
stuff.
cheers
sascha
--
Sascha Wilde : "The PROPER way to handle HTML postings is to cancel
the article, then hire a hitman to kill the poster, his wife and kids,
and fuck his dog and smash his computer into little bits. Anything
more is just extremism." -- Paul Tomblin
[-- Attachment #1.2: Type: application/pgp-signature, Size: 188 bytes --]
[-- Attachment #2: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-25 7:23 ` Sascha Wilde
@ 2005-10-25 20:26 ` Ken Manheimer
2005-10-25 21:18 ` Sascha Wilde
0 siblings, 1 reply; 156+ messages in thread
From: Ken Manheimer @ 2005-10-25 20:26 UTC (permalink / raw)
Cc: sascha schwab, Daiki Ueno (pgg author), emacs-devel,
Richard M. Stallman, Simon Josefsson
On 10/25/05, Sascha Wilde <wilde@sha-bang.de> wrote:
> Sascha Wilde <wilde@sha-bang.de> wrote:
>
> > On Thu, Oct 20, 2005 at 04:12:58PM +0200, Simon Josefsson wrote:
> >> Hi. Thanks for reminding me. I thought we were waiting for copyright
> >> assignment papers? Have the FSF received papers for all authors?
> >
> > I signed papers and send them off by mail (from Germany) Saturday.
>
> Ok, papers are ready now, and the assignment process is complete. So
> feel free to commit the patches, including my pgg symmetric encryption
> stuff.
my papers are in, too.
i'm attaching a cumulative patch, including sascha wilde's and my
changes (which are built on top of sascha's) against the current CVS
repository. it include the ChangeLog and changes of pgg.el and
pgg-gpg.el. this patch has some slight changes from the previous
"omnibus" patch i submitted on october 12, including a small fix and a
change which mitigates a byte-compiler warning.
caveats:
- there is one remaining compiler warning which was already in pgg.el -
i don't know the right way to mitigate it, so i'm leaving it as is.
- these patches do not bring the pgp or pgp5 suppport in line
ie, neither sascha's nor my patches provide for that, i don't
have access to any pgp implementation in order to correct it.
as far as i can tell, however, the pgp support was already
broken before either of us touched the pgg stuff.
ken
ken.manheimer@gmail.com
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-25 20:26 ` Ken Manheimer
@ 2005-10-25 21:18 ` Sascha Wilde
2005-10-25 21:28 ` Ken Manheimer
0 siblings, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2005-10-25 21:18 UTC (permalink / raw)
Cc: Simon Josefsson, sascha schwab, Daiki Ueno (pgg author),
Richard M. Stallman, emacs-devel
Ken Manheimer <ken.manheimer@gmail.com> wrote:
> On 10/25/05, Sascha Wilde <wilde@sha-bang.de> wrote:
> i'm attaching a cumulative patch,
no, you didn't...
guess we have some kind of tradition here. ;-)
cheers
sascha
--
"Anyone who slaps a 'this page is best viewed with Browser X' label on a Web
page appears to be yearning for the bad old days, before the Web, when you had
very little chance of reading a document written on another computer, another
word processor, or another network." -- Tim Berners-Lee, July 1996
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-25 21:18 ` Sascha Wilde
@ 2005-10-25 21:28 ` Ken Manheimer
2005-10-26 9:57 ` Sascha Wilde
0 siblings, 1 reply; 156+ messages in thread
From: Ken Manheimer @ 2005-10-25 21:28 UTC (permalink / raw)
Cc: Simon Josefsson, sascha schwab, Daiki Ueno (pgg author),
Richard M. Stallman, emacs-devel
[-- Attachment #1: Type: text/plain, Size: 713 bytes --]
aargh - i'm attaching it now. (i simply forgot to do so, in my previous post.)
On 10/25/05, Sascha Wilde <wilde@sha-bang.de> wrote:
> Ken Manheimer <ken.manheimer@gmail.com> wrote:
>
> > On 10/25/05, Sascha Wilde <wilde@sha-bang.de> wrote:
>
> > i'm attaching a cumulative patch,
>
> no, you didn't...
>
> guess we have some kind of tradition here. ;-)
>
> cheers
> sascha
> --
> "Anyone who slaps a 'this page is best viewed with Browser X' label on a Web
> page appears to be yearning for the bad old days, before the Web, when you had
> very little chance of reading a document written on another computer, another
> word processor, or another network." -- Tim Berners-Lee, July 1996
>
[-- Attachment #2: pgg-symmetric-06.patch --]
[-- Type: application/octet-stream, Size: 25376 bytes --]
Index: ChangeLog
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/ChangeLog,v
retrieving revision 1.8455
diff -u -r1.8455 ChangeLog
--- ChangeLog 25 Oct 2005 19:25:23 -0000 1.8455
+++ ChangeLog 25 Oct 2005 20:16:01 -0000
@@ -1,4 +1,79 @@
-2005-10-25 Romain Francoise <romain@orebokech.com>
+2005-10-12 Ken Manheimer <ken.manheimer@gmail.com>
+
+ * pgg-gpg.el
+ (pgg-gpg-select-matching-key): fixed: look at the right part of the
+ decoded armor to find the key-identifier
+ (pgg-gpg-lookup-key-owner): new function to return the
+ human-readable identifier of a key owner.
+ (pgg-gpg-lookup-id-from-key-owner): make it easy to identify the
+ key itself.
+ (pgg-gpg-decrypt-region): prompt with the key owner (rather
+ than the key value) if we have a key and can match it against a
+ secret key. also, added an XXX note pointing out fact that the
+ prompt only indicates the first matching key.
+ (pgg-add-passphrase-to-cache): <= pgg-add-passphrase-cache
+ (pgg-remove-passphrase-from-cache) <= pgg-remove-passphrase-cache
+
+ * pgg.el (pgg-decrypt): passing along 'passphrase' in call to
+ pgg-decrypt-region; i overlooked this one in my previous patch.
+ (pgg-pending-timers): a new hash for tracking the passphrase cache
+ timers, so that new ones supercede old ones.
+ (pgg-add-passphrase-to-cache): renamed from
+ `pgg-add-passphrase-cache' to reduce confusion. and modified to
+ cancel old timers when new ones are added.
+ (pgg-remove-passphrase-from-cache): renamed from
+ `pgg-remove-passphrase-cache' to reduce confusion. and modified
+ to cancel old timers when their keys are removed from the cache.
+ (pgg-cancel-timer): in mainline gnu emacs, an alias for
+ cancel-timer; in xemacs, an indirection to delete-itimer.
+ (pgg-read-passphrase-from-cache, pgg-read-passphrase): extracted
+ pgg-read-passphrase-from-cache from pgg-read-passphrase so users
+ can only check cache without risk of prompting. corrected bug in
+ notruncate behavior.
+ (pgg-read-passphrase-from-cache, pgg-read-passphrase,
+ pgg-add-passphrase-cache, pgg-remove-passphrase-cache): added
+ informative docstrings.
+ (pgg-decrypt): convey provided passphrase in subordinate call to
+ pgg-decrypt-region (missed that in a prior patch)
+
+2005-10-08 Ken Manheimer <ken.manheimer+emacs@gmail.com>
+
+ * pgg.el (pgg-encrypt-region, pgg-encrypt-symmetric-region,
+ pgg-encrypt-symmetric, pgg-encrypt, pgg-decrypt-region,
+ pgg-decrypt, pgg-sign-region, pgg-sign):
+ add optional 'passphrase' argument to all these routines, so the
+ passphrase can be managed externally and then passed in to the
+ system.
+
+ * pgg.el (pgg-read-passphrase, pgg-add-passphrase-cache,
+ pgg-remove-passphrase-cache): add optional 'notruncate' argument,
+ so the passphrase cache can be used reliably with identifiers
+ besides a pgp packet's key id.
+
+ * pgg-gpg.el (pgg-pgp-encrypt-region,
+ pgg-pgp-encrypt-symmetric-region, pgg-pgp-encrypt-symmetric,
+ pgg-pgp-encrypt, pgg-pgp-decrypt-region, pgg-pgp-decrypt,
+ pgg-pgp-sign-region, pgg-pgp-sign): add optional 'passphrase'
+ argument to all these routines, so the passphrase can be managed
+ externally and passed in to the system.
+
+ * pgg-gpg.el (pgg-gpg-possibly-cache-passphrase): add optional
+ 'notruncate' argument, so the passphrase cache can be used
+ reliably with identifiers besides a pgp packet's key id.
+
+2005-10-06 Sascha Wilde <swilde@sha-bang.de>
+
+ * pgg-gpg.el (pgg-gpg-encrypt-symmetric-region): New function for
+ symmetric encryption.
+ (pgg-gpg-symmetric-key-p): New function to check for an symmetric
+ encrypted session key.
+ (pgg-gpg-decrypt-region): When decrypting a symmetric encrypted
+ message ask for the passphrase in a proper way.
+
+ * pgg.el (pgg-encrypt-symmetric,pgg-encrypt-symmetric-region):
+ New user commands for symmetric encryption.
+
+005-10-25 Romain Francoise <romain@orebokech.com>
* emacs-lisp/find-func.el (find-library-name): Also strip
extension if library name ends in .el, to take advantage of
Index: pgg.el
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/pgg.el,v
retrieving revision 1.1
diff -u -r1.1 pgg.el
--- pgg.el 24 Oct 2005 09:46:27 -0000 1.1
+++ pgg.el 25 Oct 2005 20:16:01 -0000
@@ -4,6 +4,7 @@
;; 2005 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
+;; Symmetric encryption added by: Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/10/28
;; Keywords: PGP
@@ -67,26 +68,110 @@
(set-window-buffer window buffer)
(shrink-window-if-larger-than-buffer window)))
+;; XXX `pgg-display-output-buffer' is a horrible name for this function.
+;; It should be something like `pgg-situate-output-or-display-error'.
(defun pgg-display-output-buffer (start end status)
+ "Situate en/decryption results or pop up an error buffer.
+
+Text from START to END is replaced by contents of output buffer if STATUS
+is true, or else the output buffer is displayed."
(if status
- (progn
- (delete-region start end)
- (insert-buffer-substring pgg-output-buffer)
- (decode-coding-region start (point) buffer-file-coding-system))
- (let ((temp-buffer-show-function
- (function pgg-temp-buffer-show-function)))
- (with-output-to-temp-buffer pgg-echo-buffer
- (set-buffer standard-output)
- (insert-buffer-substring pgg-errors-buffer)))))
+ (pgg-situate-output start end)
+ (pgg-display-error-buffer)))
+
+(defun pgg-situate-output (start end)
+ "Place en/decryption result in place of current text from START to END."
+ (delete-region start end)
+ (insert-buffer-substring pgg-output-buffer)
+ (decode-coding-region start (point) buffer-file-coding-system))
+
+(defun pgg-display-error-buffer ()
+ "Pop up an error buffer indicating the reason for an en/decryption failure."
+ (let ((temp-buffer-show-function
+ (function pgg-temp-buffer-show-function)))
+ (with-output-to-temp-buffer pgg-echo-buffer
+ (set-buffer standard-output)
+ (insert-buffer-substring pgg-errors-buffer))))
(defvar pgg-passphrase-cache (make-vector 7 0))
-(defun pgg-read-passphrase (prompt &optional key)
- (or (and pgg-cache-passphrase
- key (setq key (pgg-truncate-key-identifier key))
- (symbol-value (intern-soft key pgg-passphrase-cache)))
+(defvar pgg-pending-timers (make-vector 7 0)
+ "Hash table for managing scheduled pgg cache management timers.
+
+We associate key and timer, so the timer can be cancelled if a new
+timeout for the key is set while an old one is still pending.")
+
+(defun pgg-read-passphrase (prompt &optional key notruncate)
+ "Using PROMPT, obtain passphrase for KEY from cache or user.
+
+Truncate the key to 8 trailing characters unless NOTRUNCATE is true
+\(default false).
+
+Custom variables `pgg-cache-passphrase' and `pgg-passphrase-cache-expiry'
+regulate cache behavior."
+ (or (pgg-read-passphrase-from-cache key notruncate)
(read-passwd prompt)))
+(defun pgg-read-passphrase-from-cache (key &optional notruncate)
+ "Obtain passphrase for KEY from time-limited passphrase cache.
+
+Truncate the key to 8 trailing characters unless NOTRUNCATE is true
+\(default false).
+
+Custom variables `pgg-cache-passphrase' and `pgg-passphrase-cache-expiry'
+regulate cache behavior."
+ (and pgg-cache-passphrase
+ key (or notruncate
+ (setq key (pgg-truncate-key-identifier key)))
+ (symbol-value (intern-soft key pgg-passphrase-cache))))
+
+(defun pgg-add-passphrase-to-cache (key passphrase &optional notruncate)
+ "Associate KEY with PASSPHRASE in time-limited passphrase cache.
+
+Truncate the key to 8 trailing characters unless NOTRUNCATE is true
+\(default false).
+
+Custom variables `pgg-cache-passphrase' and `pgg-passphrase-cache-expiry'
+regulate cache behavior."
+
+ (let* ((key (if notruncate key (pgg-truncate-key-identifier key)))
+ (interned-timer-key (intern-soft key pgg-pending-timers))
+ (old-timer (symbol-value interned-timer-key))
+ new-timer)
+ (when old-timer
+ (cancel-timer old-timer)
+ (unintern interned-timer-key pgg-pending-timers))
+ (set (intern key pgg-passphrase-cache)
+ passphrase)
+ (set (intern key pgg-pending-timers)
+ (pgg-run-at-time pgg-passphrase-cache-expiry nil
+ #'pgg-remove-passphrase-from-cache
+ key notruncate))))
+
+(defun pgg-remove-passphrase-from-cache (key &optional notruncate)
+ "Omit passphrase associated with KEY in time-limited passphrase cache.
+
+Truncate the key to 8 trailing characters unless NOTRUNCATE is true
+\(default false).
+
+This is a no-op if there is not entry for KEY (eg, it's already expired.
+
+The memory for the passphrase is filled with underscores to clear any
+references to it.
+
+Custom variables `pgg-cache-passphrase' and `pgg-passphrase-cache-expiry'
+regulate cache behavior."
+ (let* ((passphrase (pgg-read-passphrase-from-cache key notruncate))
+ (key (if notruncate key (pgg-truncate-key-identifier key)))
+ (interned-timer-key (intern-soft key pgg-pending-timers))
+ (old-timer (symbol-value interned-timer-key)))
+ (when passphrase
+ (fillarray passphrase ?_)
+ (unintern key pgg-passphrase-cache))
+ (when old-timer
+ (pgg-cancel-timer old-timer)
+ (unintern interned-timer-key pgg-pending-timers))))
+
(eval-when-compile
(defmacro pgg-run-at-time-1 (time repeat function args)
(when (featurep 'xemacs)
@@ -151,27 +236,20 @@
(eval-and-compile
(if (featurep 'xemacs)
- (defun pgg-run-at-time (time repeat function &rest args)
- "Emulating function run as `run-at-time'.
+ (progn
+ (defun pgg-run-at-time (time repeat function &rest args)
+ "Emulating function run as `run-at-time'.
TIME should be nil meaning now, or a number of seconds from now.
Return an itimer object which can be used in either `delete-itimer'
or `cancel-timer'."
- (pgg-run-at-time-1 time repeat function args))
- (defalias 'pgg-run-at-time 'run-at-time)))
-
-(defun pgg-add-passphrase-cache (key passphrase)
- (setq key (pgg-truncate-key-identifier key))
- (set (intern key pgg-passphrase-cache)
- passphrase)
- (pgg-run-at-time pgg-passphrase-cache-expiry nil
- #'pgg-remove-passphrase-cache
- key))
-
-(defun pgg-remove-passphrase-cache (key)
- (let ((passphrase (symbol-value (intern-soft key pgg-passphrase-cache))))
- (when passphrase
- (fillarray passphrase ?_)
- (unintern key pgg-passphrase-cache))))
+ (pgg-run-at-time-1 time repeat function args))
+ (defun pgg-cancel-timer (timer)
+ "Emulate cancel-timer for xemacs."
+ (let ((delete-itimer 'delete-itimer))
+ (funcall delete-itimer timer)))
+ )
+ (defalias 'pgg-run-at-time 'run-at-time)
+ (defalias 'pgg-cancel-timer 'cancel-timer)))
(defmacro pgg-convert-lbt-region (start end lbt)
`(let ((pgg-conversion-end (set-marker (make-marker) ,end)))
@@ -222,93 +300,156 @@
;;;
;;;###autoload
-(defun pgg-encrypt-region (start end rcpts &optional sign)
+(defun pgg-encrypt-region (start end rcpts &optional sign passphrase)
"Encrypt the current region between START and END for RCPTS.
-If optional argument SIGN is non-nil, do a combined sign and encrypt."
+
+If optional argument SIGN is non-nil, do a combined sign and encrypt.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(interactive
(list (region-beginning)(region-end)
(split-string (read-string "Recipients: ") "[ \t,]+")))
(let ((status
(pgg-save-coding-system start end
(pgg-invoke "encrypt-region" (or pgg-scheme pgg-default-scheme)
- (point-min) (point-max) rcpts sign))))
+ (point-min) (point-max) rcpts sign passphrase))))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
;;;###autoload
-(defun pgg-encrypt (rcpts &optional sign start end)
+(defun pgg-encrypt-symmetric-region (start end &optional passphrase)
+ "Encrypt the current region between START and END symmetric with passphrase.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+cache or user."
+ (interactive "r")
+ (let ((status
+ (pgg-save-coding-system start end
+ (pgg-invoke "encrypt-symmetric-region"
+ (or pgg-scheme pgg-default-scheme)
+ (point-min) (point-max) passphrase))))
+ (when (interactive-p)
+ (pgg-display-output-buffer start end status))
+ status))
+
+;;;###autoload
+(defun pgg-encrypt-symmetric (&optional start end passphrase)
+ "Encrypt the current buffer using a symmetric, rather than key-pair, cipher.
+
+If optional arguments START and END are specified, only encrypt within
+the region.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
+ (interactive)
+ (let* ((start (or start (point-min)))
+ (end (or end (point-max)))
+ (status (pgg-encrypt-symmetric-region start end passphrase)))
+ (when (interactive-p)
+ (pgg-display-output-buffer start end status))
+ status))
+
+;;;###autoload
+(defun pgg-encrypt (rcpts &optional sign start end passphrase)
"Encrypt the current buffer for RCPTS.
+
If optional argument SIGN is non-nil, do a combined sign and encrypt.
+
If optional arguments START and END are specified, only encrypt within
-the region."
+the region.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(interactive (list (split-string (read-string "Recipients: ") "[ \t,]+")))
(let* ((start (or start (point-min)))
(end (or end (point-max)))
- (status (pgg-encrypt-region start end rcpts sign)))
+ (status (pgg-encrypt-region start end rcpts sign passphrase)))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
;;;###autoload
-(defun pgg-decrypt-region (start end)
- "Decrypt the current region between START and END."
+(defun pgg-decrypt-region (start end &optional passphrase)
+ "Decrypt the current region between START and END.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(interactive "r")
(let* ((buf (current-buffer))
(status
(pgg-save-coding-system start end
(pgg-invoke "decrypt-region" (or pgg-scheme pgg-default-scheme)
- (point-min) (point-max)))))
+ (point-min) (point-max) passphrase))))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
;;;###autoload
-(defun pgg-decrypt (&optional start end)
+(defun pgg-decrypt (&optional start end passphrase)
"Decrypt the current buffer.
+
If optional arguments START and END are specified, only decrypt within
-the region."
+the region.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(interactive "")
(let* ((start (or start (point-min)))
(end (or end (point-max)))
- (status (pgg-decrypt-region start end)))
+ (status (pgg-decrypt-region start end passphrase)))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
;;;###autoload
-(defun pgg-sign-region (start end &optional cleartext)
+(defun pgg-sign-region (start end &optional cleartext passphrase)
"Make the signature from text between START and END.
+
If the optional 3rd argument CLEARTEXT is non-nil, it does not create
a detached signature.
+
If this function is called interactively, CLEARTEXT is enabled
-and the the output is displayed."
+and the the output is displayed.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(interactive "r")
(let ((status (pgg-save-coding-system start end
(pgg-invoke "sign-region" (or pgg-scheme pgg-default-scheme)
(point-min) (point-max)
- (or (interactive-p) cleartext)))))
+ (or (interactive-p) cleartext)
+ passphrase))))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
;;;###autoload
-(defun pgg-sign (&optional cleartext start end)
+(defun pgg-sign (&optional cleartext start end passphrase)
"Sign the current buffer.
+
If the optional argument CLEARTEXT is non-nil, it does not create a
detached signature.
+
If optional arguments START and END are specified, only sign data
within the region.
+
If this function is called interactively, CLEARTEXT is enabled
-and the the output is displayed."
+and the the output is displayed.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(interactive "")
(let* ((start (or start (point-min)))
(end (or end (point-max)))
- (status (pgg-sign-region start end (or (interactive-p) cleartext))))
+ (status (pgg-sign-region start end
+ (or (interactive-p) cleartext)
+ passphrase)))
(when (interactive-p)
(pgg-display-output-buffer start end status))
status))
-
+
;;;###autoload
(defun pgg-verify-region (start end &optional signature fetch)
"Verify the current region between START and END.
Index: pgg-gpg.el
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/pgg-gpg.el,v
retrieving revision 1.1
diff -u -r1.1 pgg-gpg.el
--- pgg-gpg.el 24 Oct 2005 09:46:27 -0000 1.1
+++ pgg-gpg.el 25 Oct 2005 20:16:01 -0000
@@ -4,6 +4,7 @@
;; 2005 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
+;; Symmetric encryption added by: Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/10/28
;; Keywords: PGP, OpenPGP, GnuPG
@@ -96,19 +97,20 @@
(delete-file output-file-name))
(set-default-file-modes orig-mode))))
-(defun pgg-gpg-possibly-cache-passphrase (passphrase &optional key)
+(defun pgg-gpg-possibly-cache-passphrase (passphrase &optional key notruncate)
(if (and pgg-cache-passphrase
(progn
(goto-char (point-min))
(re-search-forward "^\\[GNUPG:] \\(GOOD_PASSPHRASE\\>\\)\\|\\(SIG_CREATED\\)" nil t)))
- (pgg-add-passphrase-cache
+ (pgg-add-passphrase-to-cache
(or key
(progn
(goto-char (point-min))
(if (re-search-forward
"^\\[GNUPG:] NEED_PASSPHRASE\\(_PIN\\)? \\w+ ?\\w*" nil t)
(substring (match-string 0) -8))))
- passphrase)))
+ passphrase
+ notruncate)))
(defvar pgg-gpg-all-secret-keys 'unknown)
@@ -139,18 +141,53 @@
nil t)
(substring (match-string 2) 8)))))
-(defun pgg-gpg-encrypt-region (start end recipients &optional sign)
+(defun pgg-gpg-lookup-key-owner (string &optional all)
+ "Search keys associated with STRING and return owner of identified key.
+
+The value may be just the bare key id, or it may be a combination of the
+user name associated with the key and the key id, with the key id enclosed
+in \"<...>\" angle brackets.
+
+Optional ALL non-nil means search all keys, including secret keys."
+ (let ((args (list "--with-colons" "--no-greeting" "--batch"
+ (if all "--list-secret-keys" "--list-keys")
+ string))
+ (key-regexp (concat "^\\(sec\\|pub\\)"
+ ":[^:]*:[^:]*:[^:]*:\\([^:]*\\):[^:]*"
+ ":[^:]*:[^:]*:[^:]*:\\([^:]*\\):"))
+ )
+ (with-temp-buffer
+ (apply #'call-process pgg-gpg-program nil t nil args)
+ (goto-char (point-min))
+ (if (re-search-forward key-regexp
+ nil t)
+ (match-string 3)))))
+
+(defun pgg-gpg-key-id-from-key-owner (key-owner)
+ (cond ((not key-owner) nil)
+ ;; Extract bare key id from outermost paired angle brackets, if any:
+ ((string-match "[^<]*<\\(.+\\)>[^>]*" key-owner)
+ (substring key-owner (match-beginning 1)(match-end 1)))
+ (key-owner))
+ )
+
+(defun pgg-gpg-encrypt-region (start end recipients &optional sign passphrase)
"Encrypt the current region between START and END.
-If optional argument SIGN is non-nil, do a combined sign and encrypt."
+
+If optional argument SIGN is non-nil, do a combined sign and encrypt.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
- (passphrase
- (when sign
- (pgg-read-passphrase
- (format "GnuPG passphrase for %s: " pgg-gpg-user-id)
- pgg-gpg-user-id)))
+ (passphrase (or passphrase
+ (when sign
+ (pgg-read-passphrase
+ (format "GnuPG passphrase for %s: "
+ pgg-gpg-user-id)
+ pgg-gpg-user-id))))
(args
(append
- (list "--batch" "--armor" "--always-trust" "--encrypt")
+ (list "--batch" "--textmode" "--armor" "--always-trust" "--encrypt")
(if sign (list "--sign" "--local-user" pgg-gpg-user-id))
(if recipients
(apply #'nconc
@@ -169,19 +206,46 @@
(pgg-gpg-possibly-cache-passphrase passphrase)))
(pgg-process-when-success)))
-(defun pgg-gpg-decrypt-region (start end)
- "Decrypt the current region between START and END."
+(defun pgg-gpg-encrypt-symmetric-region (start end &optional passphrase)
+ "Encrypt the current region between START and END with symmetric cipher.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
+ (let* ((passphrase (or passphrase
+ (pgg-read-passphrase
+ "GnuPG passphrase for symmetric encryption: ")))
+ (args
+ (append (list "--batch" "--textmode" "--armor" "--symmetric" ))))
+ (pgg-as-lbt start end 'CRLF
+ (pgg-gpg-process-region start end passphrase pgg-gpg-program args))
+ (pgg-process-when-success)))
+
+(defun pgg-gpg-decrypt-region (start end &optional passphrase)
+ "Decrypt the current region between START and END.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(let* ((current-buffer (current-buffer))
(message-keys (with-temp-buffer
(insert-buffer-substring current-buffer)
(pgg-decode-armor-region (point-min) (point-max))))
(secret-keys (pgg-gpg-lookup-all-secret-keys))
+ ;; XXX the user is stuck if they need to use the passphrase for
+ ;; any but the first secret key for which the message is
+ ;; encrypted. ideally, we would incrementally give them a
+ ;; chance with subsequent keys each time they fail with one.
(key (pgg-gpg-select-matching-key message-keys secret-keys))
- (pgg-gpg-user-id (or key pgg-gpg-user-id pgg-default-user-id))
- (passphrase
- (pgg-read-passphrase
- (format "GnuPG passphrase for %s: " pgg-gpg-user-id)
- pgg-gpg-user-id))
+ (key-owner (and key (pgg-gpg-lookup-key-owner key t)))
+ (key-id (pgg-gpg-key-id-from-key-owner key-owner))
+ (pgg-gpg-user-id (or key-id key
+ pgg-gpg-user-id pgg-default-user-id))
+ (passphrase (or passphrase
+ (pgg-read-passphrase
+ (format (if (pgg-gpg-symmetric-key-p message-keys)
+ "Passphrase for symmetric decryption: "
+ "GnuPG passphrase for %s: ")
+ (or key-owner "??"))
+ pgg-gpg-user-id)))
(args '("--batch" "--decrypt")))
(pgg-gpg-process-region start end passphrase pgg-gpg-program args)
(with-current-buffer pgg-errors-buffer
@@ -189,21 +253,31 @@
(goto-char (point-min))
(re-search-forward "^\\[GNUPG:] DECRYPTION_OKAY\\>" nil t))))
+;;;###autoload
+(defun pgg-gpg-symmetric-key-p (message-keys)
+ "True if decoded armor MESSAGE-KEYS has symmetric encryption indicator."
+ (let (result)
+ (dolist (key message-keys result)
+ (when (and (eq (car key) 3)
+ (member '(symmetric-key-algorithm) key))
+ (setq result key)))))
+
(defun pgg-gpg-select-matching-key (message-keys secret-keys)
"Choose a key from MESSAGE-KEYS that matches one of the keys in SECRET-KEYS."
(loop for message-key in message-keys
for message-key-id = (and (equal (car message-key) 1)
- (cdr (assq 'key-identifier message-key)))
+ (cdr (assq 'key-identifier
+ (cdr message-key))))
for key = (and message-key-id (pgg-lookup-key message-key-id 'encrypt))
when (and key (member key secret-keys)) return key))
-(defun pgg-gpg-sign-region (start end &optional cleartext)
+(defun pgg-gpg-sign-region (start end &optional cleartext passphrase)
"Make detached signature from text between START and END."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
- (passphrase
- (pgg-read-passphrase
- (format "GnuPG passphrase for %s: " pgg-gpg-user-id)
- pgg-gpg-user-id))
+ (passphrase (or passphrase
+ (pgg-read-passphrase
+ (format "GnuPG passphrase for %s: " pgg-gpg-user-id)
+ pgg-gpg-user-id)))
(args
(list (if cleartext "--clearsign" "--detach-sign")
"--armor" "--batch" "--verbose"
[-- Attachment #3: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-25 21:28 ` Ken Manheimer
@ 2005-10-26 9:57 ` Sascha Wilde
2005-10-26 15:45 ` Ken Manheimer
0 siblings, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2005-10-26 9:57 UTC (permalink / raw)
Cc: sascha schwab, Daiki Ueno (pgg author), emacs-devel,
Richard M. Stallman, Simon Josefsson
Thanks for the patch, but I'm missing the additions to the pgg
documentation I made.
cheers
sascha
--
Sascha Wilde
Life's too short to read boring signatures
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-26 9:57 ` Sascha Wilde
@ 2005-10-26 15:45 ` Ken Manheimer
2005-10-27 7:37 ` Sascha Wilde
0 siblings, 1 reply; 156+ messages in thread
From: Ken Manheimer @ 2005-10-26 15:45 UTC (permalink / raw)
Cc: sascha schwab, Daiki Ueno (pgg author), emacs-devel,
Richard M. Stallman, Simon Josefsson
On 10/26/05, Sascha Wilde <wilde@sha-bang.de> wrote:
> Thanks for the patch, but I'm missing the additions to the pgg
> documentation I made.
here is the texi part of your patch, exactly as it was in
emacs-pgg-symmetric.patch-5 as you sent it. (i included your
ChangeLog entry in the part of my patch for the ChangeLog, and
similarly for the pgg.el and pgg-gpg.el source files, so i think it's
now complete.)
ken
ken.manheimer@gmail.com
Index: man/pgg.texi
===================================================================
RCS file: /cvsroot/emacs/emacs/man/pgg.texi,v
retrieving revision 1.5
diff -u -r1.5 pgg.texi
--- man/pgg.texi 16 Sep 2005 22:11:00 -0000 1.5
+++ man/pgg.texi 8 Oct 2005 10:31:09 -0000
@@ -98,6 +98,8 @@
@lisp
(autoload 'pgg-encrypt-region "pgg"
"Encrypt the current region." t)
+(autoload 'pgg-encrypt-symmetric-region "pgg"
+ "Encrypt the current region with symmetric algorithm." t)
(autoload 'pgg-decrypt-region "pgg"
"Decrypt the current region." t)
(autoload 'pgg-sign-region "pgg"
@@ -140,6 +142,13 @@
with GnuPG.
@end deffn
+@deffn Command pgg-encrypt-symmetric-region start end
+Encrypt the current region between @var{start} and @var{end} using a
+symmetric cipher. After invocation you are asked for a passphrase.
+
+This is currently only implemented for GnuPG.
+@end deffn
+
@deffn Command pgg-decrypt-region start end
Decrypt the current region between @var{start} and @var{end}. If
decryption is successful, it replaces the current region contents (in
@@ -305,6 +314,13 @@
@var{recipients}. If @var{sign} is non-@code{nil}, do a combined sign
and encrypt. If encryption is successful, it returns @code{t},
otherwise @code{nil}.
+@end deffn
+
+@deffn Method pgg-scheme-encrypt-symmetric-region scheme start end
+Encrypt the current region between @var{start} and @var{end} using a
+symmetric cipher and a passphrases. If encryption is successful, it
+returns @code{t}, otherwise @code{nil}. This function is currently only
+implemented for GnuPG.
@end deffn
@deffn Method pgg-scheme-decrypt-region scheme start end
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-26 15:45 ` Ken Manheimer
@ 2005-10-27 7:37 ` Sascha Wilde
2005-10-29 11:42 ` Eli Zaretskii
0 siblings, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2005-10-27 7:37 UTC (permalink / raw)
Cc: Simon Josefsson, sascha schwab, Daiki Ueno (pgg author),
Richard M. Stallman, emacs-devel
[-- Attachment #1.1: Type: text/plain, Size: 698 bytes --]
Ken Manheimer <ken.manheimer@gmail.com> wrote:
> On 10/26/05, Sascha Wilde <wilde@sha-bang.de> wrote:
>> Thanks for the patch, but I'm missing the additions to the pgg
>> documentation I made.
>
> here is the texi part of your patch, exactly as it was in
> emacs-pgg-symmetric.patch-5 as you sent it. (i included your
> ChangeLog entry in the part of my patch for the ChangeLog, and
> similarly for the pgg.el and pgg-gpg.el source files, so i think it's
> now complete.)
Yes, thank you!
Could someone with write access please commit these two patches?
cheers
sascha
--
Sascha Wilde : The sum of intelligence on earth is a constant;
: population is growing
[-- Attachment #1.2: Type: application/pgp-signature, Size: 188 bytes --]
[-- Attachment #2: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-27 7:37 ` Sascha Wilde
@ 2005-10-29 11:42 ` Eli Zaretskii
2005-10-29 19:50 ` Ken Manheimer
0 siblings, 1 reply; 156+ messages in thread
From: Eli Zaretskii @ 2005-10-29 11:42 UTC (permalink / raw)
Cc: rms, schwab, ueno, emacs-devel, ken.manheimer, jas
> From: Sascha Wilde <wilde@sha-bang.de>
> Date: Thu, 27 Oct 2005 09:37:58 +0200
> Cc: Simon Josefsson <jas@extundo.com>, sascha schwab <schwab@suse.de>,
> "Daiki Ueno \(pgg author\)" <ueno@unixuser.org>,
> "Richard M. Stallman" <rms@gnu.org>, emacs-devel@gnu.org
>
> Ken Manheimer <ken.manheimer@gmail.com> wrote:
>
> > On 10/26/05, Sascha Wilde <wilde@sha-bang.de> wrote:
> >> Thanks for the patch, but I'm missing the additions to the pgg
> >> documentation I made.
> >
> > here is the texi part of your patch, exactly as it was in
> > emacs-pgg-symmetric.patch-5 as you sent it. (i included your
> > ChangeLog entry in the part of my patch for the ChangeLog, and
> > similarly for the pgg.el and pgg-gpg.el source files, so i think it's
> > now complete.)
>
> Yes, thank you!
>
> Could someone with write access please commit these two patches?
Done, thanks.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-29 11:42 ` Eli Zaretskii
@ 2005-10-29 19:50 ` Ken Manheimer
2005-10-31 17:30 ` Ken Manheimer
0 siblings, 1 reply; 156+ messages in thread
From: Ken Manheimer @ 2005-10-29 19:50 UTC (permalink / raw)
Cc: rms, Sascha Wilde, schwab, ueno, emacs-devel, jas
[-- Attachment #1: Type: text/plain, Size: 1834 bytes --]
thanks for applying the patches. it looks all in place. i have a
supplemental patch which reenables pgp and pgp5 operation, as well as
rectifying the pgg.texi documentation with the changes (plus suitable
entries for lisp/ChangeLog and man/ChangeLog).
this patch is somewhat speculative because i am unable to test it, not
having pgp or pgp5. most of the additional functionality is not
specific to the encryption software implementation, and where it is
(providing the right arguments for signing) i used a man page found on
the web to try to do the right thing. one thing i know is that
pgg-pgp5 and pgg-pgp would *not* work without this patch, because
there would be calling mismatches from the pgg generic functions. i
am fairly confident that the patched code will work well.
ken
ken.manheimer@gmail.com
On 10/29/05, Eli Zaretskii <eliz@gnu.org> wrote:
> > From: Sascha Wilde <wilde@sha-bang.de>
> > Date: Thu, 27 Oct 2005 09:37:58 +0200
> > Cc: Simon Josefsson <jas@extundo.com>, sascha schwab <schwab@suse.de>,
> > "Daiki Ueno \(pgg author\)" <ueno@unixuser.org>,
> > "Richard M. Stallman" <rms@gnu.org>, emacs-devel@gnu.org
> >
> > Ken Manheimer <ken.manheimer@gmail.com> wrote:
> >
> > > On 10/26/05, Sascha Wilde <wilde@sha-bang.de> wrote:
> > >> Thanks for the patch, but I'm missing the additions to the pgg
> > >> documentation I made.
> > >
> > > here is the texi part of your patch, exactly as it was in
> > > emacs-pgg-symmetric.patch-5 as you sent it. (i included your
> > > ChangeLog entry in the part of my patch for the ChangeLog, and
> > > similarly for the pgg.el and pgg-gpg.el source files, so i think it's
> > > now complete.)
> >
> > Yes, thank you!
> >
> > Could someone with write access please commit these two patches?
>
> Done, thanks.
>
[-- Attachment #2: pgg-pgp-compat.patch --]
[-- Type: application/octet-stream, Size: 14673 bytes --]
Index: lisp/ChangeLog
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/ChangeLog,v
retrieving revision 1.8476
diff -u -r1.8476 ChangeLog
--- lisp/ChangeLog 29 Oct 2005 16:02:05 -0000 1.8476
+++ lisp/ChangeLog 29 Oct 2005 19:32:47 -0000
@@ -1,3 +1,23 @@
+2005-10-29 Ken Manheimer <ken.manheimer@gmail.com>
+
+ * pgg-pgp.el (pgg-pgp-encrypt-region, pgg-pgp-decrypt-region)
+ (pgg-pgp-encrypt-symmetric-region, pgg-pgp-encrypt-symmetric)
+ (pgg-pgp-encrypt, pgg-pgp-decrypt-region, pgg-pgp-decrypt)
+ (pgg-pgp-sign-region, pgg-pgp-sign): Add optional 'passphrase'
+ argument to all these routines, so the passphrase can be managed
+ externally and passed in to the system.
+ (pgg-pgp-decrypt-region, pgg-pgp-sign-region): Use new name for
+ pgg-add-passphrase-to-cache function.
+
+ * pgg-pgp5.el (pgg-pgp5-encrypt-region, pgg-pgp5-decrypt-region)
+ (pgg-pgp5-encrypt-symmetric-region, pgg-pgp5-encrypt-symmetric)
+ (pgg-pgp5-encrypt, pgg-pgp5-decrypt-region, pgg-pgp5-decrypt)
+ (pgg-pgp5-sign-region, pgg-pgp5-sign): Add optional 'passphrase'
+ argument to all these routines, so the passphrase can be managed
+ externally and passed in to the system.
+ (pgg-pgp5-sign-region): Use new name of
+ pgg-add-passphrase-to-cache function.
+
2005-10-29 Roland Winkler <roland.winkler@physik.uni-erlangen.de>
* textmodes/conf-mode.el (conf-assignment-sign)
@@ -63,10 +83,10 @@
so the passphrase cache can be used reliably with identifiers
besides a pgp packet's key id.
- * pgg-gpg.el (pgg-pgp-encrypt-region)
- (pgg-pgp-encrypt-symmetric-region, pgg-pgp-encrypt-symmetric)
- (pgg-pgp-encrypt, pgg-pgp-decrypt-region, pgg-pgp-decrypt)
- (pgg-pgp-sign-region, pgg-pgp-sign): Add optional 'passphrase'
+ * pgg-gpg.el (pgg-gpg-encrypt-region)
+ (pgg-gpg-encrypt-symmetric-region, pgg-gpg-encrypt-symmetric)
+ (pgg-gpg-encrypt, pgg-gpg-decrypt-region, pgg-gpg-decrypt)
+ (pgg-gpg-sign-region, pgg-gpg-sign): Add optional 'passphrase'
argument to all these routines, so the passphrase can be managed
externally and passed in to the system.
Index: lisp/pgg-pgp.el
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/pgg-pgp.el,v
retrieving revision 1.1
diff -u -r1.1 pgg-pgp.el
--- lisp/pgg-pgp.el 24 Oct 2005 09:46:27 -0000 1.1
+++ lisp/pgg-pgp.el 29 Oct 2005 19:32:48 -0000
@@ -132,41 +132,57 @@
(buffer-substring (point)(progn (end-of-line) (point)))))
2))))))
-(defun pgg-pgp-encrypt-region (start end recipients)
+(defun pgg-pgp-encrypt-region (start end recipients &optional sign passphrase)
"Encrypt the current region between START and END."
(let* ((pgg-pgp-user-id (or pgg-pgp-user-id pgg-default-user-id))
+ (passphrase (or passphrase
+ (when sign
+ (pgg-read-passphrase
+ (format "PGP passphrase for %s: "
+ pgg-pgp-user-id)
+ pgg-gpg-user-id))))
(args
- `("+encrypttoself=off +verbose=1" "+batchmode"
- "+language=us" "-fate"
- ,@(if recipients
- (mapcar (lambda (rcpt) (concat "\"" rcpt "\""))
- (append recipients
- (if pgg-encrypt-for-me
- (list pgg-pgp-user-id))))))))
+ (append
+ `("+encrypttoself=off +verbose=1" "+batchmode"
+ "+language=us" "-fate"
+ ,@(if recipients
+ (mapcar (lambda (rcpt) (concat "\"" rcpt "\""))
+ (append recipients
+ (if pgg-encrypt-for-me
+ (list pgg-pgp-user-id))))))
+ (if sign '("-s" "-u" pgg-pgp-user-id)))))
(pgg-pgp-process-region start end nil pgg-pgp-program args)
(pgg-process-when-success nil)))
-(defun pgg-pgp-decrypt-region (start end)
- "Decrypt the current region between START and END."
+(defun pgg-pgp-decrypt-region (start end &optional passphrase)
+ "Decrypt the current region between START and END.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(let* ((pgg-pgp-user-id (or pgg-pgp-user-id pgg-default-user-id))
(key (pgg-pgp-lookup-key pgg-pgp-user-id 'encrypt))
(passphrase
- (pgg-read-passphrase
- (format "PGP passphrase for %s: " pgg-pgp-user-id) key))
+ (or passphrase
+ (pgg-read-passphrase
+ (format "PGP passphrase for %s: " pgg-pgp-user-id) key)))
(args
- '("+verbose=1" "+batchmode" "+language=us" "-f")))
+ '("+verbose=1" "+batchmode" "+language=us" "-f")))
(pgg-pgp-process-region start end passphrase pgg-pgp-program args)
(pgg-process-when-success
(if pgg-cache-passphrase
- (pgg-add-passphrase-cache key passphrase)))))
+ (pgg-add-passphrase-to-cache key passphrase)))))
+
+(defun pgg-pgp-sign-region (start end &optional clearsign passphrase)
+ "Make detached signature from text between START and END.
-(defun pgg-pgp-sign-region (start end &optional clearsign)
- "Make detached signature from text between START and END."
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(let* ((pgg-pgp-user-id (or pgg-pgp-user-id pgg-default-user-id))
(passphrase
- (pgg-read-passphrase
- (format "PGP passphrase for %s: " pgg-pgp-user-id)
- (pgg-pgp-lookup-key pgg-pgp-user-id 'sign)))
+ (or passphrase
+ (pgg-read-passphrase
+ (format "PGP passphrase for %s: " pgg-pgp-user-id)
+ (pgg-pgp-lookup-key pgg-pgp-user-id 'sign))))
(args
(list (if clearsign "-fast" "-fbast")
"+verbose=1" "+language=us" "+batchmode"
@@ -181,7 +197,7 @@
(point))
(point-max))))))
(if pgg-cache-passphrase
- (pgg-add-passphrase-cache
+ (pgg-add-passphrase-to-cache
(cdr (assq 'key-identifier packet))
passphrase)))))))
Index: lisp/pgg-pgp5.el
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/pgg-pgp5.el,v
retrieving revision 1.1
diff -u -r1.1 pgg-pgp5.el
--- lisp/pgg-pgp5.el 24 Oct 2005 09:46:27 -0000 1.1
+++ lisp/pgg-pgp5.el 29 Oct 2005 19:32:48 -0000
@@ -143,41 +143,51 @@
(buffer-substring (match-end 0)(progn (end-of-line)(point)))))
2)))))
-(defun pgg-pgp5-encrypt-region (start end recipients &optional sign)
+(defun pgg-pgp5-encrypt-region (start end recipients &optional sign passphrase)
"Encrypt the current region between START and END."
(let* ((pgg-pgp5-user-id (or pgg-pgp5-user-id pgg-default-user-id))
+ (passphrase (or passphrase
+ (when sign
+ (pgg-read-passphrase
+ (format "PGP passphrase for %s: "
+ pgg-pgp5-user-id)
+ pgg-pgp5-user-id))))
(args
- `("+NoBatchInvalidKeys=off" "-fat" "+batchmode=1"
- ,@(if recipients
- (apply #'append
- (mapcar (lambda (rcpt)
- (list "-r"
- (concat "\"" rcpt "\"")))
- (append recipients
- (if pgg-encrypt-for-me
- (list pgg-pgp5-user-id)))))))))
+ (append
+ `("+NoBatchInvalidKeys=off" "-fat" "+batchmode=1"
+ ,@(if recipients
+ (apply #'append
+ (mapcar (lambda (rcpt)
+ (list "-r"
+ (concat "\"" rcpt "\"")))
+ (append recipients
+ (if pgg-encrypt-for-me
+ (list pgg-pgp5-user-id)))))))
+ (if sign '("-s" "-u" pgg-pgp5-user-id)))))
(pgg-pgp5-process-region start end nil pgg-pgp5-pgpe-program args)
(pgg-process-when-success nil)))
-(defun pgg-pgp5-decrypt-region (start end)
+(defun pgg-pgp5-decrypt-region (start end &optional passphrase)
"Decrypt the current region between START and END."
(let* ((pgg-pgp5-user-id (or pgg-pgp5-user-id pgg-default-user-id))
(passphrase
- (pgg-read-passphrase
- (format "PGP passphrase for %s: " pgg-pgp5-user-id)
- (pgg-pgp5-lookup-key pgg-pgp5-user-id 'encrypt)))
+ (or passphrase
+ (pgg-read-passphrase
+ (format "PGP passphrase for %s: " pgg-pgp5-user-id)
+ (pgg-pgp5-lookup-key pgg-pgp5-user-id 'encrypt))))
(args
'("+verbose=1" "+batchmode=1" "+language=us" "-f")))
(pgg-pgp5-process-region start end passphrase pgg-pgp5-pgpv-program args)
(pgg-process-when-success nil)))
-(defun pgg-pgp5-sign-region (start end &optional clearsign)
+(defun pgg-pgp5-sign-region (start end &optional clearsign passphrase)
"Make detached signature from text between START and END."
(let* ((pgg-pgp5-user-id (or pgg-pgp5-user-id pgg-default-user-id))
(passphrase
- (pgg-read-passphrase
- (format "PGP passphrase for %s: " pgg-pgp5-user-id)
- (pgg-pgp5-lookup-key pgg-pgp5-user-id 'sign)))
+ (or passphrase
+ (pgg-read-passphrase
+ (format "PGP passphrase for %s: " pgg-pgp5-user-id)
+ (pgg-pgp5-lookup-key pgg-pgp5-user-id 'sign))))
(args
(list (if clearsign "-fat" "-fbat")
"+verbose=1" "+language=us" "+batchmode=1"
@@ -191,7 +201,7 @@
(point))
(point-max))))))
(if pgg-cache-passphrase
- (pgg-add-passphrase-cache
+ (pgg-add-passphrase-to-cache
(cdr (assq 'key-identifier packet))
passphrase)))))))
Index: man/ChangeLog
===================================================================
RCS file: /cvsroot/emacs/emacs/man/ChangeLog,v
retrieving revision 1.715
diff -u -r1.715 ChangeLog
--- man/ChangeLog 29 Oct 2005 11:40:18 -0000 1.715
+++ man/ChangeLog 29 Oct 2005 19:32:51 -0000
@@ -1,3 +1,9 @@
+2005-10-29 Ken Manheimer <ken.manheimer@gmail.com>
+
+ * pgg.texi (User Commands): Document additional passphrase
+ argument for pgg-encrypt-*, pgg-decrypt-*, and pgg-sign-* functions.
+ (Backend methods): Likewise for corresponding pgg-scheme-* functions.
+
2005-10-29 Sascha Wilde <wilde@sha-bang.de>
* pgg.texi (How to use): Update the example to add autoload of
Index: man/pgg.texi
===================================================================
RCS file: /cvsroot/emacs/emacs/man/pgg.texi,v
retrieving revision 1.6
diff -u -r1.6 pgg.texi
--- man/pgg.texi 29 Oct 2005 11:39:49 -0000 1.6
+++ man/pgg.texi 29 Oct 2005 19:32:51 -0000
@@ -129,7 +129,7 @@
fails immediately, but if the function had been called interactively, it
would ask you to retrieve the signer's public key from the server.
-@deffn Command pgg-encrypt-region start end recipients &optional sign
+@deffn Command pgg-encrypt-region start end recipients &optional sign passphrase
Encrypt the current region between @var{start} and @var{end} for
@var{recipients}. When the function were called interactively, you
would be asked about the recipients.
@@ -138,29 +138,41 @@
the accessible portion) with the resulting data.
If optional argument @var{sign} is non-@code{nil}, the function is
-request to do a combined sign and encrypt. This currently only work
-with GnuPG.
+request to do a combined sign and encrypt. This currently is
+confirmed to work with GnuPG, but might not work with PGP or PGP5.
+
+If optional @var{passphrase} is @code{nil}, the passphrase will be
+obtained from the passphrase cache or user.
@end deffn
-@deffn Command pgg-encrypt-symmetric-region start end
+@deffn Command pgg-encrypt-symmetric-region &optional start end passphrase
Encrypt the current region between @var{start} and @var{end} using a
symmetric cipher. After invocation you are asked for a passphrase.
-This is currently only implemented for GnuPG.
+If optional @var{passphrase} is @code{nil}, the passphrase will be
+obtained from the passphrase cache or user.
+
+symmetric-cipher encryption is currently only implemented for GnuPG.
@end deffn
-@deffn Command pgg-decrypt-region start end
+@deffn Command pgg-decrypt-region start end &optional passphrase
Decrypt the current region between @var{start} and @var{end}. If
decryption is successful, it replaces the current region contents (in
the accessible portion) with the resulting data.
+
+If optional @var{passphrase} is @code{nil}, the passphrase will be
+obtained from the passphrase cache or user.
@end deffn
-@deffn Command pgg-sign-region start end &optional cleartext
+@deffn Command pgg-sign-region start end &optional cleartext passphrase
Make the signature from text between @var{start} and @var{end}. If the
optional third argument @var{cleartext} is non-@code{nil}, or the
function is called interactively, it does not create a detached
signature. In such a case, it replaces the current region contents (in
the accessible portion) with the resulting data.
+
+If optional @var{passphrase} is @code{nil}, the passphrase will be
+obtained from the passphrase cache or user.
@end deffn
@deffn Command pgg-verify-region start end &optional signature fetch
@@ -309,26 +321,26 @@
keyrings.
@end deffn
-@deffn Method pgg-scheme-encrypt-region scheme start end recipients &optional sign
+@deffn Method pgg-scheme-encrypt-region scheme start end recipients &optional sign passphrase
Encrypt the current region between @var{start} and @var{end} for
@var{recipients}. If @var{sign} is non-@code{nil}, do a combined sign
and encrypt. If encryption is successful, it returns @code{t},
otherwise @code{nil}.
@end deffn
-@deffn Method pgg-scheme-encrypt-symmetric-region scheme start end
+@deffn Method pgg-scheme-encrypt-symmetric-region scheme start end &optional passphrase
Encrypt the current region between @var{start} and @var{end} using a
symmetric cipher and a passphrases. If encryption is successful, it
returns @code{t}, otherwise @code{nil}. This function is currently only
implemented for GnuPG.
@end deffn
-@deffn Method pgg-scheme-decrypt-region scheme start end
+@deffn Method pgg-scheme-decrypt-region scheme start end &optional passphrase
Decrypt the current region between @var{start} and @var{end}. If
decryption is successful, it returns @code{t}, otherwise @code{nil}.
@end deffn
-@deffn Method pgg-scheme-sign-region scheme start end &optional cleartext
+@deffn Method pgg-scheme-sign-region scheme start end &optional cleartext passphrase
Make the signature from text between @var{start} and @var{end}. If the
optional third argument @var{cleartext} is non-@code{nil}, it does not
create a detached signature. If signing is successful, it returns
[-- Attachment #3: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-29 19:50 ` Ken Manheimer
@ 2005-10-31 17:30 ` Ken Manheimer
2005-11-04 14:45 ` Eli Zaretskii
0 siblings, 1 reply; 156+ messages in thread
From: Ken Manheimer @ 2005-10-31 17:30 UTC (permalink / raw)
Cc: rms, Sascha Wilde, schwab, ueno, emacs-devel, jas
[-- Attachment #1: Type: text/plain, Size: 2283 bytes --]
as things approach release-readyness, i'm hoping that there's room to
include this additional pgg patch i submitted. it brings the pgg-pgp
and pgg-pgp5 support into line with the pgg scheme changes, and
revises the pgg manual to track those changes as well.
ken
ken.manheimer@gmail.com
On 10/29/05, Ken Manheimer <ken.manheimer@gmail.com> wrote:
> thanks for applying the patches. it looks all in place. i have a
> supplemental patch which reenables pgp and pgp5 operation, as well as
> rectifying the pgg.texi documentation with the changes (plus suitable
> entries for lisp/ChangeLog and man/ChangeLog).
>
> this patch is somewhat speculative because i am unable to test it, not
> having pgp or pgp5. most of the additional functionality is not
> specific to the encryption software implementation, and where it is
> (providing the right arguments for signing) i used a man page found on
> the web to try to do the right thing. one thing i know is that
> pgg-pgp5 and pgg-pgp would *not* work without this patch, because
> there would be calling mismatches from the pgg generic functions. i
> am fairly confident that the patched code will work well.
>
> ken
> ken.manheimer@gmail.com
>
>
> On 10/29/05, Eli Zaretskii <eliz@gnu.org> wrote:
> > > From: Sascha Wilde <wilde@sha-bang.de>
> > > Date: Thu, 27 Oct 2005 09:37:58 +0200
> > > Cc: Simon Josefsson <jas@extundo.com>, sascha schwab <schwab@suse.de>,
> > > "Daiki Ueno \(pgg author\)" <ueno@unixuser.org>,
> > > "Richard M. Stallman" <rms@gnu.org>, emacs-devel@gnu.org
> > >
> > > Ken Manheimer <ken.manheimer@gmail.com> wrote:
> > >
> > > > On 10/26/05, Sascha Wilde <wilde@sha-bang.de> wrote:
> > > >> Thanks for the patch, but I'm missing the additions to the pgg
> > > >> documentation I made.
> > > >
> > > > here is the texi part of your patch, exactly as it was in
> > > > emacs-pgg-symmetric.patch-5 as you sent it. (i included your
> > > > ChangeLog entry in the part of my patch for the ChangeLog, and
> > > > similarly for the pgg.el and pgg-gpg.el source files, so i think it's
> > > > now complete.)
> > >
> > > Yes, thank you!
> > >
> > > Could someone with write access please commit these two patches?
> >
> > Done, thanks.
> >
>
>
>
[-- Attachment #2: pgg-pgp-compat.patch --]
[-- Type: application/octet-stream, Size: 14677 bytes --]
Index: lisp/ChangeLog
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/ChangeLog,v
retrieving revision 1.8476
diff -u -r1.8476 ChangeLog
--- lisp/ChangeLog 29 Oct 2005 16:02:05 -0000 1.8476
+++ lisp/ChangeLog 29 Oct 2005 19:32:47 -0000
@@ -1,3 +1,23 @@
+2005-10-29 Ken Manheimer <ken.manheimer@gmail.com>
+
+ * pgg-pgp.el (pgg-pgp-encrypt-region, pgg-pgp-decrypt-region)
+ (pgg-pgp-encrypt-symmetric-region, pgg-pgp-encrypt-symmetric)
+ (pgg-pgp-encrypt, pgg-pgp-decrypt-region, pgg-pgp-decrypt)
+ (pgg-pgp-sign-region, pgg-pgp-sign): Add optional 'passphrase'
+ argument to all these routines, so the passphrase can be managed
+ externally and passed in to the system.
+ (pgg-pgp-decrypt-region, pgg-pgp-sign-region): Use new name for
+ pgg-add-passphrase-to-cache function.
+
+ * pgg-pgp5.el (pgg-pgp5-encrypt-region, pgg-pgp5-decrypt-region)
+ (pgg-pgp5-encrypt-symmetric-region, pgg-pgp5-encrypt-symmetric)
+ (pgg-pgp5-encrypt, pgg-pgp5-decrypt-region, pgg-pgp5-decrypt)
+ (pgg-pgp5-sign-region, pgg-pgp5-sign): Add optional 'passphrase'
+ argument to all these routines, so the passphrase can be managed
+ externally and passed in to the system.
+ (pgg-pgp5-sign-region): Use new name of
+ pgg-add-passphrase-to-cache function.
+
2005-10-29 Roland Winkler <roland.winkler@physik.uni-erlangen.de>
* textmodes/conf-mode.el (conf-assignment-sign)
@@ -63,10 +83,10 @@
so the passphrase cache can be used reliably with identifiers
besides a pgp packet's key id.
- * pgg-gpg.el (pgg-pgp-encrypt-region)
- (pgg-pgp-encrypt-symmetric-region, pgg-pgp-encrypt-symmetric)
- (pgg-pgp-encrypt, pgg-pgp-decrypt-region, pgg-pgp-decrypt)
- (pgg-pgp-sign-region, pgg-pgp-sign): Add optional 'passphrase'
+ * pgg-gpg.el (pgg-gpg-encrypt-region)
+ (pgg-gpg-encrypt-symmetric-region, pgg-gpg-encrypt-symmetric)
+ (pgg-gpg-encrypt, pgg-gpg-decrypt-region, pgg-gpg-decrypt)
+ (pgg-gpg-sign-region, pgg-gpg-sign): Add optional 'passphrase'
argument to all these routines, so the passphrase can be managed
externally and passed in to the system.
Index: lisp/pgg-pgp.el
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/pgg-pgp.el,v
retrieving revision 1.1
diff -u -r1.1 pgg-pgp.el
--- lisp/pgg-pgp.el 24 Oct 2005 09:46:27 -0000 1.1
+++ lisp/pgg-pgp.el 29 Oct 2005 19:32:48 -0000
@@ -132,41 +132,57 @@
(buffer-substring (point)(progn (end-of-line) (point)))))
2))))))
-(defun pgg-pgp-encrypt-region (start end recipients)
+(defun pgg-pgp-encrypt-region (start end recipients &optional sign passphrase)
"Encrypt the current region between START and END."
(let* ((pgg-pgp-user-id (or pgg-pgp-user-id pgg-default-user-id))
+ (passphrase (or passphrase
+ (when sign
+ (pgg-read-passphrase
+ (format "PGP passphrase for %s: "
+ pgg-pgp-user-id)
+ pgg-gpg-user-id))))
(args
- `("+encrypttoself=off +verbose=1" "+batchmode"
- "+language=us" "-fate"
- ,@(if recipients
- (mapcar (lambda (rcpt) (concat "\"" rcpt "\""))
- (append recipients
- (if pgg-encrypt-for-me
- (list pgg-pgp-user-id))))))))
+ (append
+ `("+encrypttoself=off +verbose=1" "+batchmode"
+ "+language=us" "-fate"
+ ,@(if recipients
+ (mapcar (lambda (rcpt) (concat "\"" rcpt "\""))
+ (append recipients
+ (if pgg-encrypt-for-me
+ (list pgg-pgp-user-id))))))
+ (if sign '("-s" "-u" pgg-pgp-user-id)))))
(pgg-pgp-process-region start end nil pgg-pgp-program args)
(pgg-process-when-success nil)))
-(defun pgg-pgp-decrypt-region (start end)
- "Decrypt the current region between START and END."
+(defun pgg-pgp-decrypt-region (start end &optional passphrase)
+ "Decrypt the current region between START and END.
+
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(let* ((pgg-pgp-user-id (or pgg-pgp-user-id pgg-default-user-id))
(key (pgg-pgp-lookup-key pgg-pgp-user-id 'encrypt))
(passphrase
- (pgg-read-passphrase
- (format "PGP passphrase for %s: " pgg-pgp-user-id) key))
+ (or passphrase
+ (pgg-read-passphrase
+ (format "PGP passphrase for %s: " pgg-pgp-user-id) key)))
(args
- '("+verbose=1" "+batchmode" "+language=us" "-f")))
+ '("+verbose=1" "+batchmode" "+language=us" "-f")))
(pgg-pgp-process-region start end passphrase pgg-pgp-program args)
(pgg-process-when-success
(if pgg-cache-passphrase
- (pgg-add-passphrase-cache key passphrase)))))
+ (pgg-add-passphrase-to-cache key passphrase)))))
+
+(defun pgg-pgp-sign-region (start end &optional clearsign passphrase)
+ "Make detached signature from text between START and END.
-(defun pgg-pgp-sign-region (start end &optional clearsign)
- "Make detached signature from text between START and END."
+If optional PASSPHRASE is not specified, it will be obtained from the
+passphrase cache or user."
(let* ((pgg-pgp-user-id (or pgg-pgp-user-id pgg-default-user-id))
(passphrase
- (pgg-read-passphrase
- (format "PGP passphrase for %s: " pgg-pgp-user-id)
- (pgg-pgp-lookup-key pgg-pgp-user-id 'sign)))
+ (or passphrase
+ (pgg-read-passphrase
+ (format "PGP passphrase for %s: " pgg-pgp-user-id)
+ (pgg-pgp-lookup-key pgg-pgp-user-id 'sign))))
(args
(list (if clearsign "-fast" "-fbast")
"+verbose=1" "+language=us" "+batchmode"
@@ -181,7 +197,7 @@
(point))
(point-max))))))
(if pgg-cache-passphrase
- (pgg-add-passphrase-cache
+ (pgg-add-passphrase-to-cache
(cdr (assq 'key-identifier packet))
passphrase)))))))
Index: lisp/pgg-pgp5.el
===================================================================
RCS file: /cvsroot/emacs/emacs/lisp/pgg-pgp5.el,v
retrieving revision 1.1
diff -u -r1.1 pgg-pgp5.el
--- lisp/pgg-pgp5.el 24 Oct 2005 09:46:27 -0000 1.1
+++ lisp/pgg-pgp5.el 29 Oct 2005 19:32:48 -0000
@@ -143,41 +143,51 @@
(buffer-substring (match-end 0)(progn (end-of-line)(point)))))
2)))))
-(defun pgg-pgp5-encrypt-region (start end recipients &optional sign)
+(defun pgg-pgp5-encrypt-region (start end recipients &optional sign passphrase)
"Encrypt the current region between START and END."
(let* ((pgg-pgp5-user-id (or pgg-pgp5-user-id pgg-default-user-id))
+ (passphrase (or passphrase
+ (when sign
+ (pgg-read-passphrase
+ (format "PGP passphrase for %s: "
+ pgg-pgp5-user-id)
+ pgg-pgp5-user-id))))
(args
- `("+NoBatchInvalidKeys=off" "-fat" "+batchmode=1"
- ,@(if recipients
- (apply #'append
- (mapcar (lambda (rcpt)
- (list "-r"
- (concat "\"" rcpt "\"")))
- (append recipients
- (if pgg-encrypt-for-me
- (list pgg-pgp5-user-id)))))))))
+ (append
+ `("+NoBatchInvalidKeys=off" "-fat" "+batchmode=1"
+ ,@(if recipients
+ (apply #'append
+ (mapcar (lambda (rcpt)
+ (list "-r"
+ (concat "\"" rcpt "\"")))
+ (append recipients
+ (if pgg-encrypt-for-me
+ (list pgg-pgp5-user-id)))))))
+ (if sign '("-s" "-u" pgg-pgp5-user-id)))))
(pgg-pgp5-process-region start end nil pgg-pgp5-pgpe-program args)
(pgg-process-when-success nil)))
-(defun pgg-pgp5-decrypt-region (start end)
+(defun pgg-pgp5-decrypt-region (start end &optional passphrase)
"Decrypt the current region between START and END."
(let* ((pgg-pgp5-user-id (or pgg-pgp5-user-id pgg-default-user-id))
(passphrase
- (pgg-read-passphrase
- (format "PGP passphrase for %s: " pgg-pgp5-user-id)
- (pgg-pgp5-lookup-key pgg-pgp5-user-id 'encrypt)))
+ (or passphrase
+ (pgg-read-passphrase
+ (format "PGP passphrase for %s: " pgg-pgp5-user-id)
+ (pgg-pgp5-lookup-key pgg-pgp5-user-id 'encrypt))))
(args
'("+verbose=1" "+batchmode=1" "+language=us" "-f")))
(pgg-pgp5-process-region start end passphrase pgg-pgp5-pgpv-program args)
(pgg-process-when-success nil)))
-(defun pgg-pgp5-sign-region (start end &optional clearsign)
+(defun pgg-pgp5-sign-region (start end &optional clearsign passphrase)
"Make detached signature from text between START and END."
(let* ((pgg-pgp5-user-id (or pgg-pgp5-user-id pgg-default-user-id))
(passphrase
- (pgg-read-passphrase
- (format "PGP passphrase for %s: " pgg-pgp5-user-id)
- (pgg-pgp5-lookup-key pgg-pgp5-user-id 'sign)))
+ (or passphrase
+ (pgg-read-passphrase
+ (format "PGP passphrase for %s: " pgg-pgp5-user-id)
+ (pgg-pgp5-lookup-key pgg-pgp5-user-id 'sign))))
(args
(list (if clearsign "-fat" "-fbat")
"+verbose=1" "+language=us" "+batchmode=1"
@@ -191,7 +201,7 @@
(point))
(point-max))))))
(if pgg-cache-passphrase
- (pgg-add-passphrase-cache
+ (pgg-add-passphrase-to-cache
(cdr (assq 'key-identifier packet))
passphrase)))))))
Index: man/ChangeLog
===================================================================
RCS file: /cvsroot/emacs/emacs/man/ChangeLog,v
retrieving revision 1.715
diff -u -r1.715 ChangeLog
--- man/ChangeLog 29 Oct 2005 11:40:18 -0000 1.715
+++ man/ChangeLog 29 Oct 2005 19:32:51 -0000
@@ -1,3 +1,9 @@
+2005-10-29 Ken Manheimer <ken.manheimer@gmail.com>
+
+ * pgg.texi (User Commands): Document additional passphrase
+ argument for pgg-encrypt-*, pgg-decrypt-*, and pgg-sign-* functions.
+ (Backend methods): Likewise for corresponding pgg-scheme-* functions.
+
2005-10-29 Sascha Wilde <wilde@sha-bang.de>
* pgg.texi (How to use): Update the example to add autoload of
Index: man/pgg.texi
===================================================================
RCS file: /cvsroot/emacs/emacs/man/pgg.texi,v
retrieving revision 1.6
diff -u -r1.6 pgg.texi
--- man/pgg.texi 29 Oct 2005 11:39:49 -0000 1.6
+++ man/pgg.texi 29 Oct 2005 19:32:51 -0000
@@ -129,7 +129,7 @@
fails immediately, but if the function had been called interactively, it
would ask you to retrieve the signer's public key from the server.
-@deffn Command pgg-encrypt-region start end recipients &optional sign
+@deffn Command pgg-encrypt-region start end recipients &optional sign passphrase
Encrypt the current region between @var{start} and @var{end} for
@var{recipients}. When the function were called interactively, you
would be asked about the recipients.
@@ -138,29 +138,41 @@
the accessible portion) with the resulting data.
If optional argument @var{sign} is non-@code{nil}, the function is
-request to do a combined sign and encrypt. This currently only work
-with GnuPG.
+request to do a combined sign and encrypt. This currently is
+confirmed to work with GnuPG, but might not work with PGP or PGP5.
+
+If optional @var{passphrase} is @code{nil}, the passphrase will be
+obtained from the passphrase cache or user.
@end deffn
-@deffn Command pgg-encrypt-symmetric-region start end
+@deffn Command pgg-encrypt-symmetric-region &optional start end passphrase
Encrypt the current region between @var{start} and @var{end} using a
symmetric cipher. After invocation you are asked for a passphrase.
-This is currently only implemented for GnuPG.
+If optional @var{passphrase} is @code{nil}, the passphrase will be
+obtained from the passphrase cache or user.
+
+symmetric-cipher encryption is currently only implemented for GnuPG.
@end deffn
-@deffn Command pgg-decrypt-region start end
+@deffn Command pgg-decrypt-region start end &optional passphrase
Decrypt the current region between @var{start} and @var{end}. If
decryption is successful, it replaces the current region contents (in
the accessible portion) with the resulting data.
+
+If optional @var{passphrase} is @code{nil}, the passphrase will be
+obtained from the passphrase cache or user.
@end deffn
-@deffn Command pgg-sign-region start end &optional cleartext
+@deffn Command pgg-sign-region start end &optional cleartext passphrase
Make the signature from text between @var{start} and @var{end}. If the
optional third argument @var{cleartext} is non-@code{nil}, or the
function is called interactively, it does not create a detached
signature. In such a case, it replaces the current region contents (in
the accessible portion) with the resulting data.
+
+If optional @var{passphrase} is @code{nil}, the passphrase will be
+obtained from the passphrase cache or user.
@end deffn
@deffn Command pgg-verify-region start end &optional signature fetch
@@ -309,26 +321,26 @@
keyrings.
@end deffn
-@deffn Method pgg-scheme-encrypt-region scheme start end recipients &optional sign
+@deffn Method pgg-scheme-encrypt-region scheme start end recipients &optional sign passphrase
Encrypt the current region between @var{start} and @var{end} for
@var{recipients}. If @var{sign} is non-@code{nil}, do a combined sign
and encrypt. If encryption is successful, it returns @code{t},
otherwise @code{nil}.
@end deffn
-@deffn Method pgg-scheme-encrypt-symmetric-region scheme start end
+@deffn Method pgg-scheme-encrypt-symmetric-region scheme start end &optional passphrase
Encrypt the current region between @var{start} and @var{end} using a
symmetric cipher and a passphrases. If encryption is successful, it
returns @code{t}, otherwise @code{nil}. This function is currently only
implemented for GnuPG.
@end deffn
-@deffn Method pgg-scheme-decrypt-region scheme start end
+@deffn Method pgg-scheme-decrypt-region scheme start end &optional passphrase
Decrypt the current region between @var{start} and @var{end}. If
decryption is successful, it returns @code{t}, otherwise @code{nil}.
@end deffn
-@deffn Method pgg-scheme-sign-region scheme start end &optional cleartext
+@deffn Method pgg-scheme-sign-region scheme start end &optional cleartext passphrase
Make the signature from text between @var{start} and @var{end}. If the
optional third argument @var{cleartext} is non-@code{nil}, it does not
create a detached signature. If signing is successful, it returns
[-- Attachment #3: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-31 17:30 ` Ken Manheimer
@ 2005-11-04 14:45 ` Eli Zaretskii
0 siblings, 0 replies; 156+ messages in thread
From: Eli Zaretskii @ 2005-11-04 14:45 UTC (permalink / raw)
Cc: wilde, schwab, ueno, emacs-devel, jas
> Date: Mon, 31 Oct 2005 13:30:40 -0400
> From: Ken Manheimer <ken.manheimer@gmail.com>
> Cc: Sascha Wilde <wilde@sha-bang.de>, jas@extundo.com, schwab@suse.de,
> ueno@unixuser.org, rms@gnu.org, emacs-devel@gnu.org
>
> as things approach release-readyness, i'm hoping that there's room to
> include this additional pgg patch i submitted. it brings the pgg-pgp
> and pgg-pgp5 support into line with the pgg scheme changes, and
> revises the pgg manual to track those changes as well.
Thanks, I installed them.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-10-06 22:41 ` Ken Manheimer
2005-10-07 10:00 ` Sascha Wilde
@ 2005-12-09 15:43 ` Simon Josefsson
2005-12-09 20:30 ` Stefan Monnier
` (2 more replies)
1 sibling, 3 replies; 156+ messages in thread
From: Simon Josefsson @ 2005-12-09 15:43 UTC (permalink / raw)
Cc: sascha schwab (symmetric encryption patches),
Daiki Ueno (pgg author), emacs-devel
Hi. I'm belatedly looking into your PGG patches. The reason is that
the we want to synchronize them with Gnus CVS, because that is the
origin of the files. If Gnus CVS is later synched with Emacs CVS,
your patches would conflict, and it will be time consuming to sort out
the mess. So I want the files to be in sync.
Ken Manheimer <ken.manheimer@gmail.com> writes:
> all of my experiments involve the current pgg code found in the
> gnu.org lisp/gnus CVS.
You may also check with the files in Gnus CVS. The Gnus 5.10.x branch
is automatically synched to Emacs HEAD CVS, so it now has your
patches, but Gnus CVS HEAD is developed concurrently, and fixes to PGG
are installed there first. I try to keep Gnus CVS HEAD and Emacs CVS
HEAD in sync. If you are contributing more patches, this may be
useful to know.
> 2. i also have some fundamental problems with the way unaltered pgg's
> passphrase caching system is wired. i am not sure about my analysis,
> and would love to be corrected, and filled in about how it actually does
> work. (the passphrase cache routines could really use some informative
> docstrings.)
Right. Gnus CVS HEAD is using password.el for this purpose. I
proposed earlier to make Emacs CVS HEAD also use it, but it was then
considered too late before the Emacs release to make any feature
additions, so I didn't install it. However, your changes are much
larger than mine, and I believe if PGG used password, it would be much
cleaner.
So I'm proposing to add password.el to Emacs CVS HEAD now. This would
clean up PGG and enable the general password infrastructure that Gnus
CVS HEAD uses.
I will now compare Emacs CVS HEAD pgg with Gnus CVS HEAD pgg to see
which patches have been applied, and which should be synchronized in
either direction.
Thanks.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-12-09 15:43 ` pgg symmetric encryption patch Simon Josefsson
@ 2005-12-09 20:30 ` Stefan Monnier
2005-12-09 20:31 ` Stefan Monnier
2005-12-10 4:13 ` Richard M. Stallman
2 siblings, 0 replies; 156+ messages in thread
From: Stefan Monnier @ 2005-12-09 20:30 UTC (permalink / raw)
Cc: sascha schwab (symmetric encryption patches),
Daiki Ueno (pgg author), emacs-devel
> You may also check with the files in Gnus CVS. The Gnus 5.10.x branch
> is automatically synched to Emacs HEAD CVS, so it now has your
> patches, but Gnus CVS HEAD is developed concurrently, and fixes to PGG
Nitpick: you probably meant "CVS trunk" since every branch has a HEAD.
Stefan
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-12-09 15:43 ` pgg symmetric encryption patch Simon Josefsson
2005-12-09 20:30 ` Stefan Monnier
@ 2005-12-09 20:31 ` Stefan Monnier
2005-12-10 4:13 ` Richard M. Stallman
2 siblings, 0 replies; 156+ messages in thread
From: Stefan Monnier @ 2005-12-09 20:31 UTC (permalink / raw)
Cc: sascha schwab (symmetric encryption patches),
Daiki Ueno (pgg author), emacs-devel
> So I'm proposing to add password.el to Emacs CVS HEAD now. This would
> clean up PGG and enable the general password infrastructure that Gnus
> CVS HEAD uses.
Sounds like a good idea to me,
Stefan
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-12-09 15:43 ` pgg symmetric encryption patch Simon Josefsson
2005-12-09 20:30 ` Stefan Monnier
2005-12-09 20:31 ` Stefan Monnier
@ 2005-12-10 4:13 ` Richard M. Stallman
2005-12-10 10:50 ` Simon Josefsson
2 siblings, 1 reply; 156+ messages in thread
From: Richard M. Stallman @ 2005-12-10 4:13 UTC (permalink / raw)
Cc: schwab, ken.manheimer, ueno, emacs-devel
So I'm proposing to add password.el to Emacs CVS HEAD now. This would
clean up PGG and enable the general password infrastructure that Gnus
CVS HEAD uses.
It is worrisome to make these large changes now, but in this case I
think we are stuck with doing it, so as to make the other code work.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-12-10 4:13 ` Richard M. Stallman
@ 2005-12-10 10:50 ` Simon Josefsson
2005-12-11 13:32 ` Sascha Wilde
0 siblings, 1 reply; 156+ messages in thread
From: Simon Josefsson @ 2005-12-10 10:50 UTC (permalink / raw)
Cc: schwab, ken.manheimer, ueno, emacs-devel
"Richard M. Stallman" <rms@gnu.org> writes:
> So I'm proposing to add password.el to Emacs CVS HEAD now. This would
> clean up PGG and enable the general password infrastructure that Gnus
> CVS HEAD uses.
>
> It is worrisome to make these large changes now, but in this case I
> think we are stuck with doing it, so as to make the other code work.
I will only do this if Ken and/or Sascha can test the resulting code
for their application. Ken/Sascha, are you listening? Do you have
time to test my patches now? I haven't written them yet, but will
soon.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-12-10 10:50 ` Simon Josefsson
@ 2005-12-11 13:32 ` Sascha Wilde
2005-12-11 13:42 ` Simon Josefsson
0 siblings, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2005-12-11 13:32 UTC (permalink / raw)
Cc: schwab, ken.manheimer, ueno, rms, emacs-devel
Simon Josefsson <jas@extundo.com> wrote:
> "Richard M. Stallman" <rms@gnu.org> writes:
>
>> So I'm proposing to add password.el to Emacs CVS HEAD now. This would
>> clean up PGG and enable the general password infrastructure that Gnus
>> CVS HEAD uses.
>>
>> It is worrisome to make these large changes now, but in this case I
>> think we are stuck with doing it, so as to make the other code work.
>
> I will only do this if Ken and/or Sascha can test the resulting code
> for their application. Ken/Sascha, are you listening? Do you have
> time to test my patches now? I haven't written them yet, but will
> soon.
Yes, I'm listening and willing to test your patches. The main work
and application however was done by ken, so he will have to test, if
his latest allout-mode features still work with your patches...
cheers
sascha
--
Sascha Wilde : "Der Nicht-Denkende glaubt, dass niemand denkt,
: der Denkende weiss es!"
: (Gabriel Laub)
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg symmetric encryption patch
2005-12-11 13:32 ` Sascha Wilde
@ 2005-12-11 13:42 ` Simon Josefsson
0 siblings, 0 replies; 156+ messages in thread
From: Simon Josefsson @ 2005-12-11 13:42 UTC (permalink / raw)
Cc: schwab, ken.manheimer, ueno, rms, emacs-devel
Sascha Wilde <wilde@sha-bang.de> writes:
> Simon Josefsson <jas@extundo.com> wrote:
>
>> "Richard M. Stallman" <rms@gnu.org> writes:
>>
>>> So I'm proposing to add password.el to Emacs CVS HEAD now. This would
>>> clean up PGG and enable the general password infrastructure that Gnus
>>> CVS HEAD uses.
>>>
>>> It is worrisome to make these large changes now, but in this case I
>>> think we are stuck with doing it, so as to make the other code work.
>>
>> I will only do this if Ken and/or Sascha can test the resulting code
>> for their application. Ken/Sascha, are you listening? Do you have
>> time to test my patches now? I haven't written them yet, but will
>> soon.
>
> Yes, I'm listening and willing to test your patches. The main work
> and application however was done by ken, so he will have to test, if
> his latest allout-mode features still work with your patches...
I've been talking with Ken offline. I will try to propose a complete
set of patches soon, the extensions he needed in password.el are
implemented.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Small patch to enable use of gpg-agent with pgg
2005-10-20 14:12 ` Simon Josefsson
` (3 preceding siblings ...)
2005-10-20 23:38 ` pgg symmetric encryption patch Richard M. Stallman
@ 2006-03-18 21:17 ` Sascha Wilde
2006-03-18 23:30 ` Daniel Pittman
2006-03-21 14:32 ` Simon Josefsson
4 siblings, 2 replies; 156+ messages in thread
From: Sascha Wilde @ 2006-03-18 21:17 UTC (permalink / raw)
Cc: Daiki Ueno (pgg author), ding, Simon Josefsson
[-- Attachment #1.1.1: Type: text/plain, Size: 387 bytes --]
Hi,
I wrote a small patch, which makes it possible to use the GnuPG agent
(which is part of gpg 1.9 and considered ready to use by Werner) with
the GnuPG backend of pgg.
I have done very little testing yet, but it seems to work fine.[0]
To test it:
set up your gpg-agent as usual and set pgg-gpg-use-agent to t.
cheers
sascha
[0] I signed this Mail using it... ;-)
[-- Attachment #1.1.2: pgg-gpg-agent.patch --]
[-- Type: text/x-patch, Size: 4943 bytes --]
*** pgg-gpg.el 11 Feb 2006 17:01:56 +0100 1.4
--- pgg-gpg.el 18 Mär 2006 21:57:00 +0100
***************
*** 51,56 ****
--- 51,61 ----
:type '(choice (const :tag "New `--recipient' option" "--recipient")
(const :tag "Old `--remote-user' option" "--remote-user")))
+ (defcustom pgg-gpg-use-agent nil
+ "Whether to use gnupg agent for key caching."
+ :group 'pgg-gpg
+ :type 'boolean)
+
(defvar pgg-gpg-user-id nil
"GnuPG ID of your default identity.")
***************
*** 58,64 ****
(let* ((output-file-name (pgg-make-temp-file "pgg-output"))
(args
`("--status-fd" "2"
! ,@(if passphrase '("--passphrase-fd" "0"))
"--yes" ; overwrite
"--output" ,output-file-name
,@pgg-gpg-extra-args ,@args))
--- 63,71 ----
(let* ((output-file-name (pgg-make-temp-file "pgg-output"))
(args
`("--status-fd" "2"
! ,@(if (and passphrase (not pgg-gpg-use-agent))
! '("--passphrase-fd" "0"))
! ,(if pgg-gpg-use-agent "--use-agent")
"--yes" ; overwrite
"--output" ,output-file-name
,@pgg-gpg-extra-args ,@args))
***************
*** 77,83 ****
(input (buffer-substring-no-properties start end))
(default-enable-multibyte-characters nil))
(with-temp-buffer
! (when passphrase
(insert passphrase "\n"))
(insert input)
(setq exit-status
--- 84,90 ----
(input (buffer-substring-no-properties start end))
(default-enable-multibyte-characters nil))
(with-temp-buffer
! (when (and passphrase (not pgg-gpg-use-agent))
(insert passphrase "\n"))
(insert input)
(setq exit-status
***************
*** 181,187 ****
If optional PASSPHRASE is not specified, it will be obtained from the
passphrase cache or user."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
! (passphrase (or passphrase
(when sign
(pgg-read-passphrase
(format "GnuPG passphrase for %s: "
--- 188,195 ----
If optional PASSPHRASE is not specified, it will be obtained from the
passphrase cache or user."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
! (passphrase (or pgg-gpg-use-agent
! passphrase
(when sign
(pgg-read-passphrase
(format "GnuPG passphrase for %s: "
***************
*** 213,219 ****
If optional PASSPHRASE is not specified, it will be obtained from the
passphrase cache or user."
! (let* ((passphrase (or passphrase
(pgg-read-passphrase
"GnuPG passphrase for symmetric encryption: ")))
(args
--- 221,228 ----
If optional PASSPHRASE is not specified, it will be obtained from the
passphrase cache or user."
! (let* ((passphrase (or pgg-gpg-use-agent
! passphrase
(pgg-read-passphrase
"GnuPG passphrase for symmetric encryption: ")))
(args
***************
*** 241,247 ****
(key-id (pgg-gpg-key-id-from-key-owner key-owner))
(pgg-gpg-user-id (or key-id key
pgg-gpg-user-id pgg-default-user-id))
! (passphrase (or passphrase
(pgg-read-passphrase
(format (if (pgg-gpg-symmetric-key-p message-keys)
"Passphrase for symmetric decryption: "
--- 250,257 ----
(key-id (pgg-gpg-key-id-from-key-owner key-owner))
(pgg-gpg-user-id (or key-id key
pgg-gpg-user-id pgg-default-user-id))
! (passphrase (or pgg-gpg-use-agent
! passphrase
(pgg-read-passphrase
(format (if (pgg-gpg-symmetric-key-p message-keys)
"Passphrase for symmetric decryption: "
***************
*** 276,282 ****
(defun pgg-gpg-sign-region (start end &optional cleartext passphrase)
"Make detached signature from text between START and END."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
! (passphrase (or passphrase
(pgg-read-passphrase
(format "GnuPG passphrase for %s: " pgg-gpg-user-id)
pgg-gpg-user-id)))
--- 286,293 ----
(defun pgg-gpg-sign-region (start end &optional cleartext passphrase)
"Make detached signature from text between START and END."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
! (passphrase (or pgg-gpg-use-agent
! passphrase
(pgg-read-passphrase
(format "GnuPG passphrase for %s: " pgg-gpg-user-id)
pgg-gpg-user-id)))
[-- Attachment #1.1.3: Type: text/plain, Size: 101 bytes --]
--
Sascha Wilde
Hi! I'm a .signature *virus*! Copy me into your ~/.signature to help me spread!
[-- Attachment #1.2: Type: application/pgp-signature, Size: 190 bytes --]
[-- Attachment #2: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-18 21:17 ` Small patch to enable use of gpg-agent with pgg Sascha Wilde
@ 2006-03-18 23:30 ` Daniel Pittman
2006-03-19 0:46 ` Miles Bader
2006-03-19 9:49 ` Sascha Wilde
2006-03-21 14:32 ` Simon Josefsson
1 sibling, 2 replies; 156+ messages in thread
From: Daniel Pittman @ 2006-03-18 23:30 UTC (permalink / raw)
Cc: emacs-devel
[-- Attachment #1: Type: text/plain, Size: 1063 bytes --]
Sascha Wilde <wilde@sha-bang.de> writes:
> I wrote a small patch, which makes it possible to use the GnuPG agent
> (which is part of gpg 1.9 and considered ready to use by Werner) with
> the GnuPG backend of pgg.
>
> I have done very little testing yet, but it seems to work fine.[0]
>
> To test it:
> set up your gpg-agent as usual and set pgg-gpg-use-agent to t.
I am not convinced that this is the best idea -- so far as I can see, if
I were to set `pgg-gpg-use-agent' to `t' then I *must* use the agent.
Is it not possible to enable gpg to try the agent first, then to prompt
for a passphrase?
Also, is it possible to automatically detect support for using the agent
so that it isn't necessary to manually enable this -- once a new enough
version is available, support is enabled?
Obviously, automatically enabling this is only useful if the first issue
is resolved. :)
Daniel
--
Digital Infrastructure Solutions -- making IT simple, stable and secure
Phone: 0401 155 707 email: contact@digital-infrastructure.com.au
[-- Attachment #2: Type: application/pgp-signature, Size: 190 bytes --]
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-18 23:30 ` Daniel Pittman
@ 2006-03-19 0:46 ` Miles Bader
2006-03-19 3:45 ` Daniel Pittman
2006-03-19 9:49 ` Sascha Wilde
1 sibling, 1 reply; 156+ messages in thread
From: Miles Bader @ 2006-03-19 0:46 UTC (permalink / raw)
Cc: emacs-devel
Daniel Pittman <daniel@rimspace.net> writes:
> Is it not possible to enable gpg to try the agent first, then to prompt
> for a passphrase?
In my experience (trying to do the same thing outside of gnus), gpg is
generally kind of stupid in this respect ... if you find a way to do it,
let me know!
-miles
--
"I distrust a research person who is always obviously busy on a task."
--Robert Frosch, VP, GM Research
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-19 0:46 ` Miles Bader
@ 2006-03-19 3:45 ` Daniel Pittman
2006-03-19 18:28 ` Miles Bader
0 siblings, 1 reply; 156+ messages in thread
From: Daniel Pittman @ 2006-03-19 3:45 UTC (permalink / raw)
Cc: emacs-devel
Miles Bader <miles@gnu.org> writes:
> Daniel Pittman <daniel@rimspace.net> writes:
>> Is it not possible to enable gpg to try the agent first, then to prompt
>> for a passphrase?
>
> In my experience (trying to do the same thing outside of gnus), gpg is
> generally kind of stupid in this respect ... if you find a way to do
> it, let me know!
Hrm. According to the documentation I have here, '--use-agent' will
first try to contact the agent, and will then ask for a passphrase if
that fails.
I don't have access to the agent to test, but it seems that it may be
possible to have this accept a passphrase from Gnus as well as trying
the agent. Just a simple matter of programming -- which is, of course,
easy for me to volunteer the original poster. ;)
Daniel
--
Digital Infrastructure Solutions -- making IT simple, stable and secure
Phone: 0401 155 707 email: contact@digital-infrastructure.com.au
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-18 23:30 ` Daniel Pittman
2006-03-19 0:46 ` Miles Bader
@ 2006-03-19 9:49 ` Sascha Wilde
2006-03-19 17:30 ` Sascha Wilde
1 sibling, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2006-03-19 9:49 UTC (permalink / raw)
Cc: ding, emacs-devel
[-- Attachment #1.1: Type: text/plain, Size: 1364 bytes --]
Daniel Pittman <daniel@rimspace.net> wrote:
> Sascha Wilde <wilde@sha-bang.de> writes:
>
>> I wrote a small patch, which makes it possible to use the GnuPG agent
>> (which is part of gpg 1.9 and considered ready to use by Werner) with
>> the GnuPG backend of pgg.
[...]
> I am not convinced that this is the best idea -- so far as I can see, if
> I were to set `pgg-gpg-use-agent' to `t' then I *must* use the agent.
>
> Is it not possible to enable gpg to try the agent first, then to prompt
> for a passphrase?
Yes, that would be good. I'll try to implement it.
> Also, is it possible to automatically detect support for using the agent
> so that it isn't necessary to manually enable this -- once a new enough
> version is available, support is enabled?
This would be very error prone. Even if a running gpg-agent is
available there are certain conditions which could make using it
impossible. For example: on an text console running the standard
pin-entry program (which uses curses) from within emacs won't work.
That's why I think that using an available agent should be enabled
explicitly.
cheers
sascha
--
Sascha Wilde
Real programmers don't want "what you see is what you get", they want
"you asked for it, you got it". They want editors that are terse,
powerful, cryptic, and unforgiving. In a word, Teco.
[-- Attachment #1.2: Type: application/pgp-signature, Size: 190 bytes --]
[-- Attachment #2: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-19 9:49 ` Sascha Wilde
@ 2006-03-19 17:30 ` Sascha Wilde
0 siblings, 0 replies; 156+ messages in thread
From: Sascha Wilde @ 2006-03-19 17:30 UTC (permalink / raw)
Cc: ding, emacs-devel
[-- Attachment #1.1.1: Type: text/plain, Size: 869 bytes --]
Sascha Wilde <wilde@sha-bang.de> wrote:
> Daniel Pittman <daniel@rimspace.net> wrote:
>>> Sascha Wilde <wilde@sha-bang.de> writes:
>>
>>> I wrote a small patch, which makes it possible to use the GnuPG agent
>>> (which is part of gpg 1.9 and considered ready to use by Werner) with
>>> the GnuPG backend of pgg.
> [...]
>> I am not convinced that this is the best idea -- so far as I can see, if
>> I were to set `pgg-gpg-use-agent' to `t' then I *must* use the agent.
>>
>> Is it not possible to enable gpg to try the agent first, then to prompt
>> for a passphrase?
>
> Yes, that would be good. I'll try to implement it.
I attached a patch which performs a test if gpg-agent is really
available when pgg-gpg-use-agent is set to t.
Please note, this new patch also fixees a bug, which was introduced
by the original patch and broke non agent use...
cheers
sascha
[-- Attachment #1.1.2: pgg-gpg-agent.patch --]
[-- Type: text/x-patch, Size: 6832 bytes --]
*** pgg-gpg.el 11 Feb 2006 17:01:56 +0100 1.4
--- pgg-gpg.el 19 Mär 2006 17:05:38 +0100
***************
*** 4,10 ****
;; 2005, 2006 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
! ;; Symmetric encryption added by: Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/10/28
;; Keywords: PGP, OpenPGP, GnuPG
--- 4,11 ----
;; 2005, 2006 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
! ;; Symmetric encryption and gpg-agent support added by:
! ;; Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/10/28
;; Keywords: PGP, OpenPGP, GnuPG
***************
*** 51,64 ****
:type '(choice (const :tag "New `--recipient' option" "--recipient")
(const :tag "Old `--remote-user' option" "--remote-user")))
(defvar pgg-gpg-user-id nil
"GnuPG ID of your default identity.")
(defun pgg-gpg-process-region (start end passphrase program args)
! (let* ((output-file-name (pgg-make-temp-file "pgg-output"))
(args
`("--status-fd" "2"
! ,@(if passphrase '("--passphrase-fd" "0"))
"--yes" ; overwrite
"--output" ,output-file-name
,@pgg-gpg-extra-args ,@args))
--- 52,73 ----
:type '(choice (const :tag "New `--recipient' option" "--recipient")
(const :tag "Old `--remote-user' option" "--remote-user")))
+ (defcustom pgg-gpg-use-agent nil
+ "Whether to use gnupg agent for key caching."
+ :group 'pgg-gpg
+ :type 'boolean)
+
(defvar pgg-gpg-user-id nil
"GnuPG ID of your default identity.")
(defun pgg-gpg-process-region (start end passphrase program args)
! (let* ((use-agent (pgg-gpg-use-agent-p))
! (output-file-name (pgg-make-temp-file "pgg-output"))
(args
`("--status-fd" "2"
! ,@(if (and passphrase (not use-agent))
! '("--passphrase-fd" "0"))
! ,@(if use-agent '("--use-agent"))
"--yes" ; overwrite
"--output" ,output-file-name
,@pgg-gpg-extra-args ,@args))
***************
*** 77,83 ****
(input (buffer-substring-no-properties start end))
(default-enable-multibyte-characters nil))
(with-temp-buffer
! (when passphrase
(insert passphrase "\n"))
(insert input)
(setq exit-status
--- 86,92 ----
(input (buffer-substring-no-properties start end))
(default-enable-multibyte-characters nil))
(with-temp-buffer
! (when (and passphrase (not (pgg-gpg-use-agent-p)))
(insert passphrase "\n"))
(insert input)
(setq exit-status
***************
*** 181,187 ****
If optional PASSPHRASE is not specified, it will be obtained from the
passphrase cache or user."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
! (passphrase (or passphrase
(when sign
(pgg-read-passphrase
(format "GnuPG passphrase for %s: "
--- 190,197 ----
If optional PASSPHRASE is not specified, it will be obtained from the
passphrase cache or user."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
! (passphrase (or (pgg-gpg-use-agent-p)
! passphrase
(when sign
(pgg-read-passphrase
(format "GnuPG passphrase for %s: "
***************
*** 213,219 ****
If optional PASSPHRASE is not specified, it will be obtained from the
passphrase cache or user."
! (let* ((passphrase (or passphrase
(pgg-read-passphrase
"GnuPG passphrase for symmetric encryption: ")))
(args
--- 223,230 ----
If optional PASSPHRASE is not specified, it will be obtained from the
passphrase cache or user."
! (let* ((passphrase (or (pgg-gpg-use-agent-p)
! passphrase
(pgg-read-passphrase
"GnuPG passphrase for symmetric encryption: ")))
(args
***************
*** 241,247 ****
(key-id (pgg-gpg-key-id-from-key-owner key-owner))
(pgg-gpg-user-id (or key-id key
pgg-gpg-user-id pgg-default-user-id))
! (passphrase (or passphrase
(pgg-read-passphrase
(format (if (pgg-gpg-symmetric-key-p message-keys)
"Passphrase for symmetric decryption: "
--- 252,259 ----
(key-id (pgg-gpg-key-id-from-key-owner key-owner))
(pgg-gpg-user-id (or key-id key
pgg-gpg-user-id pgg-default-user-id))
! (passphrase (or (pgg-gpg-use-agent-p)
! passphrase
(pgg-read-passphrase
(format (if (pgg-gpg-symmetric-key-p message-keys)
"Passphrase for symmetric decryption: "
***************
*** 276,282 ****
(defun pgg-gpg-sign-region (start end &optional cleartext passphrase)
"Make detached signature from text between START and END."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
! (passphrase (or passphrase
(pgg-read-passphrase
(format "GnuPG passphrase for %s: " pgg-gpg-user-id)
pgg-gpg-user-id)))
--- 288,295 ----
(defun pgg-gpg-sign-region (start end &optional cleartext passphrase)
"Make detached signature from text between START and END."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
! (passphrase (or (pgg-gpg-use-agent-p)
! passphrase
(pgg-read-passphrase
(format "GnuPG passphrase for %s: " pgg-gpg-user-id)
pgg-gpg-user-id)))
***************
*** 345,350 ****
--- 358,382 ----
(append-to-buffer pgg-output-buffer (point-min)(point-max))
(pgg-process-when-success)))
+ (defun pgg-gpg-update-agent ()
+ "Try to connet to gpg-agent and send UPDATESTARTUPTTY."
+ (let* ((agent-info (getenv "GPG_AGENT_INFO"))
+ (socket (and agent-info
+ (string-match "^\\([^:]*\\)" agent-info)
+ (match-string 1 agent-info)))
+ (conn (and socket
+ (make-network-process :name "gpg-agent-process"
+ :host 'local :family 'local
+ :service socket))))
+ (when (and conn (eq (process-status conn) 'open))
+ (process-send-string conn "UPDATESTARTUPTTY\n")
+ (delete-process conn)
+ t)))
+
+ (defun pgg-gpg-use-agent-p ()
+ "Return t if `pgg-gpg-use-agent' is t and gpg-agent is available."
+ (and pgg-gpg-use-agent (pgg-gpg-update-agent)))
+
(provide 'pgg-gpg)
;;; arch-tag: 2aa5d5d8-93a0-4865-9312-33e29830e000
[-- Attachment #1.1.3: Type: text/plain, Size: 174 bytes --]
--
Sascha Wilde : VI is to EMACS as masturbation is to making love:
: effective and always available but probably not your
: first choice...
[-- Attachment #1.2: Type: application/pgp-signature, Size: 190 bytes --]
[-- Attachment #2: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-19 3:45 ` Daniel Pittman
@ 2006-03-19 18:28 ` Miles Bader
0 siblings, 0 replies; 156+ messages in thread
From: Miles Bader @ 2006-03-19 18:28 UTC (permalink / raw)
Cc: emacs-devel
Daniel Pittman <daniel@rimspace.net> writes:
> Hrm. According to the documentation I have here, '--use-agent' will
> first try to contact the agent, and will then ask for a passphrase if
> that fails.
It does, but it doesn't really work very well -- it must use some
different mechanism than the ordinary (no agent specified at all) case
because it only prompts once (doesn't re-prompt if you give a wrong
password) and seems generally seems more flaky (fails in more cases,
e.g., given other options that ordinarily don't preclude password entry).
-Miles
--
Love is a snowmobile racing across the tundra. Suddenly it flips over,
pinning you underneath. At night the ice weasels come. --Nietzsche
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-18 21:17 ` Small patch to enable use of gpg-agent with pgg Sascha Wilde
2006-03-18 23:30 ` Daniel Pittman
@ 2006-03-21 14:32 ` Simon Josefsson
2006-03-21 21:29 ` Reiner Steib
2006-03-22 8:36 ` Sascha Wilde
1 sibling, 2 replies; 156+ messages in thread
From: Simon Josefsson @ 2006-03-21 14:32 UTC (permalink / raw)
Cc: Daiki Ueno (pgg author), ding, emacs-devel
Sascha Wilde <wilde@sha-bang.de> writes:
> Hi,
>
> I wrote a small patch, which makes it possible to use the GnuPG agent
> (which is part of gpg 1.9 and considered ready to use by Werner) with
> the GnuPG backend of pgg.
>
> I have done very little testing yet, but it seems to work fine.[0]
>
> To test it:
> set up your gpg-agent as usual and set pgg-gpg-use-agent to t.
Your patch didn't work well for me:
1) Non-agent mode didn't work at all (the args list contained 'nil' so
invoking gpg failed with a lisp error).
2) After fixing the above, the patch made the passphrase be 't', which
broke the passphrase cache, causing a lisp error.
How about this patch instead? It works for me. I've also improved
the pgg-use-agent default value. I've installed this on Emacs CVS
trunk, Gnus v5-10 and Gnus CVS.
Thanks for working on this, it is quite useful.
--- pgg-gpg.el 21 Mar 2006 14:53:00 +0100 1.4
+++ pgg-gpg.el 21 Mar 2006 15:22:38 +0100
@@ -51,6 +51,13 @@
:type '(choice (const :tag "New `--recipient' option" "--recipient")
(const :tag "Old `--remote-user' option" "--remote-user")))
+(defcustom pgg-gpg-use-agent (if (getenv "GPG_AGENT_INFO") t nil)
+ "Whether to use gnupg agent for key caching.
+By default, it will be enabled iff the environment variable
+\"GPG_AGENT_INFO\" is set."
+ :group 'pgg-gpg
+ :type 'boolean)
+
(defvar pgg-gpg-user-id nil
"GnuPG ID of your default identity.")
@@ -58,7 +65,8 @@
(let* ((output-file-name (pgg-make-temp-file "pgg-output"))
(args
`("--status-fd" "2"
- ,@(if passphrase '("--passphrase-fd" "0"))
+ ,@(if pgg-gpg-use-agent '("--use-agent")
+ (if passphrase '("--passphrase-fd" "0")))
"--yes" ; overwrite
"--output" ,output-file-name
,@pgg-gpg-extra-args ,@args))
@@ -100,7 +108,8 @@
(set-default-file-modes orig-mode))))
(defun pgg-gpg-possibly-cache-passphrase (passphrase &optional key notruncate)
- (if (and pgg-cache-passphrase
+ (if (and passphrase
+ pgg-cache-passphrase
(progn
(goto-char (point-min))
(re-search-forward "^\\[GNUPG:] \\(GOOD_PASSPHRASE\\>\\)\\|\\(SIG_CREATED\\)" nil t)))
@@ -182,7 +191,7 @@
passphrase cache or user."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
(passphrase (or passphrase
- (when sign
+ (when (and sign (not pgg-gpg-use-agent))
(pgg-read-passphrase
(format "GnuPG passphrase for %s: "
pgg-gpg-user-id)
@@ -214,8 +223,9 @@
If optional PASSPHRASE is not specified, it will be obtained from the
passphrase cache or user."
(let* ((passphrase (or passphrase
+ (when (not pgg-gpg-use-agent)
(pgg-read-passphrase
- "GnuPG passphrase for symmetric encryption: ")))
+ "GnuPG passphrase for symmetric encryption: "))))
(args
(append (list "--batch" "--armor" "--symmetric" )
(if pgg-text-mode (list "--textmode")))))
@@ -242,12 +252,13 @@
(pgg-gpg-user-id (or key-id key
pgg-gpg-user-id pgg-default-user-id))
(passphrase (or passphrase
+ (when (not pgg-gpg-use-agent)
(pgg-read-passphrase
(format (if (pgg-gpg-symmetric-key-p message-keys)
"Passphrase for symmetric decryption: "
"GnuPG passphrase for %s: ")
(or key-owner "??"))
- pgg-gpg-user-id)))
+ pgg-gpg-user-id))))
(args '("--batch" "--decrypt")))
(pgg-gpg-process-region start end passphrase pgg-gpg-program args)
(with-current-buffer pgg-errors-buffer
@@ -277,9 +288,11 @@
"Make detached signature from text between START and END."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
(passphrase (or passphrase
+ (when (not pgg-gpg-use-agent)
(pgg-read-passphrase
- (format "GnuPG passphrase for %s: " pgg-gpg-user-id)
- pgg-gpg-user-id)))
+ (format "GnuPG passphrase for %s: "
+ pgg-gpg-user-id)
+ pgg-gpg-user-id))))
(args
(append (list (if cleartext "--clearsign" "--detach-sign")
"--armor" "--batch" "--verbose"
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-21 14:32 ` Simon Josefsson
@ 2006-03-21 21:29 ` Reiner Steib
2006-03-22 9:49 ` Simon Josefsson
2006-03-22 8:36 ` Sascha Wilde
1 sibling, 1 reply; 156+ messages in thread
From: Reiner Steib @ 2006-03-21 21:29 UTC (permalink / raw)
Cc: Miles Bader
On Tue, Mar 21 2006, Simon Josefsson wrote:
> I've installed this on Emacs CVS trunk, Gnus v5-10 and Gnus CVS.
The versions differed in whitespace. I've synced them now.
I also removed the bogus pgg-gpg.el entry in lisp/gnus/ChangeLog
(added by Miles' sync script). pgg-gpg.el is in lisp, where Simon
already added a ChangeLog entry.
Bye, Reiner.
--
,,,
(o o)
---ooO-(_)-Ooo--- | PGP key available | http://rsteib.home.pages.de/
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-21 14:32 ` Simon Josefsson
2006-03-21 21:29 ` Reiner Steib
@ 2006-03-22 8:36 ` Sascha Wilde
2006-03-22 9:16 ` Daiki Ueno
` (2 more replies)
1 sibling, 3 replies; 156+ messages in thread
From: Sascha Wilde @ 2006-03-22 8:36 UTC (permalink / raw)
Cc: Daiki Ueno (pgg author), ding, emacs-devel
[-- Attachment #1: Type: text/plain, Size: 1519 bytes --]
Simon Josefsson <jas@extundo.com> wrote:
Hi Simon,
first of all, fore some reasons you got lost from the list of CC's so
you missed some important messages in this thread, including a more
elaborated version of my patch...
> 1) Non-agent mode didn't work at all (the args list contained 'nil' so
> invoking gpg failed with a lisp error).
Yes. This was fixed in my second patch. (and in the attached, of cause)
> 2) After fixing the above, the patch made the passphrase be 't', which
> broke the passphrase cache, causing a lisp error.
Thanks, I used your strategy to fix this issue in my new patch (which
I attached).
> How about this patch instead? It works for me. I've also improved
> the pgg-use-agent default value.
This is very error prone. As I wrote before on emacs-devel: there are
certain situations in which using the agent will fail -- even if it is
available: for example: on an text console running the standard
pin-entry program (which uses curses) from within emacs won't work.
That's why I think this option should be explicitly enabled by the user.
Another problem is, that checking for $GPG_AGENT_INFO is not
sufficient, the environment variable will stay set, even is the agent
was killed.
Could you please consider committing the attached patch, which
reverses the default of pgg-gpg-use-agent to nil, and adds an check if
the agent is _really_ available, when pgg-gpg-use-agent is set to t?
(The patch is against the latest CVS, including your patch that is)
cheers
sascha
[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: pgg-gpg-agent.patch --]
[-- Type: text/x-patch, Size: 3869 bytes --]
Index: pgg-gpg.el
===================================================================
RCS file: /sources/emacs/emacs/lisp/pgg-gpg.el,v
retrieving revision 1.6
diff -c -r1.6 pgg-gpg.el
--- pgg-gpg.el 21 Mar 2006 21:24:27 -0000 1.6
+++ pgg-gpg.el 22 Mar 2006 08:14:59 -0000
@@ -4,7 +4,8 @@
;; 2005, 2006 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
-;; Symmetric encryption added by: Sascha Wilde <wilde@sha-bang.de>
+;; Symmetric encryption and gpg-agent support added by:
+;; Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/10/28
;; Keywords: PGP, OpenPGP, GnuPG
@@ -51,10 +52,8 @@
:type '(choice (const :tag "New `--recipient' option" "--recipient")
(const :tag "Old `--remote-user' option" "--remote-user")))
-(defcustom pgg-gpg-use-agent (if (getenv "GPG_AGENT_INFO") t nil)
- "Whether to use gnupg agent for key caching.
-By default, it will be enabled iff the environment variable
-\"GPG_AGENT_INFO\" is set."
+(defcustom pgg-gpg-use-agent nil
+ "Whether to use gnupg agent for key caching."
:group 'pgg-gpg
:type 'boolean)
@@ -62,10 +61,11 @@
"GnuPG ID of your default identity.")
(defun pgg-gpg-process-region (start end passphrase program args)
- (let* ((output-file-name (pgg-make-temp-file "pgg-output"))
+ (let* ((use-agent (pgg-gpg-use-agent-p))
+ (output-file-name (pgg-make-temp-file "pgg-output"))
(args
`("--status-fd" "2"
- ,@(if pgg-gpg-use-agent '("--use-agent")
+ ,@(if use-agent '("--use-agent")
(if passphrase '("--passphrase-fd" "0")))
"--yes" ; overwrite
"--output" ,output-file-name
@@ -189,7 +189,7 @@
passphrase cache or user."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
(passphrase (or passphrase
- (when (and sign (not pgg-gpg-use-agent))
+ (when (and sign (not (pgg-gpg-use-agent-p)))
(pgg-read-passphrase
(format "GnuPG passphrase for %s: "
pgg-gpg-user-id)
@@ -221,7 +221,7 @@
If optional PASSPHRASE is not specified, it will be obtained from the
passphrase cache or user."
(let* ((passphrase (or passphrase
- (when (not pgg-gpg-use-agent)
+ (when (not (pgg-gpg-use-agent-p))
(pgg-read-passphrase
"GnuPG passphrase for symmetric encryption: "))))
(args
@@ -250,7 +250,7 @@
(pgg-gpg-user-id (or key-id key
pgg-gpg-user-id pgg-default-user-id))
(passphrase (or passphrase
- (when (not pgg-gpg-use-agent)
+ (when (not (pgg-gpg-use-agent-p))
(pgg-read-passphrase
(format (if (pgg-gpg-symmetric-key-p message-keys)
"Passphrase for symmetric decryption: "
@@ -286,7 +286,7 @@
"Make detached signature from text between START and END."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
(passphrase (or passphrase
- (when (not pgg-gpg-use-agent)
+ (when (not (pgg-gpg-use-agent-p))
(pgg-read-passphrase
(format "GnuPG passphrase for %s: "
pgg-gpg-user-id)
@@ -356,6 +356,25 @@
(append-to-buffer pgg-output-buffer (point-min)(point-max))
(pgg-process-when-success)))
+(defun pgg-gpg-update-agent ()
+ "Try to connet to gpg-agent and send UPDATESTARTUPTTY."
+ (let* ((agent-info (getenv "GPG_AGENT_INFO"))
+ (socket (and agent-info
+ (string-match "^\\([^:]*\\)" agent-info)
+ (match-string 1 agent-info)))
+ (conn (and socket
+ (make-network-process :name "gpg-agent-process"
+ :host 'local :family 'local
+ :service socket))))
+ (when (and conn (eq (process-status conn) 'open))
+ (process-send-string conn "UPDATESTARTUPTTY\n")
+ (delete-process conn)
+ t)))
+
+(defun pgg-gpg-use-agent-p ()
+ "Return t if `pgg-gpg-use-agent' is t and gpg-agent is available."
+ (and pgg-gpg-use-agent (pgg-gpg-update-agent)))
+
(provide 'pgg-gpg)
;;; arch-tag: 2aa5d5d8-93a0-4865-9312-33e29830e000
[-- Attachment #3: Type: text/plain, Size: 149 bytes --]
--
Sascha Wilde
"Unix was the first OS where you could carry the media and system
documentation around in a briefcase. This was fixed in BSD4.2."
[-- Attachment #4: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-22 8:36 ` Sascha Wilde
@ 2006-03-22 9:16 ` Daiki Ueno
2006-03-22 9:48 ` Simon Josefsson
2006-03-22 11:03 ` Sascha Wilde
2006-03-22 9:46 ` Small patch to enable use of gpg-agent with pgg Simon Josefsson
2006-03-22 16:13 ` Simon Josefsson
2 siblings, 2 replies; 156+ messages in thread
From: Daiki Ueno @ 2006-03-22 9:16 UTC (permalink / raw)
Cc: emacs-devel, ding, Simon Josefsson
Hello,
>>>>> In <m2slpadgf0.fsf@kenny.sha-bang.de>
>>>>> Sascha Wilde <wilde@sha-bang.de> wrote:
> This is very error prone. As I wrote before on emacs-devel: there are
> certain situations in which using the agent will fail -- even if it is
> available: for example: on an text console running the standard
> pin-entry program (which uses curses) from within emacs won't work.
> That's why I think this option should be explicitly enabled by the user.
> Another problem is, that checking for $GPG_AGENT_INFO is not
> sufficient, the environment variable will stay set, even is the agent
> was killed.
That looks a bit complicated for me. Is there a choice of utilizing
--status-fd output? That is, query a user for his passphrase only when
gpg requested (i.e. we see NEED_PASSPHRASE)
Though I know that this solution involves some coding to make use of
asynchronous process, I expect that it is not so hard to implement.
Regards,
--
Daiki Ueno
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-22 8:36 ` Sascha Wilde
2006-03-22 9:16 ` Daiki Ueno
@ 2006-03-22 9:46 ` Simon Josefsson
2006-03-22 16:13 ` Simon Josefsson
2 siblings, 0 replies; 156+ messages in thread
From: Simon Josefsson @ 2006-03-22 9:46 UTC (permalink / raw)
Cc: Daiki Ueno (pgg author), ding, emacs-devel
Sascha Wilde <wilde@sha-bang.de> writes:
> Simon Josefsson <jas@extundo.com> wrote:
>
> Hi Simon,
>
> first of all, fore some reasons you got lost from the list of CC's so
> you missed some important messages in this thread, including a more
> elaborated version of my patch...
Hi Sascha. Oops!
>> 1) Non-agent mode didn't work at all (the args list contained 'nil' so
>> invoking gpg failed with a lisp error).
>
> Yes. This was fixed in my second patch. (and in the attached, of cause)
>
>> 2) After fixing the above, the patch made the passphrase be 't', which
>> broke the passphrase cache, causing a lisp error.
>
> Thanks, I used your strategy to fix this issue in my new patch (which
> I attached).
Your patch look good, although Daiki's idea of querying for the
passphrase only when it is needed seem better. I don't have time to
implement that though. If you or Daiki have time, I'd prefer that
solution, but if there isn't a patch to commit within a few days, I'll
install your patch so we don't get stuck. What do you think?
>> How about this patch instead? It works for me. I've also improved
>> the pgg-use-agent default value.
>
> This is very error prone. As I wrote before on emacs-devel: there are
> certain situations in which using the agent will fail -- even if it is
> available: for example: on an text console running the standard
> pin-entry program (which uses curses) from within emacs won't work.
> That's why I think this option should be explicitly enabled by the user.
>
> Another problem is, that checking for $GPG_AGENT_INFO is not
> sufficient, the environment variable will stay set, even is the agent
> was killed.
Ah, I see.
> Could you please consider committing the attached patch, which
> reverses the default of pgg-gpg-use-agent to nil, and adds an check if
> the agent is _really_ available, when pgg-gpg-use-agent is set to t?
>
> (The patch is against the latest CVS, including your patch that is)
Seems fine, although I'll wait a day or so until I see if we can get
Daiki's idea implemented.
Thanks!
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-22 9:16 ` Daiki Ueno
@ 2006-03-22 9:48 ` Simon Josefsson
2006-03-22 11:03 ` Sascha Wilde
1 sibling, 0 replies; 156+ messages in thread
From: Simon Josefsson @ 2006-03-22 9:48 UTC (permalink / raw)
Cc: Sascha Wilde, ding, emacs-devel
Daiki Ueno <ueno@unixuser.org> writes:
> Hello,
>
>>>>>> In <m2slpadgf0.fsf@kenny.sha-bang.de>
>>>>>> Sascha Wilde <wilde@sha-bang.de> wrote:
>> This is very error prone. As I wrote before on emacs-devel: there are
>> certain situations in which using the agent will fail -- even if it is
>> available: for example: on an text console running the standard
>> pin-entry program (which uses curses) from within emacs won't work.
>> That's why I think this option should be explicitly enabled by the user.
>
>> Another problem is, that checking for $GPG_AGENT_INFO is not
>> sufficient, the environment variable will stay set, even is the agent
>> was killed.
>
> That looks a bit complicated for me. Is there a choice of utilizing
> --status-fd output? That is, query a user for his passphrase only when
> gpg requested (i.e. we see NEED_PASSPHRASE)
>
> Though I know that this solution involves some coding to make use of
> asynchronous process, I expect that it is not so hard to implement.
Hi Daiki! I like this. Would you like to implement it?
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-21 21:29 ` Reiner Steib
@ 2006-03-22 9:49 ` Simon Josefsson
0 siblings, 0 replies; 156+ messages in thread
From: Simon Josefsson @ 2006-03-22 9:49 UTC (permalink / raw)
Cc: emacs-devel
Reiner Steib <reinersteib+gmane@imap.cc> writes:
> On Tue, Mar 21 2006, Simon Josefsson wrote:
>
>> I've installed this on Emacs CVS trunk, Gnus v5-10 and Gnus CVS.
>
> The versions differed in whitespace. I've synced them now.
>
> I also removed the bogus pgg-gpg.el entry in lisp/gnus/ChangeLog
> (added by Miles' sync script). pgg-gpg.el is in lisp, where Simon
> already added a ChangeLog entry.
Thanks!
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-22 9:16 ` Daiki Ueno
2006-03-22 9:48 ` Simon Josefsson
@ 2006-03-22 11:03 ` Sascha Wilde
2006-03-22 11:13 ` Simon Josefsson
1 sibling, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2006-03-22 11:03 UTC (permalink / raw)
Cc: emacs-devel, ding, Simon Josefsson
Hello Daiki,
I'm afraid I don't understand your suggestion...
Daiki Ueno <ueno@unixuser.org> wrote:
>>>>>> In <m2slpadgf0.fsf@kenny.sha-bang.de>
>>>>>> Sascha Wilde <wilde@sha-bang.de> wrote:
>> This is very error prone. As I wrote before on emacs-devel: there are
>> certain situations in which using the agent will fail -- even if it is
>> available: for example: on an text console running the standard
>> pin-entry program (which uses curses) from within emacs won't work.
>> That's why I think this option should be explicitly enabled by the user.
>
>> Another problem is, that checking for $GPG_AGENT_INFO is not
>> sufficient, the environment variable will stay set, even is the agent
>> was killed.
>
> That looks a bit complicated for me.
What exactly looks complicated to you?
> Is there a choice of utilizing --status-fd output? That is, query a
> user for his passphrase only when gpg requested (i.e. we see
> NEED_PASSPHRASE)
I don't understand this point -- with the proposed patch the user
already only gets queried for the passphrase when gpg needs it -- or
am I missing something?
While I can imagine that a solution utilizing --status-fd might be
more elegant, I don't see how this could improve usability (and I
would expect it to be rather more than less complicated).
Can you please explain what behavior you would expect from pgg, maybe
with an example?
Thanks
sascha
--
Sascha Wilde
Nota bene: wenn Word für Längeres geeignet wäre, würde es schließlich
nicht Word, sondern Sentence, Page oder Article heißen
-- Matthias Mühlich in dctt
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-22 11:03 ` Sascha Wilde
@ 2006-03-22 11:13 ` Simon Josefsson
2006-03-22 12:25 ` Daiki Ueno
0 siblings, 1 reply; 156+ messages in thread
From: Simon Josefsson @ 2006-03-22 11:13 UTC (permalink / raw)
Cc: Daiki Ueno, ding, emacs-devel
Sascha Wilde <wilde@sha-bang.de> writes:
>> Is there a choice of utilizing --status-fd output? That is, query a
>> user for his passphrase only when gpg requested (i.e. we see
>> NEED_PASSPHRASE)
>
> I don't understand this point -- with the proposed patch the user
> already only gets queried for the passphrase when gpg needs it -- or
> am I missing something?
Right now, pgg assume that gpg will need a passphrase so it asks the
user for one. It may be better if pgg postpone the passphrase query
until gpg tell pgg that it needs a passphrase. Then it is only
queried for when it is needed. This should be more reliable, but
slightly more complicated to implement (asynchronous code).
Gpg doesn't need a passphrase if the agent is used, or (I guess) if
the key isn't protected with a password. If a smartcard is used, gpg
need a pin code and not a passphrase, I'm not sure pgg can handle this
at all now. (This last point is separate, and wouldn't be solved if
we implement Daiki's idea.)
I may have misunderstood Daiki though...
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-22 11:13 ` Simon Josefsson
@ 2006-03-22 12:25 ` Daiki Ueno
2006-03-23 10:40 ` Daiki Ueno
0 siblings, 1 reply; 156+ messages in thread
From: Daiki Ueno @ 2006-03-22 12:25 UTC (permalink / raw)
Cc: Sascha Wilde, ding, emacs-devel
>>>>> In <877j6mg2af.fsf@latte.josefsson.org>
>>>>> Simon Josefsson <jas@extundo.com> wrote:
> Sascha Wilde <wilde@sha-bang.de> writes:
> >> Is there a choice of utilizing --status-fd output? That is, query a
> >> user for his passphrase only when gpg requested (i.e. we see
> >> NEED_PASSPHRASE)
> >
> > I don't understand this point -- with the proposed patch the user
> > already only gets queried for the passphrase when gpg needs it -- or
> > am I missing something?
> Right now, pgg assume that gpg will need a passphrase so it asks the
> user for one. It may be better if pgg postpone the passphrase query
> until gpg tell pgg that it needs a passphrase. Then it is only
> queried for when it is needed. This should be more reliable, but
> slightly more complicated to implement (asynchronous code).
Thanks for your explanation. This is what I wanted to say.
We may need some experiments to see gpg use status fd as expected,
though.
Anyway, I'll try to implement this.
Regards,
--
Daiki Ueno
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-22 8:36 ` Sascha Wilde
2006-03-22 9:16 ` Daiki Ueno
2006-03-22 9:46 ` Small patch to enable use of gpg-agent with pgg Simon Josefsson
@ 2006-03-22 16:13 ` Simon Josefsson
2006-03-22 23:01 ` Katsumi Yamaoka
2 siblings, 1 reply; 156+ messages in thread
From: Simon Josefsson @ 2006-03-22 16:13 UTC (permalink / raw)
Cc: emacs-devel, Daiki Ueno (pgg author), ding
Sascha Wilde <wilde@sha-bang.de> writes:
> Could you please consider committing the attached patch, which
> reverses the default of pgg-gpg-use-agent to nil, and adds an check if
> the agent is _really_ available, when pgg-gpg-use-agent is set to t?
>
> (The patch is against the latest CVS, including your patch that is)
Given the pending 5.10.x release, I installed it. Installing Daiki's
work would come later, and would slightly improve the user experience
here (i.e., not having to set pgg-gpg-use-agent manually).
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-22 16:13 ` Simon Josefsson
@ 2006-03-22 23:01 ` Katsumi Yamaoka
2006-03-22 23:45 ` Simon Josefsson
0 siblings, 1 reply; 156+ messages in thread
From: Katsumi Yamaoka @ 2006-03-22 23:01 UTC (permalink / raw)
Cc: Sascha Wilde, Daiki Ueno (pgg author), ding, emacs-devel
>>>>> In <87zmjicv9d.fsf@latte.josefsson.org> Simon Josefsson wrote:
> Given the pending 5.10.x release, I installed it.
Emacs 20, 21 and XEmacs complain to use of make-network-process
which isn't available. To solve the problem, we may want to
introduce it as dns.el does.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-22 23:01 ` Katsumi Yamaoka
@ 2006-03-22 23:45 ` Simon Josefsson
2006-03-23 0:58 ` Katsumi Yamaoka
0 siblings, 1 reply; 156+ messages in thread
From: Simon Josefsson @ 2006-03-22 23:45 UTC (permalink / raw)
Cc: Sascha Wilde, Daiki Ueno (pgg author), ding, emacs-devel
Katsumi Yamaoka <yamaoka@jpl.org> writes:
>>>>>> In <87zmjicv9d.fsf@latte.josefsson.org> Simon Josefsson wrote:
>
>> Given the pending 5.10.x release, I installed it.
>
> Emacs 20, 21 and XEmacs complain to use of make-network-process
> which isn't available. To solve the problem, we may want to
> introduce it as dns.el does.
Do those emacsen support socket processes? If not, maybe we should
remove pgg-gpg-update-agent.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-22 23:45 ` Simon Josefsson
@ 2006-03-23 0:58 ` Katsumi Yamaoka
2006-03-23 9:12 ` Simon Josefsson
0 siblings, 1 reply; 156+ messages in thread
From: Katsumi Yamaoka @ 2006-03-23 0:58 UTC (permalink / raw)
Cc: Sascha Wilde, emacs-devel, Daiki Ueno (pgg author), ding
>>>>> In <87irq6yrfo.fsf@latte.josefsson.org> Simon Josefsson wrote:
> Katsumi Yamaoka <yamaoka@jpl.org> writes:
>> Emacs 20, 21 and XEmacs complain to use of make-network-process
>> which isn't available. To solve the problem, we may want to
>> introduce it as dns.el does.
> Do those emacsen support socket processes? If not, maybe we should
> remove pgg-gpg-update-agent.
Oops. ISHIKAWA Mutsumi wrote (in Japanese) in
http://lists.debian.or.jp/debian-devel/200502/msg00007.html
that Emacs 21 doesn't support the communication passing the UNIX
domain socket. If we need to use it at all costs, we will have
to use an external program which communicates with the agent
process by way of the socket.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-23 0:58 ` Katsumi Yamaoka
@ 2006-03-23 9:12 ` Simon Josefsson
2006-03-23 10:26 ` Sascha Wilde
0 siblings, 1 reply; 156+ messages in thread
From: Simon Josefsson @ 2006-03-23 9:12 UTC (permalink / raw)
Cc: Sascha Wilde, Daiki Ueno (pgg author), ding, emacs-devel
Katsumi Yamaoka <yamaoka@jpl.org> writes:
>>>>>> In <87irq6yrfo.fsf@latte.josefsson.org> Simon Josefsson wrote:
>
>> Katsumi Yamaoka <yamaoka@jpl.org> writes:
>
>>> Emacs 20, 21 and XEmacs complain to use of make-network-process
>>> which isn't available. To solve the problem, we may want to
>>> introduce it as dns.el does.
>
>> Do those emacsen support socket processes? If not, maybe we should
>> remove pgg-gpg-update-agent.
>
> Oops. ISHIKAWA Mutsumi wrote (in Japanese) in
>
> http://lists.debian.or.jp/debian-devel/200502/msg00007.html
>
> that Emacs 21 doesn't support the communication passing the UNIX
> domain socket. If we need to use it at all costs, we will have
> to use an external program which communicates with the agent
> process by way of the socket.
I think it is too complicated. It is simpler to remove the function.
Sascha, what do you think? People who enable pgg-gpg-use-agent
manually might be expected to make sure the agent really is running.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-23 9:12 ` Simon Josefsson
@ 2006-03-23 10:26 ` Sascha Wilde
2006-03-23 10:54 ` Simon Josefsson
0 siblings, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2006-03-23 10:26 UTC (permalink / raw)
Cc: Katsumi Yamaoka, emacs-devel, Daiki Ueno (pgg author), ding
Simon Josefsson <jas@extundo.com> wrote:
> Katsumi Yamaoka <yamaoka@jpl.org> writes:
>
>>>>>>> In <87irq6yrfo.fsf@latte.josefsson.org> Simon Josefsson wrote:
>>
>>> Katsumi Yamaoka <yamaoka@jpl.org> writes:
>>
>>>> Emacs 20, 21 and XEmacs complain to use of make-network-process
>>>> which isn't available. To solve the problem, we may want to
>>>> introduce it as dns.el does.
>>
>>> Do those emacsen support socket processes? If not, maybe we should
>>> remove pgg-gpg-update-agent.
>>
>> Oops. ISHIKAWA Mutsumi wrote (in Japanese) in
>>
>> http://lists.debian.or.jp/debian-devel/200502/msg00007.html
>>
>> that Emacs 21 doesn't support the communication passing the UNIX
>> domain socket. If we need to use it at all costs, we will have
>> to use an external program which communicates with the agent
>> process by way of the socket.
>
> I think it is too complicated. It is simpler to remove the function.
> Sascha, what do you think? People who enable pgg-gpg-use-agent
> manually might be expected to make sure the agent really is running.
I would like to see pgg do the right think when ever it can -- could
we keep it for emacs 22 and just not use it if its not available?
How about testing for the emacs version, or availability of
make-network-process?
I'll purpose a more compatible patch later -- but I don't have the
time right now, sorry.
cheers
sascha
--
Sascha Wilde
A conclusion is simply the place where someone got tired of thinking.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-22 12:25 ` Daiki Ueno
@ 2006-03-23 10:40 ` Daiki Ueno
2006-03-23 11:00 ` Simon Josefsson
2006-03-23 12:52 ` Sascha Wilde
0 siblings, 2 replies; 156+ messages in thread
From: Daiki Ueno @ 2006-03-23 10:40 UTC (permalink / raw)
Cc: Sascha Wilde, ding, emacs-devel
[-- Attachment #1: Type: text/plain, Size: 632 bytes --]
Hello,
>>>>> In <e8632056-d7b7-4ed6-91d6-7d9089c82f94@well-done.deisui.org>
>>>>> Daiki Ueno <ueno@unixuser.org> wrote:
> > Right now, pgg assume that gpg will need a passphrase so it asks the
> > user for one. It may be better if pgg postpone the passphrase query
> > until gpg tell pgg that it needs a passphrase. Then it is only
> > queried for when it is needed. This should be more reliable, but
> > slightly more complicated to implement (asynchronous code).
> Anyway, I'll try to implement this.
Could you please try the attached pgg-gpg.el?
Please note, this patch is only for review, not meant to be committed now.
[-- Attachment #2: pgg-gpg.el --]
[-- Type: application/octet-stream, Size: 12450 bytes --]
;;; pgg-gpg.el --- GnuPG support for PGG.
;; Copyright (C) 1999, 2000, 2002, 2003, 2004,
;; 2005, 2006 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
;; Symmetric encryption and gpg-agent support added by:
;; Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/10/28
;; Keywords: PGP, OpenPGP, GnuPG
;; This file is part of GNU Emacs.
;; GNU Emacs is free software; you can redistribute it and/or modify
;; it under the terms of the GNU General Public License as published by
;; the Free Software Foundation; either version 2, or (at your option)
;; any later version.
;; GNU Emacs is distributed in the hope that it will be useful,
;; but WITHOUT ANY WARRANTY; without even the implied warranty of
;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
;; GNU General Public License for more details.
;; You should have received a copy of the GNU General Public License
;; along with GNU Emacs; see the file COPYING. If not, write to the
;; Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
;; Boston, MA 02110-1301, USA.
;;; Code:
(eval-when-compile
(require 'pgg))
(defgroup pgg-gpg ()
"GnuPG interface."
:group 'pgg)
(defcustom pgg-gpg-program "gpg"
"The GnuPG executable."
:group 'pgg-gpg
:type 'string)
(defcustom pgg-gpg-extra-args nil
"Extra arguments for every GnuPG invocation."
:group 'pgg-gpg
:type '(repeat (string :tag "Argument")))
(defcustom pgg-gpg-recipient-argument "--recipient"
"GnuPG option to specify recipient."
:group 'pgg-gpg
:type '(choice (const :tag "New `--recipient' option" "--recipient")
(const :tag "Old `--remote-user' option" "--remote-user")))
(defcustom pgg-gpg-use-agent nil
"Whether to use gnupg agent for key caching."
:group 'pgg-gpg
:type 'boolean)
(defcustom pgg-gpg-timeout 60
"Timeout of GnuPG command execution."
:group 'pgg-gpg
:type 'integer)
(defvar pgg-gpg-user-id nil
"GnuPG ID of your default identity.")
(defvar pgg-gpg-user-id-alist nil
"An alist mapping from key ID to user ID.")
(defvar pgg-gpg-read-point nil)
(defvar pgg-gpg-output-file-name nil)
(defvar pgg-gpg-pending-status-list nil)
(defvar pgg-gpg-key-id nil)
(defvar pgg-gpg-debug-buffer " *pgg-gpg-debug*")
(defun pgg-gpg-start-process (args)
(let* ((output-file-name (pgg-make-temp-file "pgg-output"))
(args
(append (list "--no-tty"
"--status-fd" "1"
"--command-fd" "0"
"--yes" ; overwrite
"--output" output-file-name)
(if pgg-gpg-use-agent '("--use-agent"))
pgg-gpg-extra-args
args))
(coding-system-for-write 'binary)
(process-connection-type nil)
(orig-mode (default-file-modes))
default-enable-multibyte-characters
(buffer (if pgg-gpg-debug-buffer
pgg-gpg-debug-buffer
(generate-new-buffer " *pgg-gpg*")))
process)
(if pgg-gpg-debug-buffer
(save-excursion
(set-buffer (get-buffer-create pgg-gpg-debug-buffer))
(erase-buffer)))
(with-current-buffer buffer
(make-local-variable 'pgg-gpg-read-point)
(setq pgg-gpg-read-point (point-min))
(make-local-variable 'pgg-gpg-output-file-name)
(setq pgg-gpg-output-file-name output-file-name)
(make-local-variable 'pgg-gpg-pending-status-list)
(setq pgg-gpg-pending-status-list nil)
(make-local-variable 'pgg-gpg-key-id)
(setq pgg-gpg-key-id nil))
(unwind-protect
(progn
(set-default-file-modes 448)
(setq process
(apply #'start-process "pgg-gpg" buffer pgg-gpg-program args))
(set-process-filter process #'pgg-gpg-process-filter)
(set-process-sentinel process #'pgg-gpg-process-sentinel))
(set-default-file-modes orig-mode))
process))
(defun pgg-gpg-process-filter (process input)
(save-excursion
(set-buffer (process-buffer process))
(goto-char (point-max))
(insert input)
(goto-char pgg-gpg-read-point)
(beginning-of-line)
(while (looking-at ".*\n") ;the input line is finished
(save-excursion
(if (looking-at "\\[GNUPG:] \\([A-Z_]+\\)\\>.*")
(let* ((status (match-string 1))
(symbol (intern-soft (concat "pgg-gpg-handle-" status)))
(entry (member status pgg-gpg-pending-status-list)))
(if entry
(setq pgg-gpg-pending-status-list
(delq (car entry)
pgg-gpg-pending-status-list)))
(if (and symbol
(fboundp symbol))
(funcall symbol process (buffer-substring (match-beginning 1)
(match-end 0)))))))
(forward-line))
(setq pgg-gpg-read-point (point))))
(defun pgg-gpg-process-sentinel (process status)
(save-excursion
;; Copy the contents of process-buffer to pgg-errors-buffer.
(set-buffer (get-buffer-create pgg-errors-buffer))
(buffer-disable-undo)
(erase-buffer)
(when (buffer-live-p (process-buffer process))
(insert-buffer-substring (process-buffer process))
(goto-char (point-min))
(delete-matching-lines "^\\[GNUPG:] ")
(goto-char (point-min))
(while (re-search-forward "^gpg: " nil t)
(replace-match "")))
;; Read the contents of the output file to pgg-output-buffer.
(set-buffer (get-buffer-create pgg-output-buffer))
(buffer-disable-undo)
(erase-buffer)
(if (and (equal status "finished\n")
(buffer-live-p (process-buffer process)))
(let ((output-file-name (with-current-buffer (process-buffer process)
pgg-gpg-output-file-name)))
(when (file-exists-p output-file-name)
(let ((coding-system-for-read (if pgg-text-mode
'raw-text
'binary)))
(insert-file-contents output-file-name))
(delete-file output-file-name))))
(if (buffer-live-p (process-buffer process))
(kill-buffer (process-buffer process)))))
(defun pgg-gpg-wait-for-status (process status-list)
(with-current-buffer (process-buffer process)
(setq pgg-gpg-pending-status-list status-list)
(while (and (eq (process-status process) 'run)
pgg-gpg-pending-status-list)
(accept-process-output process 1))))
(defun pgg-gpg-wait-for-process (process)
(while (eq (process-status process) 'run)
(accept-process-output process 1))
(sit-for 1))
(defun pgg-gpg-handle-USERID_HINT (process line)
(if (string-match "^USERID_HINT \\([^ ]+\\) \\(.*\\)" line)
(let* ((key-id (match-string 1 line))
(user-id (match-string 2 line))
(entry (assoc key-id pgg-gpg-user-id-alist)))
(if entry
(setcdr entry user-id)
(setq pgg-gpg-user-id-alist (cons (cons key-id user-id)
pgg-gpg-user-id-alist))))))
(defun pgg-gpg-handle-NEED_PASSPHRASE (process line)
(if (string-match "^NEED_PASSPHRASE \\([^ ]+\\)" line)
(setq pgg-gpg-key-id (match-string 1 line))))
(defun pgg-gpg-handle-NEED_PASSPHRASE_SYM (process line)
(setq pgg-gpg-key-id 'symmetric))
(defun pgg-gpg-handle-GET_HIDDEN (process line)
(let* ((entry (assoc pgg-gpg-key-id pgg-gpg-user-id-alist))
(passphrase (pgg-read-passphrase
(if (eq pgg-gpg-key-id 'symmetric)
"GnuPG passphrase for symmetric encryption: "
(format "GnuPG passphrase for %s: " (if entry
(cdr entry)
pgg-gpg-key-id)))
pgg-gpg-key-id)))
(if passphrase
(process-send-string process (concat passphrase "\n")))))
(defun pgg-gpg-lookup-key (string &optional type)
"Search keys associated with STRING."
(let ((args (list "--with-colons" "--no-greeting" "--batch"
(if type "--list-secret-keys" "--list-keys")
string)))
(with-temp-buffer
(apply #'call-process pgg-gpg-program nil t nil args)
(goto-char (point-min))
(if (re-search-forward "^\\(sec\\|pub\\):[^:]*:[^:]*:[^:]*:\\([^:]*\\)"
nil t)
(substring (match-string 2) 8)))))
(defun pgg-gpg-encrypt-region (start end recipients &optional sign passphrase)
"Encrypt the current region between START and END.
If optional argument SIGN is non-nil, do a combined sign and encrypt."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
(args
(append
'("--armor" "--always-trust" "--encrypt")
(if pgg-text-mode '("--textmode"))
(if sign (list "--sign" "--local-user" pgg-gpg-user-id))
(if recipients
(apply #'nconc
(mapcar (lambda (rcpt)
(list pgg-gpg-recipient-argument rcpt))
(append recipients
(if pgg-encrypt-for-me
(list pgg-gpg-user-id))))))))
(process (pgg-gpg-start-process args)))
(if sign
(pgg-gpg-wait-for-status process '("GOOD_PASSPHRASE")))
(process-send-region process start end)
(process-send-eof process)
(pgg-gpg-wait-for-process process)
(pgg-process-when-success)))
(defun pgg-gpg-encrypt-symmetric-region (start end &optional passphrase)
"Encrypt the current region between START and END with symmetric cipher."
(let* ((args
(append '("--armor" "--symmetric")
(if pgg-text-mode '("--textmode"))))
(process (pgg-gpg-start-process args)))
(pgg-gpg-wait-for-status process '("GOT_IT"))
(process-send-region process start end)
(process-send-eof process)
(pgg-gpg-wait-for-process process)
(pgg-process-when-success)))
(defun pgg-gpg-decrypt-region (start end &optional passphrase)
"Decrypt the current region between START and END."
(let* ((args '("--decrypt"))
(process (pgg-gpg-start-process args)))
(process-send-region process start end)
(pgg-gpg-wait-for-status process '("GOOD_PASSPHRASE"))
(process-send-eof process)
(pgg-gpg-wait-for-process process)
(save-excursion
(set-buffer pgg-errors-buffer)
(goto-char (point-min))
(re-search-forward "^\\[GNUPG:] DECRYPTION_OKAY\\>" nil t))))
(defun pgg-gpg-sign-region (start end &optional cleartext passphrase)
"Make detached signature from text between START and END."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
(args
(append (list (if cleartext "--clearsign" "--detach-sign")
"--armor" "--verbose"
"--local-user" pgg-gpg-user-id)
(if pgg-text-mode '("--textmode"))))
(process (pgg-gpg-start-process args)))
(pgg-gpg-wait-for-status process '("GOOD_PASSPHRASE"))
(process-send-region process start end)
(process-send-eof process)
(pgg-gpg-wait-for-process process)
(pgg-process-when-success)))
(defun pgg-gpg-verify-region (start end &optional signature)
"Verify region between START and END as the detached signature SIGNATURE."
(let ((args '("--verify"))
process)
(when (stringp signature)
(setq args (append args (list signature))))
(setq process (pgg-gpg-start-process (append args '("-"))))
(process-send-region process start end)
(pgg-gpg-wait-for-process process)
(with-current-buffer pgg-errors-buffer
(goto-char (point-min))
(while (re-search-forward "^gpg: \\(.*\\)\n" nil t)
(with-current-buffer pgg-output-buffer
(insert-buffer-substring pgg-errors-buffer
(match-beginning 1) (match-end 0)))
(delete-region (match-beginning 0) (match-end 0)))
(goto-char (point-min))
(re-search-forward "^\\[GNUPG:] GOODSIG\\>" nil t))))
(defun pgg-gpg-insert-key ()
"Insert public key at point."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
(args (list "--export" "--armor"
pgg-gpg-user-id))
(process (pgg-gpg-start-process args)))
(pgg-gpg-wait-for-process process)
(insert-buffer-substring pgg-output-buffer)))
(defun pgg-gpg-snarf-keys-region (start end)
"Add all public keys in region between START and END to the keyring."
(let* ((args '("--import" "-"))
(process (pgg-gpg-start-process args))
status)
(process-send-region process start end)
(process-send-eof process)
(pgg-gpg-wait-for-process process)
(set-buffer pgg-errors-buffer)
(goto-char (point-min))
(when (re-search-forward "^\\[GNUPG:] IMPORT_RES\\>" nil t)
(setq status (buffer-substring (match-end 0)
(progn (end-of-line)(point)))
status (vconcat (mapcar #'string-to-number (split-string status))))
(erase-buffer)
(insert (format "Imported %d key(s).
\tArmor contains %d key(s) [%d bad, %d old].\n"
(+ (aref status 2)
(aref status 10))
(aref status 0)
(aref status 1)
(+ (aref status 4)
(aref status 11)))
(if (zerop (aref status 9))
""
"\tSecret keys are imported.\n")))
(append-to-buffer pgg-output-buffer (point-min)(point-max))
(pgg-process-when-success)))
(provide 'pgg-gpg)
;;; arch-tag: 2aa5d5d8-93a0-4865-9312-33e29830e000
;;; pgg-gpg.el ends here
[-- Attachment #3: Type: text/plain, Size: 25 bytes --]
Regards,
--
Daiki Ueno
[-- Attachment #4: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-23 10:26 ` Sascha Wilde
@ 2006-03-23 10:54 ` Simon Josefsson
2006-03-23 11:12 ` Simon Josefsson
0 siblings, 1 reply; 156+ messages in thread
From: Simon Josefsson @ 2006-03-23 10:54 UTC (permalink / raw)
Cc: Katsumi Yamaoka, Daiki Ueno (pgg author), ding, emacs-devel
Sascha Wilde <wilde@sha-bang.de> writes:
> Simon Josefsson <jas@extundo.com> wrote:
>
>> Katsumi Yamaoka <yamaoka@jpl.org> writes:
>>
>>>>>>>> In <87irq6yrfo.fsf@latte.josefsson.org> Simon Josefsson wrote:
>>>
>>>> Katsumi Yamaoka <yamaoka@jpl.org> writes:
>>>
>>>>> Emacs 20, 21 and XEmacs complain to use of make-network-process
>>>>> which isn't available. To solve the problem, we may want to
>>>>> introduce it as dns.el does.
>>>
>>>> Do those emacsen support socket processes? If not, maybe we should
>>>> remove pgg-gpg-update-agent.
>>>
>>> Oops. ISHIKAWA Mutsumi wrote (in Japanese) in
>>>
>>> http://lists.debian.or.jp/debian-devel/200502/msg00007.html
>>>
>>> that Emacs 21 doesn't support the communication passing the UNIX
>>> domain socket. If we need to use it at all costs, we will have
>>> to use an external program which communicates with the agent
>>> process by way of the socket.
>>
>> I think it is too complicated. It is simpler to remove the function.
>> Sascha, what do you think? People who enable pgg-gpg-use-agent
>> manually might be expected to make sure the agent really is running.
>
> I would like to see pgg do the right think when ever it can -- could
> we keep it for emacs 22 and just not use it if its not available?
>
> How about testing for the emacs version, or availability of
> make-network-process?
>
> I'll purpose a more compatible patch later -- but I don't have the
> time right now, sorry.
Given that this function probably won't be used at all if Daiki's idea
is implemented, I think we should remove the function for now.
Daiki's approach (if I understand it correctly) of not second-guessing
what parameters gpg will need is more reliable than this approach,
even if this approach would work fine on all emacsen.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-23 10:40 ` Daiki Ueno
@ 2006-03-23 11:00 ` Simon Josefsson
2006-03-23 12:18 ` Daiki Ueno
2006-03-23 12:52 ` Sascha Wilde
1 sibling, 1 reply; 156+ messages in thread
From: Simon Josefsson @ 2006-03-23 11:00 UTC (permalink / raw)
Cc: Sascha Wilde, ding, emacs-devel
Daiki Ueno <ueno@unixuser.org> writes:
Date: Thu, 23 Mar 2006 12:00:22 +0100
In-Reply-To: <c1918aef-cbd3-4019-ba21-92940132533b@well-done.deisui.org>
(Daiki Ueno's message of "Thu, 23 Mar 2006 19:40:08 +0900")
Message-ID: <87mzfhwhmh.fsf@latte.josefsson.org>
User-Agent: Gnus/5.110004 (No Gnus v0.4) Emacs/22.0.50 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
> Hello,
>
>>>>>> In <e8632056-d7b7-4ed6-91d6-7d9089c82f94@well-done.deisui.org>=20
>>>>>> Daiki Ueno <ueno@unixuser.org> wrote:
>> > Right now, pgg assume that gpg will need a passphrase so it asks the
>> > user for one. It may be better if pgg postpone the passphrase query
>> > until gpg tell pgg that it needs a passphrase. Then it is only
>> > queried for when it is needed. This should be more reliable, but
>> > slightly more complicated to implement (asynchronous code).
>
>> Anyway, I'll try to implement this.
>
> Could you please try the attached pgg-gpg.el?
>
> Please note, this patch is only for review, not meant to be committed now.
It just hangs, it seems gpg is waiting for input from stdin or
similar. I don't have time to debug further, sorry.
Debugger entered--Lisp error: (quit)
accept-process-output(#<process pgg-gpg> 1)
(while (and (eq ... ...) pgg-gpg-pending-status-list) (accept-process-out=
put process 1))
(save-current-buffer (set-buffer (process-buffer process)) (setq pgg-gpg-=
pending-status-list status-list) (while (and ... pgg-gpg-pending-status-lis=
t) (accept-process-output process 1)))
(with-current-buffer (process-buffer process) (setq pgg-gpg-pending-statu=
s-list status-list) (while (and ... pgg-gpg-pending-status-list) (accept-pr=
ocess-output process 1)))
pgg-gpg-wait-for-status(#<process pgg-gpg> ("GOOD_PASSPHRASE"))
(let* ((pgg-gpg-user-id ...) (args ...) (process ...)) (pgg-gpg-wait-for-=
status process (quote ...)) (process-send-region process start end) (proces=
s-send-eof process) (pgg-gpg-wait-for-process process) (pgg-process-when-su=
ccess))
pgg-gpg-sign-region(1 1790 nil nil)
funcall(pgg-gpg-sign-region 1 1790 nil nil)
apply(funcall pgg-gpg-sign-region (1 1790 nil nil))
pgg-invoke("sign-region" gpg 1 1790 nil nil)
pgg-sign-region(1 1790)
mml2015-pgg-sign((part (sign . "pgpmime") (tag-location . 1743) (contents=
. "Daiki Ueno <ueno@unixuser.org> writes:\n\n> Hello,\n>\n>>>>>> In <e8632=
056-d7b7-4ed6-91d6-7d9089c82f94@well-done.deisui.org> \n>>>>>> Daiki Ueno <=
ueno@unixuser.org> wrote:\n>> > Right now, pgg assume that gpg will need a =
passphrase so it asks the\n>> > user for one. It may be better if pgg post=
pone the passphrase query\n>> > until gpg tell pgg that it needs a passphra=
se. Then it is only\n>> > queried for when it is needed. This should be m=
ore reliable, but\n>> > slightly more complicated to implement (asynchronou=
s code).\n>\n>> Anyway, I'll try to implement this.\n>\n> Could you please =
try the attached pgg-gpg.el?\n>\n> Please note, this patch is only for revi=
ew, not meant to be committed now.\n\nIt just\n\ngpg: NOTE: signature key 5=
C980097 expired Wed Apr 10 12:19:06 2002 CEST\n[GNUPG:] KEYEXPIRED 10184339=
46\n[GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead\ngpg: NOTE: signa=
ture key 5C980097 expired Wed Apr 10 12:19:06 2002 CEST\n[GNUPG:] KEYEXPIRE=
D 1018433946\n[GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead\ngpg: N=
OTE: signature key 5C980097 expired Wed Apr 10 12:19:06 2002 CEST\n[GNUPG:]=
KEYEXPIRED 1018433946\n[GNUPG:] SIGEXPIRED deprecated-use-keyexpired-inste=
ad\ngpg: NOTE: signature key 5C980097 expired Wed Apr 10 12:19:06 2002 CEST=
\n[GNUPG:] KEYEXPIRED 1018433946\n[GNUPG:] SIGEXPIRED deprecated-use-keyexp=
ired-instead\ngpg: NOTE: signature key 5C980097 expired Wed Apr 10 12:19:06=
2002 CEST\n[GNUPG:] KEYEXPIRED 1018433946\n[GNUPG:] SIGEXPIRED deprecated-=
use-keyexpired-instead\ngpg: NOTE: signature key 5C980097 expired Wed Apr 1=
0 12:19:06 2002 CEST\n[GNUPG:] KEYEXPIRED 1018433946\n[GNUPG:] SIGEXPIRED d=
eprecated-use-keyexpired-instead\ngpg: using subkey AABB1F7B instead of pri=
mary key B565716F\ngpg: writing to `/tmp/pgg-output6523Lpl'\n")))
mml2015-sign((part (sign . "pgpmime") (tag-location . 1743) (contents . "=
Daiki Ueno <ueno@unixuser.org> writes:\n\n> Hello,\n>\n>>>>>> In <e8632056-=
d7b7-4ed6-91d6-7d9089c82f94@well-done.deisui.org> \n>>>>>> Daiki Ueno <ueno=
@unixuser.org> wrote:\n>> > Right now, pgg assume that gpg will need a pass=
phrase so it asks the\n>> > user for one. It may be better if pgg postpone=
the passphrase query\n>> > until gpg tell pgg that it needs a passphrase. =
Then it is only\n>> > queried for when it is needed. This should be more =
reliable, but\n>> > slightly more complicated to implement (asynchronous co=
de).\n>\n>> Anyway, I'll try to implement this.\n>\n> Could you please try =
the attached pgg-gpg.el?\n>\n> Please note, this patch is only for review, =
not meant to be committed now.\n\nIt just\n\ngpg: NOTE: signature key 5C980=
097 expired Wed Apr 10 12:19:06 2002 CEST\n[GNUPG:] KEYEXPIRED 1018433946\n=
[GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead\ngpg: NOTE: signature=
key 5C980097 expired Wed Apr 10 12:19:06 2002 CEST\n[GNUPG:] KEYEXPIRED 10=
18433946\n[GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead\ngpg: NOTE:=
signature key 5C980097 expired Wed Apr 10 12:19:06 2002 CEST\n[GNUPG:] KEY=
EXPIRED 1018433946\n[GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead\n=
gpg: NOTE: signature key 5C980097 expired Wed Apr 10 12:19:06 2002 CEST\n[G=
NUPG:] KEYEXPIRED 1018433946\n[GNUPG:] SIGEXPIRED deprecated-use-keyexpired=
-instead\ngpg: NOTE: signature key 5C980097 expired Wed Apr 10 12:19:06 200=
2 CEST\n[GNUPG:] KEYEXPIRED 1018433946\n[GNUPG:] SIGEXPIRED deprecated-use-=
keyexpired-instead\ngpg: NOTE: signature key 5C980097 expired Wed Apr 10 12=
:19:06 2002 CEST\n[GNUPG:] KEYEXPIRED 1018433946\n[GNUPG:] SIGEXPIRED depre=
cated-use-keyexpired-instead\ngpg: using subkey AABB1F7B instead of primary=
key B565716F\ngpg: writing to `/tmp/pgg-output6523Lpl'\n")))
mml-pgpmime-sign-buffer((part (sign . "pgpmime") (tag-location . 1743) (c=
ontents . "Daiki Ueno <ueno@unixuser.org> writes:\n\n> Hello,\n>\n>>>>>> In=
<e8632056-d7b7-4ed6-91d6-7d9089c82f94@well-done.deisui.org> \n>>>>>> Daiki=
Ueno <ueno@unixuser.org> wrote:\n>> > Right now, pgg assume that gpg will =
need a passphrase so it asks the\n>> > user for one. It may be better if p=
gg postpone the passphrase query\n>> > until gpg tell pgg that it needs a p=
assphrase. Then it is only\n>> > queried for when it is needed. This shou=
ld be more reliable, but\n>> > slightly more complicated to implement (asyn=
chronous code).\n>\n>> Anyway, I'll try to implement this.\n>\n> Could you =
please try the attached pgg-gpg.el?\n>\n> Please note, this patch is only f=
or review, not meant to be committed now.\n\nIt just\n\ngpg: NOTE: signatur=
e key 5C980097 expired Wed Apr 10 12:19:06 2002 CEST\n[GNUPG:] KEYEXPIRED 1=
018433946\n[GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead\ngpg: NOTE=
: signature key 5C980097 expired Wed Apr 10 12:19:06 2002 CEST\n[GNUPG:] KE=
YEXPIRED 1018433946\n[GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead\=
ngpg: NOTE: signature key 5C980097 expired Wed Apr 10 12:19:06 2002 CEST\n[=
GNUPG:] KEYEXPIRED 1018433946\n[GNUPG:] SIGEXPIRED deprecated-use-keyexpire=
d-instead\ngpg: NOTE: signature key 5C980097 expired Wed Apr 10 12:19:06 20=
02 CEST\n[GNUPG:] KEYEXPIRED 1018433946\n[GNUPG:] SIGEXPIRED deprecated-use=
-keyexpired-instead\ngpg: NOTE: signature key 5C980097 expired Wed Apr 10 1=
2:19:06 2002 CEST\n[GNUPG:] KEYEXPIRED 1018433946\n[GNUPG:] SIGEXPIRED depr=
ecated-use-keyexpired-instead\ngpg: NOTE: signature key 5C980097 expired We=
d Apr 10 12:19:06 2002 CEST\n[GNUPG:] KEYEXPIRED 1018433946\n[GNUPG:] SIGEX=
PIRED deprecated-use-keyexpired-instead\ngpg: using subkey AABB1F7B instead=
of primary key B565716F\ngpg: writing to `/tmp/pgg-output6523Lpl'\n")))
mml-generate-mime-1((part (sign . "pgpmime") (tag-location . 1743) (conte=
nts . "Daiki Ueno <ueno@unixuser.org> writes:\n\n> Hello,\n>\n>>>>>> In <e8=
632056-d7b7-4ed6-91d6-7d9089c82f94@well-done.deisui.org> \n>>>>>> Daiki Uen=
o <ueno@unixuser.org> wrote:\n>> > Right now, pgg assume that gpg will need=
a passphrase so it asks the\n>> > user for one. It may be better if pgg p=
ostpone the passphrase query\n>> > until gpg tell pgg that it needs a passp=
hrase. Then it is only\n>> > queried for when it is needed. This should b=
e more reliable, but\n>> > slightly more complicated to implement (asynchro=
nous code).\n>\n>> Anyway, I'll try to implement this.\n>\n> Could you plea=
se try the attached pgg-gpg.el?\n>\n> Please note, this patch is only for r=
eview, not meant to be committed now.\n\nIt just\n\ngpg: NOTE: signature ke=
y 5C980097 expired Wed Apr 10 12:19:06 2002 CEST\n[GNUPG:] KEYEXPIRED 10184=
33946\n[GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead\ngpg: NOTE: si=
gnature key 5C980097 expired Wed Apr 10 12:19:06 2002 CEST\n[GNUPG:] KEYEXP=
IRED 1018433946\n[GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead\ngpg=
: NOTE: signature key 5C980097 expired Wed Apr 10 12:19:06 2002 CEST\n[GNUP=
G:] KEYEXPIRED 1018433946\n[GNUPG:] SIGEXPIRED deprecated-use-keyexpired-in=
stead\ngpg: NOTE: signature key 5C980097 expired Wed Apr 10 12:19:06 2002 C=
EST\n[GNUPG:] KEYEXPIRED 1018433946\n[GNUPG:] SIGEXPIRED deprecated-use-key=
expired-instead\ngpg: NOTE: signature key 5C980097 expired Wed Apr 10 12:19=
:06 2002 CEST\n[GNUPG:] KEYEXPIRED 1018433946\n[GNUPG:] SIGEXPIRED deprecat=
ed-use-keyexpired-instead\ngpg: NOTE: signature key 5C980097 expired Wed Ap=
r 10 12:19:06 2002 CEST\n[GNUPG:] KEYEXPIRED 1018433946\n[GNUPG:] SIGEXPIRE=
D deprecated-use-keyexpired-instead\ngpg: using subkey AABB1F7B instead of =
primary key B565716F\ngpg: writing to `/tmp/pgg-output6523Lpl'\n")))
mml-generate-mime()
message-encode-message-body()
mml-to-mime()
mml-preview((4))
call-interactively(mml-preview)
The *pgg-gpg-debug* buffer contains:
gpg: NOTE: signature key 5C980097 expired Wed Apr 10 12:19:06 2002 CEST
[GNUPG:] KEYEXPIRED 1018433946
[GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead
gpg: NOTE: signature key 5C980097 expired Wed Apr 10 12:19:06 2002 CEST
[GNUPG:] KEYEXPIRED 1018433946
[GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead
gpg: NOTE: signature key 5C980097 expired Wed Apr 10 12:19:06 2002 CEST
[GNUPG:] KEYEXPIRED 1018433946
[GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead
gpg: NOTE: signature key 5C980097 expired Wed Apr 10 12:19:06 2002 CEST
[GNUPG:] KEYEXPIRED 1018433946
[GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead
gpg: NOTE: signature key 5C980097 expired Wed Apr 10 12:19:06 2002 CEST
[GNUPG:] KEYEXPIRED 1018433946
[GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead
gpg: NOTE: signature key 5C980097 expired Wed Apr 10 12:19:06 2002 CEST
[GNUPG:] KEYEXPIRED 1018433946
[GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead
gpg: using subkey AABB1F7B instead of primary key B565716F
gpg: writing to `/tmp/pgg-output6523Lpl'
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-23 10:54 ` Simon Josefsson
@ 2006-03-23 11:12 ` Simon Josefsson
2006-03-23 11:16 ` Simon Josefsson
` (2 more replies)
0 siblings, 3 replies; 156+ messages in thread
From: Simon Josefsson @ 2006-03-23 11:12 UTC (permalink / raw)
Cc: Sascha Wilde, Katsumi Yamaoka, Daiki Ueno (pgg author), ding,
emacs-devel
Reinar, I think pgg is ready for v5-10 now. I am sorry for all these
rapid changes.
Simon Josefsson <jas@extundo.com> writes:
>>> I think it is too complicated. It is simpler to remove the function.
>>> Sascha, what do you think? People who enable pgg-gpg-use-agent
>>> manually might be expected to make sure the agent really is running.
>>
>> I would like to see pgg do the right think when ever it can -- could
>> we keep it for emacs 22 and just not use it if its not available?
>>
>> How about testing for the emacs version, or availability of
>> make-network-process?
>>
>> I'll purpose a more compatible patch later -- but I don't have the
>> time right now, sorry.
>
> Given that this function probably won't be used at all if Daiki's idea
> is implemented, I think we should remove the function for now.
> Daiki's approach (if I understand it correctly) of not second-guessing
> what parameters gpg will need is more reliable than this approach,
> even if this approach would work fine on all emacsen.
I removed the function. The end result is this:
1) People who don't use the agent don't have to do anything, this is
as before.
2) People who use the agent must enable pgg-gpg-use-agent manually.
This is better than before, because the agent didn't work at all
with pgg then.
3) People who use the agent must make sure the agent is still running
(or disable the variable temporarily, or re-start the agent and
fixing the environment variable using M-x setenv).
If/when Daiki's idea (as I understand it) is implemented, the end
result will be:
*) Pgg will invoke gpg and then figure out whether a passphrase is
needed and only at that point query for it. This will work
regardless of whether the agent is used, whether a passphrase is
required or not, or whether a pin code is required. The user
doesn't have to fiddle with any variable.
/Simon
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-23 11:12 ` Simon Josefsson
@ 2006-03-23 11:16 ` Simon Josefsson
2006-03-23 12:51 ` Reiner Steib
2006-03-23 12:00 ` Sascha Wilde
[not found] ` <m2wtels74l.fsf@kenny.sha-bang .de>
2 siblings, 1 reply; 156+ messages in thread
From: Simon Josefsson @ 2006-03-23 11:16 UTC (permalink / raw)
Cc: Katsumi Yamaoka, Daiki Ueno (pgg author), Reiner Steib, ding,
emacs-devel
Simon Josefsson <jas@extundo.com> writes:
> I removed the function. The end result is this:
To clarify: I removed it in v5-10 only. For Emacs CVS, Sascha's patch
work fine so it can stay (although perhaps should be removed there
too, to simplify syncing?). For Gnus CVS trunk, I don't know whether
it works or not (does it work on the XEmacs version Gnus CVS
require?).
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-23 11:12 ` Simon Josefsson
2006-03-23 11:16 ` Simon Josefsson
@ 2006-03-23 12:00 ` Sascha Wilde
2006-03-23 13:00 ` Simon Josefsson
[not found] ` <m2wtels74l.fsf@kenny.sha-bang .de>
2 siblings, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2006-03-23 12:00 UTC (permalink / raw)
Cc: Katsumi Yamaoka, Daiki Ueno (pgg author), emacs-devel, ding,
Reiner Steib
Simon Josefsson <jas@extundo.com> wrote:
[pgg-gpg-update-agent won't work on pre 22 emacsen]
>> Given that this function probably won't be used at all if Daiki's idea
>> is implemented, I think we should remove the function for now.
>> Daiki's approach (if I understand it correctly) of not second-guessing
>> what parameters gpg will need is more reliable than this approach,
>> even if this approach would work fine on all emacsen.
>
> I removed the function. The end result is this:
>
> 1) People who don't use the agent don't have to do anything, this is
> as before.
>
> 2) People who use the agent must enable pgg-gpg-use-agent manually.
> This is better than before, because the agent didn't work at all
> with pgg then.
>
> 3) People who use the agent must make sure the agent is still running
> (or disable the variable temporarily, or re-start the agent and
> fixing the environment variable using M-x setenv).
Could you please leave it in the GNU Emacs CVS, where it actually
works as intended?
> If/when Daiki's idea (as I understand it) is implemented, the end
> result will be:
>
> *) Pgg will invoke gpg and then figure out whether a passphrase is
> needed and only at that point query for it. This will work
> regardless of whether the agent is used, whether a passphrase is
> required or not, or whether a pin code is required. The user
> doesn't have to fiddle with any variable.
I don't think so. While I'm sure, that Daiki's idea -- once it
works -- will handle certain situations better than mine, there will
still be the need for an variable enabling the user to turn of any use
of the agent.
Here is an example[0] from my own experience:
- A user logs in on machine 'A' and starts the gpg-agent.
- He leaves the machine, but stays logged in...
- Now he uses machine 'B' to log in on machine 'A':
the environment is setup to use the already running gpg-agent
(automatically, in an login script)
- He starts Emacs/Gnus and tries to sign, decrypt whatever...
- The agent runs and is working, everything seems fine, but the user
isn't queried for the passphrase ... what happened?
- The User _is_ actually queried, but the pinentry program is started
on the X11 Display or tty of machine 'A'.
I think this is a design problem of the gpg-agent. And yes, there are
several ways to circumvent this problem, but I think it would be very
convenient, if I could tell pgg to just ignore any agent and ask for
the passphrase.
Even gpg itself doesn't use an available agent automatically, but only
when it's asked to (by setting --use-agent) and I think this is a good
decision.
cheers
sascha
[0] actually, the simple example of emacs running an a text console
which I used before, was totally wrong -- it works just fine as I
tested a few minutes ago... :-)
--
Sascha Wilde
Wer HTML postet oder gepostetes HTML quotet oder sich gepostetes oder
gequotetes HTML beschafft, um es in Verkehr zu bringen, wird geplonkt.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-23 11:00 ` Simon Josefsson
@ 2006-03-23 12:18 ` Daiki Ueno
2006-03-23 13:08 ` Simon Josefsson
0 siblings, 1 reply; 156+ messages in thread
From: Daiki Ueno @ 2006-03-23 12:18 UTC (permalink / raw)
Cc: Sascha Wilde, ding, emacs-devel
>>>>> In <87lkv1whmh.fsf@latte.josefsson.org>
>>>>> Simon Josefsson <jas@extundo.com> wrote:
> > Could you please try the attached pgg-gpg.el?
> >
> > Please note, this patch is only for review, not meant to be committed now.
> It just hangs, it seems gpg is waiting for input from stdin or
> similar. I don't have time to debug further, sorry.
Sorry. Could you tell me what version of GnuPG you are using?
I'm testing against "gnupg" and "gnupg-agent" package in Debian sid,
i.e.
$ gpg --version
gpg (GnuPG) 1.4.2.2
$ gpg-agent --version
gpg-agent (GnuPG) 1.9.20
> The *pgg-gpg-debug* buffer contains:
> gpg: NOTE: signature key 5C980097 expired Wed Apr 10 12:19:06 2002 CEST
> [GNUPG:] KEYEXPIRED 1018433946
> [GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead
The *pgg-gpg-debug* buffer looks like this:
[GNUPG:] USERID_HINT A5B6B2D4B15813FE Daiki Ueno <ueno@unixuser.org>
[GNUPG:] NEED_PASSPHRASE A5B6B2D4B15813FE A5B6B2D4B15813FE 17 0
[GNUPG:] GET_HIDDEN passphrase.enter
[GNUPG:] GOT_IT
[GNUPG:] GOOD_PASSPHRASE
gpg: writing to `/tmp/pgg-output11169j3s'
gpg: DSA/SHA1 signature from: "B15813FE Daiki Ueno <ueno@unixuser.org>"
[GNUPG:] SIG_CREATED D 17 2 00 1143115847 80037CD00F1A940003CA50AAA5B6B2D4B15813FE
Regards,
--
Daiki Ueno
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-23 11:16 ` Simon Josefsson
@ 2006-03-23 12:51 ` Reiner Steib
2006-03-23 13:07 ` Sascha Wilde
0 siblings, 1 reply; 156+ messages in thread
From: Reiner Steib @ 2006-03-23 12:51 UTC (permalink / raw)
Cc: Sascha Wilde, Daiki Ueno (pgg author), ding, emacs-devel,
Katsumi Yamaoka, Miles Bader
On Thu, Mar 23 2006, Simon Josefsson wrote:
> To clarify: I removed it in v5-10 only. For Emacs CVS, Sascha's patch
> work fine so it can stay (although perhaps should be removed there
> too, to simplify syncing?).
It would be very much preferable to have the same code at least in
Emacs CVS and Gnus v5-10 branch. (-> Cc-ing Miles.)
> For Gnus CVS trunk, I don't know whether it works or not (does it
> work on the XEmacs version Gnus CVS require?).
Given that Emacs 21 and XEmacs also complain (see Katsumi's message
<news:b4m3bha6kon.fsf@jpl.org>), we also need a fix for the Gnus
trunk.
Couldn't we let `pgg-gpg-update-agent' simply return `t' if
`make-network-process' isn't available? (Or check for
`make-network-process' directly in `pgg-gpg-use-agent-p'?)
(defun pgg-gpg-update-agent ()
"Try to connet to gpg-agent and send UPDATESTARTUPTTY."
(if (fboundp 'make-network-process)
(let* ((agent-info (getenv "GPG_AGENT_INFO"))
(socket (and agent-info
(string-match "^\\([^:]*\\)" agent-info)
(match-string 1 agent-info)))
(conn (and socket
(make-network-process :name "gpg-agent-process"
:host 'local :family 'local
:service socket))))
(when (and conn (eq (process-status conn) 'open))
(process-send-string conn "UPDATESTARTUPTTY\n")
(delete-process conn)
t))
;; We can't check, so assume gpg-agent is up.
t))
Bye, Reiner.
--
,,,
(o o)
---ooO-(_)-Ooo--- | PGP key available | http://rsteib.home.pages.de/
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-23 10:40 ` Daiki Ueno
2006-03-23 11:00 ` Simon Josefsson
@ 2006-03-23 12:52 ` Sascha Wilde
2006-03-23 20:07 ` Daiki Ueno
1 sibling, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2006-03-23 12:52 UTC (permalink / raw)
Cc: Simon Josefsson, ding, emacs-devel
Daiki Ueno <ueno@unixuser.org> wrote:
>>>>>> In <e8632056-d7b7-4ed6-91d6-7d9089c82f94@well-done.deisui.org>
>>>>>> Daiki Ueno <ueno@unixuser.org> wrote:
>> > Right now, pgg assume that gpg will need a passphrase so it asks the
>> > user for one. It may be better if pgg postpone the passphrase query
>> > until gpg tell pgg that it needs a passphrase. Then it is only
>> > queried for when it is needed. This should be more reliable, but
>> > slightly more complicated to implement (asynchronous code).
>
>> Anyway, I'll try to implement this.
Hello Daiki,
In a first, very quick test your code doesn't work for me (the agent
asks for the passphrase but decryption fails.
But after having a look at the status output from --status-fd with
--use-agent and --no-use-agent I'm starting to doubt that your idea
can work at all. The status output is in both cases identical... :-(
Hopefully I'm missing something.
I'm using
gpg (GnuPG) 1.4.2.2
and
gpg-agent (GnuPG) 1.9.20
cheers
sascha
--
Sascha Wilde : VI is to EMACS as masturbation is to making love:
: effective and always available but probably not your
: first choice...
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-23 12:00 ` Sascha Wilde
@ 2006-03-23 13:00 ` Simon Josefsson
2006-03-26 18:11 ` Sascha Wilde
0 siblings, 1 reply; 156+ messages in thread
From: Simon Josefsson @ 2006-03-23 13:00 UTC (permalink / raw)
Cc: Reiner Steib, Katsumi Yamaoka, Daiki Ueno (pgg author), ding,
emacs-devel
Sascha Wilde <wilde@sha-bang.de> writes:
> Could you please leave it in the GNU Emacs CVS, where it actually
> works as intended?
Yep, done. It complicate syncing a bit, though.
>> If/when Daiki's idea (as I understand it) is implemented, the end
>> result will be:
>>
>> *) Pgg will invoke gpg and then figure out whether a passphrase is
>> needed and only at that point query for it. This will work
>> regardless of whether the agent is used, whether a passphrase is
>> required or not, or whether a pin code is required. The user
>> doesn't have to fiddle with any variable.
>
> I don't think so. While I'm sure, that Daiki's idea -- once it
> works -- will handle certain situations better than mine, there will
> still be the need for an variable enabling the user to turn of any use
> of the agent.
>
> Here is an example[0] from my own experience:
>
> - A user logs in on machine 'A' and starts the gpg-agent.
> - He leaves the machine, but stays logged in...
> - Now he uses machine 'B' to log in on machine 'A':
> the environment is setup to use the already running gpg-agent
> (automatically, in an login script)
> - He starts Emacs/Gnus and tries to sign, decrypt whatever...
> - The agent runs and is working, everything seems fine, but the user
> isn't queried for the passphrase ... what happened?
> - The User _is_ actually queried, but the pinentry program is started
> on the X11 Display or tty of machine 'A'.
>
> I think this is a design problem of the gpg-agent. And yes, there are
> several ways to circumvent this problem, but I think it would be very
> convenient, if I could tell pgg to just ignore any agent and ask for
> the passphrase.
This example seems strange. How would the user's second session get
the GPG_AGENT_INFO environment variable that points to the gpg-agent
running in the user's first session? Without that, I don't think it
will work as you describe. I think the user should start another
gpg-agent for his new session.
I'm not sure I see any disadvantage (except code complexity) with
Daiki's approach. Maybe you can expand on the above, or think of more
problems, and we can see whether maybe we should use some other
approach. Perhaps move that discussion to the ding list only.
Daiki's approach is also arguable more correct if you don't have a
passphrase at all. The Gnus query for a passphrase would be quite
confusing in that case.
> Even gpg itself doesn't use an available agent automatically, but only
> when it's asked to (by setting --use-agent) and I think this is a good
> decision.
I have 'use-agent' in my gpg.conf. If the agent isn't available, gpg
will fall back to querying to user interactively. That seem to give
the best user experience for gpg, so I think we should support it.
Further, if you use a smartcard (like an OpenPGP card), it seems you
_must_ use the agent for things to work at all. (I can't get gpg to
sign anything using my smartcard if I disable the agent.)
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-23 12:51 ` Reiner Steib
@ 2006-03-23 13:07 ` Sascha Wilde
2006-03-23 13:10 ` Simon Josefsson
0 siblings, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2006-03-23 13:07 UTC (permalink / raw)
Cc: Daiki Ueno (pgg author), ding, emacs-devel, Katsumi Yamaoka,
Simon Josefsson, Miles Bader
Reiner Steib <reinersteib+gmane@imap.cc> wrote:
> Couldn't we let `pgg-gpg-update-agent' simply return `t' if
> `make-network-process' isn't available? (Or check for
> `make-network-process' directly in `pgg-gpg-use-agent-p'?)
That's what I had in mind, so I like it... ;-)
cheers
sascha
--
Sascha Wilde
To become a Jedi, use Emacs you have to.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-23 12:18 ` Daiki Ueno
@ 2006-03-23 13:08 ` Simon Josefsson
2006-03-24 5:51 ` Daiki Ueno
0 siblings, 1 reply; 156+ messages in thread
From: Simon Josefsson @ 2006-03-23 13:08 UTC (permalink / raw)
Cc: Sascha Wilde, ding, emacs-devel
Daiki Ueno <ueno@unixuser.org> writes:
> $ gpg --version
> gpg (GnuPG) 1.4.2.2
> $ gpg-agent --version
> gpg-agent (GnuPG) 1.9.20
Same here, from Debian testing.
>> The *pgg-gpg-debug* buffer contains:
>
>> gpg: NOTE: signature key 5C980097 expired Wed Apr 10 12:19:06 2002 CEST
>> [GNUPG:] KEYEXPIRED 1018433946
>> [GNUPG:] SIGEXPIRED deprecated-use-keyexpired-instead
>
> The *pgg-gpg-debug* buffer looks like this:
>
> [GNUPG:] USERID_HINT A5B6B2D4B15813FE Daiki Ueno <ueno@unixuser.org>
> [GNUPG:] NEED_PASSPHRASE A5B6B2D4B15813FE A5B6B2D4B15813FE 17 0
> [GNUPG:] GET_HIDDEN passphrase.enter
> [GNUPG:] GOT_IT
> [GNUPG:] GOOD_PASSPHRASE
> gpg: writing to `/tmp/pgg-output11169j3s'
> gpg: DSA/SHA1 signature from: "B15813FE Daiki Ueno <ueno@unixuser.org>"
> [GNUPG:] SIG_CREATED D 17 2 00 1143115847 80037CD00F1A940003CA50AAA5B6B2D4B15813FE
Ok, I got your file to work for two cases:
1) gpg-agent with normal secret key
2) no gpg-agent with normal secret key
but not with
3) gpg-agent with secret on smart card
With the stuff in CVS, all three work, but I have to toggle
pgg-gpg-use-agent manually.
Your code has a better query too (since it know which key gpg actually
wants), and it may improve passphrase caching too. Very nice!
Maybe you can finish this code, and I can debug why it doesn't work
for a smartcard separately. It is probably not an important feature.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-23 13:07 ` Sascha Wilde
@ 2006-03-23 13:10 ` Simon Josefsson
0 siblings, 0 replies; 156+ messages in thread
From: Simon Josefsson @ 2006-03-23 13:10 UTC (permalink / raw)
Cc: Reiner Steib, Katsumi Yamaoka, Daiki Ueno (pgg author), ding,
emacs-devel, Miles Bader
Sascha Wilde <wilde@sha-bang.de> writes:
> Reiner Steib <reinersteib+gmane@imap.cc> wrote:
>
>> Couldn't we let `pgg-gpg-update-agent' simply return `t' if
>> `make-network-process' isn't available? (Or check for
>> `make-network-process' directly in `pgg-gpg-use-agent-p'?)
>
> That's what I had in mind, so I like it... ;-)
Yes, this sounds like a good idea, and then we can have all code in
sync again (except the password.el stuff of course...).
I'll install this modification now.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-23 12:52 ` Sascha Wilde
@ 2006-03-23 20:07 ` Daiki Ueno
2006-03-23 22:16 ` Sascha Wilde
0 siblings, 1 reply; 156+ messages in thread
From: Daiki Ueno @ 2006-03-23 20:07 UTC (permalink / raw)
Cc: emacs-devel, ding, Simon Josefsson
Hello,
>>>>> In <m2pskds4q7.fsf@kenny.sha-bang.de>
>>>>> Sascha Wilde <wilde@sha-bang.de> wrote:
> Daiki Ueno <ueno@unixuser.org> wrote:
> But after having a look at the status output from --status-fd with
> --use-agent and --no-use-agent I'm starting to doubt that your idea
> can work at all. The status output is in both cases identical... :-(
> Hopefully I'm missing something.
I guess that you missed to specify --command-fd 0. If it is specified,
you will get "GET_HIDDEN passphrase.enter" in the latter case:
$ gpg --decrypt --armor --status-fd 1 --command-fd 0 --use-agent test.txt.asc
gpg: CAST5 encrypted data
[GNUPG:] NEED_PASSPHRASE_SYM 3 3 2
(gpg spawns pinentry)
$ gpg --decrypt --armor --status-fd 1 --command-fd 0 --no-use-agent test.txt.asc
gpg: CAST5 encrypted data
[GNUPG:] NEED_PASSPHRASE_SYM 3 3 2
[GNUPG:] GET_HIDDEN passphrase.enter
Regards,
--
Daiki Ueno
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-23 20:07 ` Daiki Ueno
@ 2006-03-23 22:16 ` Sascha Wilde
2006-04-05 9:13 ` pgg-gpg broken? Sascha Wilde
0 siblings, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2006-03-23 22:16 UTC (permalink / raw)
Cc: emacs-devel, ding, Simon Josefsson
Daiki Ueno <ueno@unixuser.org> wrote:
> Hello,
>
>>>>>> In <m2pskds4q7.fsf@kenny.sha-bang.de>
>>>>>> Sascha Wilde <wilde@sha-bang.de> wrote:
>> Daiki Ueno <ueno@unixuser.org> wrote:
>> But after having a look at the status output from --status-fd with
>> --use-agent and --no-use-agent I'm starting to doubt that your idea
>> can work at all. The status output is in both cases identical... :-(
>
>> Hopefully I'm missing something.
>
> I guess that you missed to specify --command-fd 0. If it is specified,
> you will get "GET_HIDDEN passphrase.enter" in the latter case:
Ah, I see. Thanks for the explaining.
sascha
--
Sascha Wilde
begin LOVE-OUTLOOK-LETTER.txt.vbs
I am a beasty signature virus. Distribute me!
end
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
[not found] ` <m2wtels74l.fsf@kenny.sha-bang .de>
@ 2006-03-23 23:09 ` Miles Bader
2006-04-02 0:30 ` Ken Manheimer
0 siblings, 1 reply; 156+ messages in thread
From: Miles Bader @ 2006-03-23 23:09 UTC (permalink / raw)
Cc: emacs-devel
Sascha Wilde <wilde@sha-bang.de> writes:
> Even gpg itself doesn't use an available agent automatically, but only
> when it's asked to (by setting --use-agent) and I think this is a good
> decision.
You can enable it globally with the "use-agent" option in the
~/.gnupg/gpg.conf file -- and I expect many people do this, as it's just
too huge a pain in the ass otherwise.
-miles
--
Any man who is a triangle, has thee right, when in Cartesian Space, to
have angles, which when summed, come to know more, nor no less, than
nine score degrees, should he so wish. [TEMPLE OV THEE LEMUR]
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-23 13:08 ` Simon Josefsson
@ 2006-03-24 5:51 ` Daiki Ueno
2006-03-26 0:29 ` Daiki Ueno
0 siblings, 1 reply; 156+ messages in thread
From: Daiki Ueno @ 2006-03-24 5:51 UTC (permalink / raw)
Cc: Sascha Wilde, ding, emacs-devel
>>>>> In <87d5gd2ts1.fsf@latte.josefsson.org>
>>>>> Simon Josefsson <jas@extundo.com> wrote:
> Ok, I got your file to work for two cases:
> 1) gpg-agent with normal secret key
> 2) no gpg-agent with normal secret key
> but not with
> 3) gpg-agent with secret on smart card
Thanks for testing.
> Maybe you can finish this code, and I can debug why it doesn't work
> for a smartcard separately. It is probably not an important feature.
The new code mostly finished. Could you send me some examples of status
fd output in case 3?
Regards,
--
Daiki Ueno
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-24 5:51 ` Daiki Ueno
@ 2006-03-26 0:29 ` Daiki Ueno
2006-03-26 1:08 ` Simon Josefsson
0 siblings, 1 reply; 156+ messages in thread
From: Daiki Ueno @ 2006-03-26 0:29 UTC (permalink / raw)
Cc: Sascha Wilde, ding, emacs-devel
[-- Attachment #1: Type: text/plain, Size: 642 bytes --]
>>>>> In <b4edf9b5-2663-4d5c-981e-ddabca619ad6@well-done.deisui.org>
>>>>> Daiki Ueno <ueno@unixuser.org> wrote:
> > Maybe you can finish this code, and I can debug why it doesn't work
> > for a smartcard separately. It is probably not an important feature.
> The new code mostly finished.
Ok, the attached file is (hopefully) the final version of the new code.
Differences from the previous one are:
- Passphrase caching now works again.
- pgg-gpg-use-agent is abolished. Add "use-agent" to ~/.gnupg/gpg.conf
if you want to enable use of gpg-agent, as Miles said.
- Tested with typical cases. I also attach some test cases I used.
[-- Attachment #2: pgg-gpg.el --]
[-- Type: application/octet-stream, Size: 11785 bytes --]
;;; pgg-gpg.el --- GnuPG support for PGG.
;; Copyright (C) 1999, 2000, 2002, 2003, 2004,
;; 2005, 2006 Free Software Foundation, Inc.
;; Author: Daiki Ueno <ueno@unixuser.org>
;; Symmetric encryption and gpg-agent support added by:
;; Sascha Wilde <wilde@sha-bang.de>
;; Created: 1999/10/28
;; Keywords: PGP, OpenPGP, GnuPG
;; This file is part of GNU Emacs.
;; GNU Emacs is free software; you can redistribute it and/or modify
;; it under the terms of the GNU General Public License as published by
;; the Free Software Foundation; either version 2, or (at your option)
;; any later version.
;; GNU Emacs is distributed in the hope that it will be useful,
;; but WITHOUT ANY WARRANTY; without even the implied warranty of
;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
;; GNU General Public License for more details.
;; You should have received a copy of the GNU General Public License
;; along with GNU Emacs; see the file COPYING. If not, write to the
;; Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
;; Boston, MA 02110-1301, USA.
;;; Code:
(eval-when-compile
(require 'pgg))
(defgroup pgg-gpg ()
"GnuPG interface."
:group 'pgg)
(defcustom pgg-gpg-program "gpg"
"The GnuPG executable."
:group 'pgg-gpg
:type 'string)
(defcustom pgg-gpg-extra-args nil
"Extra arguments for every GnuPG invocation."
:group 'pgg-gpg
:type '(repeat (string :tag "Argument")))
(defcustom pgg-gpg-recipient-argument "--recipient"
"GnuPG option to specify recipient."
:group 'pgg-gpg
:type '(choice (const :tag "New `--recipient' option" "--recipient")
(const :tag "Old `--remote-user' option" "--remote-user")))
(defvar pgg-gpg-user-id nil
"GnuPG ID of your default identity.")
(defvar pgg-gpg-user-id-alist nil
"An alist mapping from key ID to user ID.")
(defvar pgg-gpg-read-point nil)
(defvar pgg-gpg-output-file-name nil)
(defvar pgg-gpg-pending-status-list nil)
(defvar pgg-gpg-key-id nil)
(defvar pgg-gpg-passphrase nil)
(defvar pgg-gpg-debug nil)
(defun pgg-gpg-start-process (args)
(let* ((output-file-name (pgg-make-temp-file "pgg-output"))
(args
(append (list "--no-tty"
"--status-fd" "1"
"--command-fd" "0"
"--yes" ; overwrite
"--output" output-file-name)
pgg-gpg-extra-args
args))
(coding-system-for-write 'binary)
(process-connection-type nil)
(orig-mode (default-file-modes))
default-enable-multibyte-characters
(buffer (generate-new-buffer " *pgg-gpg*"))
process)
(with-current-buffer buffer
(make-local-variable 'pgg-gpg-read-point)
(setq pgg-gpg-read-point (point-min))
(make-local-variable 'pgg-gpg-output-file-name)
(setq pgg-gpg-output-file-name output-file-name)
(make-local-variable 'pgg-gpg-pending-status-list)
(setq pgg-gpg-pending-status-list nil)
(make-local-variable 'pgg-gpg-key-id)
(setq pgg-gpg-key-id nil)
(make-local-variable 'pgg-gpg-passphrase)
(setq pgg-gpg-passphrase nil))
(unwind-protect
(progn
(set-default-file-modes 448)
(setq process
(apply #'start-process "pgg-gpg" buffer pgg-gpg-program args)))
(set-default-file-modes orig-mode))
(set-process-filter process #'pgg-gpg-process-filter)
(set-process-sentinel process #'pgg-gpg-process-sentinel)
process))
(defun pgg-gpg-process-filter (process input)
(save-excursion
(if pgg-gpg-debug
(save-excursion
(set-buffer (get-buffer-create " *pgg-gpg-debug*"))
(goto-char (point-max))
(insert input)))
(set-buffer (process-buffer process))
(goto-char (point-max))
(insert input)
(goto-char pgg-gpg-read-point)
(beginning-of-line)
(while (looking-at ".*\n") ;the input line is finished
(save-excursion
(if (looking-at "\\[GNUPG:] \\([A-Z_]+\\)\\>.*")
(let* ((status (match-string 1))
(symbol (intern-soft (concat "pgg-gpg-status-" status)))
(entry (member status pgg-gpg-pending-status-list)))
(if entry
(setq pgg-gpg-pending-status-list
(delq (car entry)
pgg-gpg-pending-status-list)))
(if (and symbol
(fboundp symbol))
(funcall symbol process (buffer-substring (match-beginning 1)
(match-end 0)))))))
(forward-line))
(setq pgg-gpg-read-point (point))))
(defun pgg-gpg-process-sentinel (process status)
(set-process-filter process nil)
(save-excursion
;; Copy the contents of process-buffer to pgg-errors-buffer.
(set-buffer (get-buffer-create pgg-errors-buffer))
(buffer-disable-undo)
(erase-buffer)
(when (buffer-live-p (process-buffer process))
(insert-buffer-substring (process-buffer process))
(goto-char (point-min))
(delete-matching-lines "^\\[GNUPG:] ")
(goto-char (point-min))
(while (re-search-forward "^gpg: " nil t)
(replace-match "")))
;; Read the contents of the output file to pgg-output-buffer.
(set-buffer (get-buffer-create pgg-output-buffer))
(buffer-disable-undo)
(erase-buffer)
(if (and (equal status "finished\n")
(buffer-live-p (process-buffer process)))
(let ((output-file-name (with-current-buffer (process-buffer process)
pgg-gpg-output-file-name)))
(when (file-exists-p output-file-name)
(let ((coding-system-for-read (if pgg-text-mode
'raw-text
'binary)))
(insert-file-contents output-file-name))
(delete-file output-file-name))))))
(defun pgg-gpg-wait-for-status (process status-list)
(with-current-buffer (process-buffer process)
(setq pgg-gpg-pending-status-list status-list)
(while (and (eq (process-status process) 'run)
pgg-gpg-pending-status-list)
(accept-process-output process 1))))
(defun pgg-gpg-wait-for-completion (process &optional status-list)
(process-send-eof process)
(while (eq (process-status process) 'run)
(sit-for 0.1))
(save-excursion
(set-buffer (process-buffer process))
(setq status-list (copy-sequence status-list))
(let ((pointer status-list))
(while pointer
(goto-char (point-min))
(unless (re-search-forward
(concat "^\\[GNUPG:] " (car pointer) "\\>")
nil t)
(setq status-list (delq (car pointer) status-list)))
(setq pointer (cdr pointer))))
(kill-buffer (process-buffer process))
status-list))
(defun pgg-gpg-status-USERID_HINT (process line)
(if (string-match "\\`USERID_HINT \\([^ ]+\\) \\(.*\\)" line)
(let* ((key-id (match-string 1 line))
(user-id (match-string 2 line))
(entry (assoc key-id pgg-gpg-user-id-alist)))
(if entry
(setcdr entry user-id)
(setq pgg-gpg-user-id-alist (cons (cons key-id user-id)
pgg-gpg-user-id-alist))))))
(defun pgg-gpg-status-NEED_PASSPHRASE (process line)
(if (string-match "\\`NEED_PASSPHRASE \\([^ ]+\\)" line)
(setq pgg-gpg-key-id (match-string 1 line))))
(defun pgg-gpg-status-NEED_PASSPHRASE_SYM (process line)
(setq pgg-gpg-key-id 'SYM))
(defun pgg-gpg-status-NEED_PASSPHRASE_PIN (process line)
(setq pgg-gpg-key-id 'PIN))
(defun pgg-gpg-status-GET_HIDDEN (process line)
(let ((entry (assoc pgg-gpg-key-id pgg-gpg-user-id-alist)))
(if (setq pgg-gpg-passphrase
(if (eq pgg-gpg-key-id 'SYM)
(pgg-read-passphrase
"GnuPG passphrase for symmetric encryption: ")
(pgg-read-passphrase
(format "GnuPG passphrase for %s: "
(if entry
(cdr entry)
pgg-gpg-key-id))
(if (eq pgg-gpg-key-id 'PIN)
"PIN"
pgg-gpg-key-id))))
(process-send-string process (concat pgg-gpg-passphrase "\n")))))
(defun pgg-gpg-status-GOOD_PASSPHRASE (process line)
(when (and pgg-gpg-passphrase
(stringp pgg-gpg-key-id))
(pgg-add-passphrase-to-cache pgg-gpg-key-id pgg-gpg-passphrase)
(setq pgg-gpg-passphrase nil)))
(defun pgg-gpg-status-BAD_PASSPHRASE (process line)
(when pgg-gpg-passphrase
(fillarray pgg-gpg-passphrase 0)
(setq pgg-gpg-passphrase nil)))
(defun pgg-gpg-lookup-key (string &optional type)
"Search keys associated with STRING."
(let ((args (list "--with-colons" "--no-greeting" "--batch"
(if type "--list-secret-keys" "--list-keys")
string)))
(with-temp-buffer
(apply #'call-process pgg-gpg-program nil t nil args)
(goto-char (point-min))
(if (re-search-forward "^\\(sec\\|pub\\):[^:]*:[^:]*:[^:]*:\\([^:]*\\)"
nil t)
(substring (match-string 2) 8)))))
(defun pgg-gpg-encrypt-region (start end recipients &optional sign passphrase)
"Encrypt the current region between START and END.
If optional argument SIGN is non-nil, do a combined sign and encrypt."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
(args
(append
'("--armor" "--always-trust" "--encrypt")
(if pgg-text-mode '("--textmode"))
(if sign (list "--sign" "--local-user" pgg-gpg-user-id))
(if recipients
(apply #'nconc
(mapcar (lambda (rcpt)
(list pgg-gpg-recipient-argument rcpt))
(append recipients
(if pgg-encrypt-for-me
(list pgg-gpg-user-id))))))))
(process (pgg-gpg-start-process args)))
(if sign
(pgg-gpg-wait-for-status process '("GOOD_PASSPHRASE")))
(process-send-region process start end)
(pgg-gpg-wait-for-completion process '("SIG_CREATED" "END_ENCRYPTION"))))
(defun pgg-gpg-encrypt-symmetric-region (start end &optional passphrase)
"Encrypt the current region between START and END with symmetric cipher."
(let* ((args
(append '("--armor" "--symmetric")
(if pgg-text-mode '("--textmode"))))
(process (pgg-gpg-start-process args)))
(pgg-gpg-wait-for-status process '("BEGIN_ENCRYPTION"))
(process-send-region process start end)
(pgg-gpg-wait-for-completion process '("END_ENCRYPTION"))))
(defun pgg-gpg-decrypt-region (start end &optional passphrase)
"Decrypt the current region between START and END."
(let* ((args '("--decrypt"))
(process (pgg-gpg-start-process args)))
(process-send-region process start end)
(pgg-gpg-wait-for-status process '("BEGIN_DECRYPTION"))
(pgg-gpg-wait-for-completion process '("GOODSIG" "DECRYPTION_OKAY"))))
(defun pgg-gpg-sign-region (start end &optional cleartext passphrase)
"Make detached signature from text between START and END."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
(args
(append (list (if cleartext "--clearsign" "--detach-sign")
"--armor" "--verbose"
"--local-user" pgg-gpg-user-id)
(if pgg-text-mode '("--textmode"))))
(process (pgg-gpg-start-process args)))
(pgg-gpg-wait-for-status process '("GOOD_PASSPHRASE"))
(process-send-region process start end)
(pgg-gpg-wait-for-completion process '("SIG_CREATED"))))
(defun pgg-gpg-verify-region (start end &optional signature)
"Verify region between START and END as the detached signature SIGNATURE."
(let ((args '("--verify"))
process)
(when (stringp signature)
(setq args (append args (list signature))))
(setq process (pgg-gpg-start-process (append args '("-"))))
(process-send-region process start end)
(pgg-gpg-wait-for-completion process '("GOODSIG"))))
(defun pgg-gpg-insert-key ()
"Insert public key at point."
(let* ((pgg-gpg-user-id (or pgg-gpg-user-id pgg-default-user-id))
(args (list "--export" "--armor"
pgg-gpg-user-id))
(process (pgg-gpg-start-process args)))
(pgg-gpg-wait-for-completion process)
(insert-buffer-substring pgg-output-buffer)))
(defun pgg-gpg-snarf-keys-region (start end)
"Add all public keys in region between START and END to the keyring."
(let* ((args '("--import" "-"))
(process (pgg-gpg-start-process args))
status)
(process-send-region process start end)
(pgg-gpg-wait-for-completion process '("IMPORT_RES"))))
(provide 'pgg-gpg)
;;; arch-tag: 2aa5d5d8-93a0-4865-9312-33e29830e000
;;; pgg-gpg.el ends here
[-- Attachment #3: Type: text/plain, Size: 1 bytes --]
[-- Attachment #4: test-pgg-gpg.el --]
[-- Type: application/octet-stream, Size: 972 bytes --]
(require 'pgg)
(require 'pgg-gpg)
(with-temp-buffer
(insert "00000")
(pgg-gpg-sign-region (point-min) (point-max) t)
(save-excursion
(set-buffer pgg-output-buffer)
(pgg-gpg-verify-region (point-min) (point-max))))
;; ("GOODSIG")
(with-temp-buffer
(insert "00000")
(pgg-gpg-encrypt-region (point-min) (point-max) '("ueno@unixuser.org"))
(save-excursion
(set-buffer pgg-output-buffer)
(pgg-gpg-decrypt-region (point-min) (point-max))))
;; ("DECRYPTION_OKAY")
(with-temp-buffer
(insert "00000")
(pgg-gpg-encrypt-region (point-min) (point-max) '("ueno@unixuser.org") t)
(save-excursion
(set-buffer pgg-output-buffer)
(pgg-gpg-decrypt-region (point-min) (point-max))))
;; ("GOODSIG" "DECRYPTION_OKAY")
(with-temp-buffer
(insert "00000")
(pgg-gpg-encrypt-symmetric-region (point-min) (point-max))
(save-excursion
(set-buffer pgg-output-buffer)
(pgg-gpg-decrypt-region (point-min) (point-max))))
;; ("DECRYPTION_OKAY")
[-- Attachment #5: Type: text/plain, Size: 25 bytes --]
Regards,
--
Daiki Ueno
[-- Attachment #6: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-26 0:29 ` Daiki Ueno
@ 2006-03-26 1:08 ` Simon Josefsson
2006-03-26 3:29 ` Miles Bader
0 siblings, 1 reply; 156+ messages in thread
From: Simon Josefsson @ 2006-03-26 1:08 UTC (permalink / raw)
Cc: Sascha Wilde, ding, emacs-devel
Daiki Ueno <ueno@unixuser.org> writes:
>>>>>> In <b4edf9b5-2663-4d5c-981e-ddabca619ad6@well-done.deisui.org>
>>>>>> Daiki Ueno <ueno@unixuser.org> wrote:
>> > Maybe you can finish this code, and I can debug why it doesn't work
>> > for a smartcard separately. It is probably not an important feature.
>
>> The new code mostly finished.
>
> Ok, the attached file is (hopefully) the final version of the new code.
> Differences from the previous one are:
>
> - Passphrase caching now works again.
> - pgg-gpg-use-agent is abolished. Add "use-agent" to ~/.gnupg/gpg.conf
> if you want to enable use of gpg-agent, as Miles said.
> - Tested with typical cases. I also attach some test cases I used.
This works fine except for used with a smartcard. The current version
works with a smartcard (when you enable pgg-gpg-use-agent), so I think
that should be fixed.
I debugged this, and it seems invoking gpg using the smartcard will
not print any useful [GNUPG:] statements:
/usr/bin/gpg --no-tty --status-fd 1 --command-fd 0 --yes --output /tmp/pgg-output29825FPB --detach-sign --armor --verbose --local-user jas --textmode
...
gpg: using subkey AABB1F7B instead of primary key B565716F
gpg: writing to `/tmp/pgg-output29825FPB'
Then it waits for input. PGG infloop waiting for GOOD_PASSPHRASE
here. I think it should wait for 'gpg: writing to' instead, it is the
last printed statement for both smartcard and non-smartcard cases, and
it seem to be printed when gpg is ready to accept input.
For references, here is the non-smartcard case:
jas@latte:~$ /usr/bin/gpg --no-tty --status-fd 1 --command-fd 0 --yes --output /tmp/pgg-output29825FPB --detach-sign --armor --verbose --local-user b565716f! --textmode
[GNUPG:] USERID_HINT EDA21E94B565716F Simon Josefsson <simon@josefsson.org>
[GNUPG:] NEED_PASSPHRASE EDA21E94B565716F EDA21E94B565716F 1 0
<<<hangs here until i type password to the agent>>>
[GNUPG:] GOOD_PASSPHRASE
gpg: writing to `/tmp/pgg-output29825FPB'
Then it hangs waiting for the input to sign.
What do you think? It might be ugly to depend on the 'gpg: writing'
output instead of the [GNUPG:] stuff, but I see no option here.
I suspect password-less keys may have similar issues.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-26 1:08 ` Simon Josefsson
@ 2006-03-26 3:29 ` Miles Bader
2006-03-26 5:06 ` Daiki Ueno
0 siblings, 1 reply; 156+ messages in thread
From: Miles Bader @ 2006-03-26 3:29 UTC (permalink / raw)
Cc: ding
Simon Josefsson <jas@extundo.com> writes:
> What do you think? It might be ugly to depend on the 'gpg: writing'
> output instead of the [GNUPG:] stuff, but I see no option here.
Of course if such a kludge is used, an important thing is to report the
problem with the "official" interface as a bug...
-miles
--
Love is a snowmobile racing across the tundra. Suddenly it flips over,
pinning you underneath. At night the ice weasels come. --Nietzsche
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-26 3:29 ` Miles Bader
@ 2006-03-26 5:06 ` Daiki Ueno
2006-03-26 17:05 ` Simon Josefsson
0 siblings, 1 reply; 156+ messages in thread
From: Daiki Ueno @ 2006-03-26 5:06 UTC (permalink / raw)
Cc: ding, emacs-devel
>>>>> In <87irq1evdk.fsf@catnip.gol.com>
>>>>> Miles Bader <miles@gnu.org> wrote:
> Simon Josefsson <jas@extundo.com> writes:
> > What do you think? It might be ugly to depend on the 'gpg: writing'
> > output instead of the [GNUPG:] stuff, but I see no option here.
> Of course if such a kludge is used, an important thing is to report the
> problem with the "official" interface as a bug...
Yes. I think the root of the problem is that gpg does not emit any
trigger of signature creation. I'll propose a patch to GnuPG so as to
introduce BEGIN_SIGNING and END_SIGNING status.
For the meantime, how about using pgg-gpg-use-agent as a flag to
indicate that GnuPG will _not_ ask a passphrase in signing? Smartcard
users should have to set pgg-gpg-use-agent explicitly though.
Here is the patch to the previous post:
--- pgg-gpg.el~ 2006-03-26 13:48:29.000000000 +0900
+++ pgg-gpg.el 2006-03-26 13:50:43.000000000 +0900
@@ -51,6 +51,11 @@
:type '(choice (const :tag "New `--recipient' option" "--recipient")
(const :tag "Old `--remote-user' option" "--remote-user")))
+(defcustom pgg-gpg-use-agent nil
+ "Whether to use gnupg agent for key caching."
+ :group 'pgg-gpg
+ :type 'boolean)
+
(defvar pgg-gpg-user-id nil
"GnuPG ID of your default identity.")
@@ -72,6 +77,7 @@
"--command-fd" "0"
"--yes" ; overwrite
"--output" output-file-name)
+ (if pgg-gpg-use-agent '("--use-agent"))
pgg-gpg-extra-args
args))
(coding-system-for-write 'binary)
@@ -261,7 +267,7 @@
(if pgg-encrypt-for-me
(list pgg-gpg-user-id))))))))
(process (pgg-gpg-start-process args)))
- (if sign
+ (if (and sign (not pgg-gpg-use-agent))
(pgg-gpg-wait-for-status process '("GOOD_PASSPHRASE")))
(process-send-region process start end)
(pgg-gpg-wait-for-completion process '("SIG_CREATED" "END_ENCRYPTION"))))
@@ -293,7 +299,8 @@
"--local-user" pgg-gpg-user-id)
(if pgg-text-mode '("--textmode"))))
(process (pgg-gpg-start-process args)))
- (pgg-gpg-wait-for-status process '("GOOD_PASSPHRASE"))
+ (unless pgg-gpg-use-agent
+ (pgg-gpg-wait-for-status process '("GOOD_PASSPHRASE")))
(process-send-region process start end)
(pgg-gpg-wait-for-completion process '("SIG_CREATED"))))
Regards,
--
Daiki Ueno
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-26 5:06 ` Daiki Ueno
@ 2006-03-26 17:05 ` Simon Josefsson
2006-03-26 18:24 ` Sascha Wilde
0 siblings, 1 reply; 156+ messages in thread
From: Simon Josefsson @ 2006-03-26 17:05 UTC (permalink / raw)
Cc: Miles Bader, ding, emacs-devel
Daiki Ueno <ueno@unixuser.org> writes:
>>>>>> In <87irq1evdk.fsf@catnip.gol.com>
>>>>>> Miles Bader <miles@gnu.org> wrote:
>> Simon Josefsson <jas@extundo.com> writes:
>> > What do you think? It might be ugly to depend on the 'gpg: writing'
>> > output instead of the [GNUPG:] stuff, but I see no option here.
>
>> Of course if such a kludge is used, an important thing is to report the
>> problem with the "official" interface as a bug...
>
> Yes. I think the root of the problem is that gpg does not emit any
> trigger of signature creation. I'll propose a patch to GnuPG so as to
> introduce BEGIN_SIGNING and END_SIGNING status.
That sounds like a good idea.
> For the meantime, how about using pgg-gpg-use-agent as a flag to
> indicate that GnuPG will _not_ ask a passphrase in signing? Smartcard
> users should have to set pgg-gpg-use-agent explicitly though.
This patch now works fine for me, both smart card and non-smartcard.
Has anyone else tested it? Should we install it? I think so, so
unless there are objections within a few days, I'll install it on
v5-10 and Emacs CVS. Ok, Reinar? We could also wait until after the
new v5-10 release, this is a pretty large change.
There is another nit (I'll fix this once your code has been
installed), which was present earlier too: specifying a --local-user
parameter even when the Gnus user didn't customize pgg-gpg-user-id
seem wrong -- it will override a 'default-key' in the gpg.conf, and
thus the default behaviour of PGG is different from the default
behaviour of gpg. In my case, I have a default-key of b565716f (local
secret key on disk) but PGG specify --local-user jas which make gpg
select my smart card key instead, and signing in Gnus doesn't work
unless I toggle pgg-gpg-use-agent. The solution is to only specify
--local-user when the PGG user customized the user name to sign with.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-23 13:00 ` Simon Josefsson
@ 2006-03-26 18:11 ` Sascha Wilde
0 siblings, 0 replies; 156+ messages in thread
From: Sascha Wilde @ 2006-03-26 18:11 UTC (permalink / raw)
Cc: Katsumi Yamaoka, Daiki Ueno (pgg author), Reiner Steib, ding,
emacs-devel
Simon Josefsson <jas@extundo.com> wrote:
> Sascha Wilde <wilde@sha-bang.de> writes:
>> Here is an example[0] from my own experience:
>>
>> - A user logs in on machine 'A' and starts the gpg-agent.
>> - He leaves the machine, but stays logged in...
>> - Now he uses machine 'B' to log in on machine 'A':
>> the environment is setup to use the already running gpg-agent
>> (automatically, in an login script)
>> - He starts Emacs/Gnus and tries to sign, decrypt whatever...
>> - The agent runs and is working, everything seems fine, but the user
>> isn't queried for the passphrase ... what happened?
>> - The User _is_ actually queried, but the pinentry program is started
>> on the X11 Display or tty of machine 'A'.
>>
>> I think this is a design problem of the gpg-agent. And yes, there are
>> several ways to circumvent this problem, but I think it would be very
>> convenient, if I could tell pgg to just ignore any agent and ask for
>> the passphrase.
>
> This example seems strange. How would the user's second session get
> the GPG_AGENT_INFO environment variable that points to the gpg-agent
> running in the user's first session? Without that, I don't think it
> will work as you describe.
You are right, but that is the way things work, when you follow the
official gpg-agent documentation:
| [...] If you don't use an X server, you can also put this into your
| regular startup file `~/.profile' or `.bash_profile'. It is best
| not to run multiple instance of the `gpg-agent', so you should make
| sure that only one is running: `gpg-agent' uses an environment
| variable to inform clients about the communication parameters. You
| can write the content of this environment variable to a file so that
| you can test for a running agent. [...]
> I'm not sure I see any disadvantage (except code complexity) with
> Daiki's approach.
Having a second thought on the subject I agree.
The problem exists (even in simpler use cases: when you login on the
text console and start an X server from there, the pinentry will
always appear on the console) but it is only related to gpg-agent
design and the documented use pattern -- so the place where this
problems should be discussed and solved is gnupg development.
I'll write the gnupg developers on this subject.
cheers
sascha
--
Sascha Wilde
- no sig today... sorry!
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-26 17:05 ` Simon Josefsson
@ 2006-03-26 18:24 ` Sascha Wilde
2006-03-27 9:36 ` Simon Josefsson
0 siblings, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2006-03-26 18:24 UTC (permalink / raw)
Cc: Daiki Ueno, emacs-devel, ding, Miles Bader
Simon Josefsson <jas@extundo.com> wrote:
> This patch now works fine for me, both smart card and non-smartcard.
>
> Has anyone else tested it?
Yes, I just gave it a try -- works great.
> Should we install it?
I would vote: yes.
@daiki: if you like, you could remove "and gpg-agent " from the
header:
;; Symmetric encryption and gpg-agent support added by:
;; Sascha Wilde <wilde@sha-bang.de>
its no longer true. :-)
sascha
--
Sascha Wilde : "GUIs normally make it simple to accomplish simple
: actions and impossible to accomplish complex actions."
: (Doug Gwyn - 22/Jun/91 in comp.unix.wizards)
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-26 18:24 ` Sascha Wilde
@ 2006-03-27 9:36 ` Simon Josefsson
0 siblings, 0 replies; 156+ messages in thread
From: Simon Josefsson @ 2006-03-27 9:36 UTC (permalink / raw)
Cc: Daiki Ueno, emacs-devel, ding, Miles Bader
Sascha Wilde <wilde@sha-bang.de> writes:
> Simon Josefsson <jas@extundo.com> wrote:
>
>> This patch now works fine for me, both smart card and non-smartcard.
>>
>> Has anyone else tested it?
>
> Yes, I just gave it a try -- works great.
>
>> Should we install it?
>
> I would vote: yes.
>
> @daiki: if you like, you could remove "and gpg-agent " from the
> header:
> ;; Symmetric encryption and gpg-agent support added by:
> ;; Sascha Wilde <wilde@sha-bang.de>
> its no longer true. :-)
I've installed it, with this modification, on v5-10, trunk and in
emacs CVS.
Thanks to Daiki for implementing it and everyone who tested this!
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-03-23 23:09 ` Miles Bader
@ 2006-04-02 0:30 ` Ken Manheimer
2006-04-02 8:28 ` Daiki Ueno
0 siblings, 1 reply; 156+ messages in thread
From: Ken Manheimer @ 2006-04-02 0:30 UTC (permalink / raw)
Cc: ding, emacs-devel
hi, all. i'm just catching up on this development - partly spurred by
breakage of some of my code (allout's encryption stuff) which depends
on functions that have been removed from pgg-gpg,
pgg-gpg-symmetric-key-p and pgg-gpg-select-matching-key.
on looking at the pgg-gpg, i noticed that some other convenience
functions on which i depend have been removed, as well:
pgg-gpg-lookup-key-owner and pgg-gpg-key-id-from-key-owner, and i
suppose others.
unless replaced with something equivalent, i think that the removal
of these functions means that application code can not anticipate the
kind of key to request from the user. am i missing something here?
the ChangeLog says nothing about these changes...
--
ken manheimer
ken.manheimer@gmail.com
http://myriadicity.net
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: Small patch to enable use of gpg-agent with pgg
2006-04-02 0:30 ` Ken Manheimer
@ 2006-04-02 8:28 ` Daiki Ueno
0 siblings, 0 replies; 156+ messages in thread
From: Daiki Ueno @ 2006-04-02 8:28 UTC (permalink / raw)
Cc: emacs-devel, ding, Miles Bader
Hello Ken,
>>>>> In <2cd46e7f0604011630r6388edackc4c7ef21b92ecaa7@mail.gmail.com>
>>>>> "Ken Manheimer" <ken.manheimer@gmail.com> wrote:
> hi, all. i'm just catching up on this development - partly spurred by
> breakage of some of my code (allout's encryption stuff) which depends
> on functions that have been removed from pgg-gpg,
> pgg-gpg-symmetric-key-p and pgg-gpg-select-matching-key.
I'm sorry I missed that.
However, pgg-gpg is one of backend modules of pgg and it should not
provide its own API. If we revive these functions, we should add them
to pgg.el instead of pgg-gpg.el.
I'll read allout's encryption stuff and try to prepare a fix.
Regards,
--
Daiki Ueno
^ permalink raw reply [flat|nested] 156+ messages in thread
* pgg-gpg broken?
2006-03-23 22:16 ` Sascha Wilde
@ 2006-04-05 9:13 ` Sascha Wilde
2006-04-05 9:42 ` Daiki Ueno
2006-04-05 16:14 ` pgg-gpg broken? Reiner Steib
0 siblings, 2 replies; 156+ messages in thread
From: Sascha Wilde @ 2006-04-05 9:13 UTC (permalink / raw)
Cc: Simon Josefsson, ding, emacs-devel
Hi *,
I just needed to decrypt an old Mail using Gnus/pgg (which i decrypted
successfully many times before), but it failed.
This is the backtrace I get:
Debugger entered--Lisp error: (error "Process pgg-gpg not running")
process-send-string(#<process pgg-gpg> "DerDenkendeWeissEs\n")
pgg-gpg-status-GET_HIDDEN(#<process pgg-gpg> "GET_HIDDEN
passphrase.enter")
pgg-gpg-process-filter(#<process pgg-gpg> "[GNUPG:] USERID_HINT
31A16202F8F7E674 Sascha Wilde <Sascha.Wilde@intevation.de>\n[GNUPG:]
NEED_PASSPHRASE 31A16202F8F7E674 BB2185144BB86568 16 0\n[GNUPG:]
GET_HIDDEN passphrase.enter\n[GNUPG:] GOT_IT\n[GNUPG:]
BAD_PASSPHRASE 31A16202F8F7E674\ngpg: Invalid passphrase; please try
again ...\n[GNUPG:] USERID_HINT 31A16202F8F7E674 Sascha Wilde
<Sascha.Wilde@intevation.de>\n[GNUPG:] NEED_PASSPHRASE
31A16202F8F7E674 BB2185144BB86568 16 0\n[GNUPG:] GET_HIDDEN
passphrase.enter\n[GNUPG:] GOT_IT\n[GNUPG:] BAD_PASSPHRASE
31A16202F8F7E674\ngpg: Invalid passphrase; please try again
...\n[GNUPG:] USERID_HINT 31A16202F8F7E674 Sascha Wilde
<Sascha.Wilde@intevation.de>\n[GNUPG:] NEED_PASSPHRASE
31A16202F8F7E674 BB2185144BB86568 16 0\n[GNUPG:] GET_HIDDEN
passphrase.enter\n[GNUPG:] GOT_IT\n[GNUPG:] BAD_PASSPHRASE
31A16202F8F7E674\n[GNUPG:] ENC_TO xxxxxxxxxxxxxxxx 16 0\ngpg:
encrypted with 1024-bit ELG-E key, ID xxxxxxxx, created 2003-06-24\n
\"xxxxxx xxxxxxxx xxxx <xxxxxx@intevation.de>\"\n[GNUPG:] NO_SECKEY
xxxxxxxxxxxxxxxx\ngpg: encrypted with 2048-bit ELG-E key, ID
F8F7E674, created 2004-11-15\n \"Sascha Wilde
<Sascha.Wilde@intevation.de>\"\ngpg: public key decryption failed:
bad passphrase\n[GNUPG:] BEGIN_DECRYPTION\n[GNUPG:]
DECRYPTION_FAILED\ngpg: decryption failed: secret key not
available\ngpg: CRC error; 3CB1DD - 15B95A\n[GNUPG:]
END_DECRYPTION\n")
Signing mails works (including querying the passphrase).
Might this be related to the latest changes by Daiki?
Sorry I don't have time to investigate this any further right now...
cheers
sascha
--
Sascha Wilde : "Der Nicht-Denkende glaubt, dass niemand denkt,
: der Denkende weiss es!"
: (Gabriel Laub)
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg-gpg broken?
2006-04-05 9:13 ` pgg-gpg broken? Sascha Wilde
@ 2006-04-05 9:42 ` Daiki Ueno
2006-04-05 10:18 ` Sascha Wilde
2006-04-05 16:14 ` pgg-gpg broken? Reiner Steib
1 sibling, 1 reply; 156+ messages in thread
From: Daiki Ueno @ 2006-04-05 9:42 UTC (permalink / raw)
Cc: Simon Josefsson, ding, emacs-devel
>>>>> In <m2k6a4z8or.fsf_-_@kenny.sha-bang.de>
>>>>> Sascha Wilde <wilde@sha-bang.de> wrote:
> I just needed to decrypt an old Mail using Gnus/pgg (which i decrypted
> successfully many times before), but it failed.
> This is the backtrace I get:
> Debugger entered--Lisp error: (error "Process pgg-gpg not running")
> process-send-string(#<process pgg-gpg> "DerDenkendeWeissEs\n")
> pgg-gpg-status-GET_HIDDEN(#<process pgg-gpg> "GET_HIDDEN
> passphrase.enter")
> pgg-gpg-process-filter(#<process pgg-gpg> "[GNUPG:] USERID_HINT
> 31A16202F8F7E674 Sascha Wilde <Sascha.Wilde@intevation.de>\n[GNUPG:]
> NEED_PASSPHRASE 31A16202F8F7E674 BB2185144BB86568 16 0\n[GNUPG:]
> GET_HIDDEN passphrase.enter\n[GNUPG:] GOT_IT\n[GNUPG:]
> BAD_PASSPHRASE 31A16202F8F7E674\ngpg: Invalid passphrase; please try
> again ...\n[GNUPG:] USERID_HINT 31A16202F8F7E674 Sascha Wilde
> Might this be related to the latest changes by Daiki?
The problem might be related to the default-enable-multibyte-characters
issue:
http://article.gmane.org/gmane.emacs.gnus.general/62428
if you are using non-ASCII characters in your passphrase.
Regards,
--
Daiki Ueno
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg-gpg broken?
2006-04-05 9:42 ` Daiki Ueno
@ 2006-04-05 10:18 ` Sascha Wilde
2006-04-05 21:33 ` Daiki Ueno
0 siblings, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2006-04-05 10:18 UTC (permalink / raw)
Cc: Simon Josefsson, ding, emacs-devel
Daiki Ueno <ueno@unixuser.org> wrote:
>>>>>> In <m2k6a4z8or.fsf_-_@kenny.sha-bang.de>
>>>>>> Sascha Wilde <wilde@sha-bang.de> wrote:
>> I just needed to decrypt an old Mail using Gnus/pgg (which i decrypted
>> successfully many times before), but it failed.
>
>> This is the backtrace I get:
>
>> Debugger entered--Lisp error: (error "Process pgg-gpg not running")
>> process-send-string(#<process pgg-gpg> "DerDenkendeWeissEs\n")
>> pgg-gpg-status-GET_HIDDEN(#<process pgg-gpg> "GET_HIDDEN
>> passphrase.enter")
>> pgg-gpg-process-filter(#<process pgg-gpg> "[GNUPG:] USERID_HINT
>> 31A16202F8F7E674 Sascha Wilde <Sascha.Wilde@intevation.de>\n[GNUPG:]
>> NEED_PASSPHRASE 31A16202F8F7E674 BB2185144BB86568 16 0\n[GNUPG:]
>> GET_HIDDEN passphrase.enter\n[GNUPG:] GOT_IT\n[GNUPG:]
>> BAD_PASSPHRASE 31A16202F8F7E674\ngpg: Invalid passphrase; please try
>> again ...\n[GNUPG:] USERID_HINT 31A16202F8F7E674 Sascha Wilde
>
>> Might this be related to the latest changes by Daiki?
>
> The problem might be related to the default-enable-multibyte-characters
> issue:
> http://article.gmane.org/gmane.emacs.gnus.general/62428
> if you are using non-ASCII characters in your passphrase.
No, only plain ASCII.
sascha
--
Sascha Wilde : "Ist es nicht schon schlimm genug, dass ICH hier rumtrolle?"
: (Henning Leise in d.o.c.)
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg-gpg broken?
2006-04-05 9:13 ` pgg-gpg broken? Sascha Wilde
2006-04-05 9:42 ` Daiki Ueno
@ 2006-04-05 16:14 ` Reiner Steib
2006-04-05 19:22 ` Sascha Wilde
1 sibling, 1 reply; 156+ messages in thread
From: Reiner Steib @ 2006-04-05 16:14 UTC (permalink / raw)
Cc: Daiki Ueno, emacs-devel, ding, Simon Josefsson
On Wed, Apr 05 2006, Sascha Wilde wrote:
> I just needed to decrypt an old Mail using Gnus/pgg (which i decrypted
> successfully many times before), but it failed.
[...]
> Signing mails works (including querying the passphrase).
>
> Might this be related to the latest changes by Daiki?
Could you test with `pgg-gpg.el' revision 1.4 from Emacs CVS or
revision 7.11 from Gnus CVS, please?
Bye, Reiner.
--
,,,
(o o)
---ooO-(_)-Ooo--- | PGP key available | http://rsteib.home.pages.de/
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg-gpg broken?
2006-04-05 16:14 ` pgg-gpg broken? Reiner Steib
@ 2006-04-05 19:22 ` Sascha Wilde
0 siblings, 0 replies; 156+ messages in thread
From: Sascha Wilde @ 2006-04-05 19:22 UTC (permalink / raw)
Cc: emacs-devel, ding, Simon Josefsson
Reiner Steib <reinersteib+gmane@imap.cc> wrote:
> On Wed, Apr 05 2006, Sascha Wilde wrote:
>
>> I just needed to decrypt an old Mail using Gnus/pgg (which i decrypted
>> successfully many times before), but it failed.
> [...]
>> Signing mails works (including querying the passphrase).
>>
>> Might this be related to the latest changes by Daiki?
>
> Could you test with `pgg-gpg.el' revision 1.4 from Emacs CVS or
> revision 7.11 from Gnus CVS, please?
I fetched 1.4 from Emacs CVS and it works perfectly well with the mail
in question.
Same holds true for 1.8 from Emacs CVS, which includes my original
version of gpg-agent support, but it stops working with 1.9 -- so it
seems the problem lies withing Daiki's new code...
Some more revelations regarding the problem:
It is somewhat more specific: while I can't decrypt the old mail with
the current pgg-gpg code, I actually can decrypt an fresh test Mail,
which I just send to myself for testing. This matches my observations
about the different versions. I have no idea whats so special about
this one mail (it's encrypted for more than one key, but this is no
problem in other cases...).
cheers
sascha
--
Sascha Wilde : xedit? Das sieht zwar wie vi aus als könne es nix, aber im
: Gegensatz zu vi kann es wirklich nix und nix ist noch geschönt!
: (Michael Core in dafc)
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg-gpg broken?
2006-04-05 10:18 ` Sascha Wilde
@ 2006-04-05 21:33 ` Daiki Ueno
2006-04-06 9:00 ` Sascha Wilde
0 siblings, 1 reply; 156+ messages in thread
From: Daiki Ueno @ 2006-04-05 21:33 UTC (permalink / raw)
Cc: Simon Josefsson, ding, emacs-devel
>>>>> In <m2zmj0xr4x.fsf@kenny.sha-bang.de>
>>>>> Sascha Wilde <wilde@sha-bang.de> wrote:
> Daiki Ueno <ueno@unixuser.org> wrote:
> >>>>>> In <m2k6a4z8or.fsf_-_@kenny.sha-bang.de>
> >>>>>> Sascha Wilde <wilde@sha-bang.de> wrote:
> >> I just needed to decrypt an old Mail using Gnus/pgg (which i decrypted
> >> successfully many times before), but it failed.
> >
> >> This is the backtrace I get:
> >
> >> Debugger entered--Lisp error: (error "Process pgg-gpg not running")
> >> process-send-string(#<process pgg-gpg> "DerDenkendeWeissEs\n")
> >> pgg-gpg-status-GET_HIDDEN(#<process pgg-gpg> "GET_HIDDEN
> >> passphrase.enter")
> >> BAD_PASSPHRASE 31A16202F8F7E674\ngpg: Invalid passphrase; please try
> >> again ...\n[GNUPG:] USERID_HINT 31A16202F8F7E674 Sascha Wilde
> >
> >> Might this be related to the latest changes by Daiki?
> >
> > The problem might be related to the default-enable-multibyte-characters
> > issue:
> > http://article.gmane.org/gmane.emacs.gnus.general/62428
> > if you are using non-ASCII characters in your passphrase.
> No, only plain ASCII.
Two more questions:
1. The passphrase you entered was correct?
2. How many times were you queried your passphrase?
A straightforward way to investigate this problem is decrypting the mail
from the command line as pgg-gpg does. Could you try the following?
$ cat input.txt | gpg --no-tty --status-fd 1 --command-fd 0 --yes \
--output output.txt --decrypt
Regards,
--
Daiki Ueno
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg-gpg broken?
2006-04-05 21:33 ` Daiki Ueno
@ 2006-04-06 9:00 ` Sascha Wilde
2006-04-06 9:21 ` Daiki Ueno
0 siblings, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2006-04-06 9:00 UTC (permalink / raw)
Cc: emacs-devel, ding, Simon Josefsson
Daiki Ueno <ueno@unixuser.org> wrote:
>>>>>> In <m2zmj0xr4x.fsf@kenny.sha-bang.de>
>>>>>> Sascha Wilde <wilde@sha-bang.de> wrote:
>> Daiki Ueno <ueno@unixuser.org> wrote:
>
>> >>>>>> In <m2k6a4z8or.fsf_-_@kenny.sha-bang.de>
>> >>>>>> Sascha Wilde <wilde@sha-bang.de> wrote:
>> >> I just needed to decrypt an old Mail using Gnus/pgg (which i decrypted
>> >> successfully many times before), but it failed.
>> >
>> >> This is the backtrace I get:
>> >
>> >> Debugger entered--Lisp error: (error "Process pgg-gpg not running")
>> >> process-send-string(#<process pgg-gpg> "DerDenkendeWeissEs\n")
>> >> pgg-gpg-status-GET_HIDDEN(#<process pgg-gpg> "GET_HIDDEN
>> >> passphrase.enter")
>> >> BAD_PASSPHRASE 31A16202F8F7E674\ngpg: Invalid passphrase; please try
>> >> again ...\n[GNUPG:] USERID_HINT 31A16202F8F7E674 Sascha Wilde
>> >
>> >> Might this be related to the latest changes by Daiki?
>> >
>> > The problem might be related to the default-enable-multibyte-characters
>> > issue:
>> > http://article.gmane.org/gmane.emacs.gnus.general/62428
>> > if you are using non-ASCII characters in your passphrase.
>
>> No, only plain ASCII.
>
> Two more questions:
>
> 1. The passphrase you entered was correct?
Yes. I tried this _many_ times, and only this mail fails (and only
with your new code).
> 2. How many times were you queried your passphrase?
Once. If the passphrase is already cached (I'm _not_ using the agent
on this system): none. I also encountered the situation of getting
asked over and over again, but I can't reproduce that...
> A straightforward way to investigate this problem is decrypting the mail
> from the command line as pgg-gpg does. Could you try the following?
>
> $ cat input.txt | gpg --no-tty --status-fd 1 --command-fd 0 --yes \
> --output output.txt --decrypt
This doesn't work (it tries to read the passphrase from the pipe, too.
But this works:
gpg --no-tty --status-fd 1 --command-fd 0 --yes \
--output output.txt --decrypt test.msg
Here is the Output:
[GNUPG:] ENC_TO 31A16202F8F7E674 16 0
[GNUPG:] USERID_HINT 31A16202F8F7E674 Sascha Wilde
<Sascha.Wilde@intevation.de>
[GNUPG:] NEED_PASSPHRASE 31A16202F8F7E674 BB2185144BB86568 16 0
[GNUPG:] GET_HIDDEN passphrase.enter
***********************
[GNUPG:] GOT_IT
[GNUPG:] GOOD_PASSPHRASE
[GNUPG:] ENC_TO **************** 16 0
gpg: encrypted with 1024-bit ELG-E key, ID C42134DD, created
2003-06-24
"******** **** <*******@intevation.de>"
[GNUPG:] NO_SECKEY ****************
gpg: encrypted with 2048-bit ELG-E key, ID F8F7E674, created
2004-11-15
"Sascha Wilde <Sascha.Wilde@intevation.de>"
[GNUPG:] BEGIN_DECRYPTION
[GNUPG:] PLAINTEXT 74 1143202578 mutt-eukrante-10004-12773-1220
gpg: Signature made Fre 24 Mr 2006 13:16:19 CET using DSA key ID
********
[GNUPG:] SIG_ID AfiFfg5+XNFF741BR7ts3MOF6ds 2006-03-24 1143202579
[GNUPG:] GOODSIG **************** ******** ****
<******@intevation.de>
gpg: Good signature from "******** **** <*******@intevation.de>"
gpg: aka "******** **** ***** <*******.********@intevation.de>"
[GNUPG:] VALIDSIG 53D27A45B9AD27915EE44EDE5BB3F5195816791A 2006-03-24
1143202579 0 3 0 17 2 01 53D27A45B9AD27915EE44EDE5BB3F5195816791A
[GNUPG:] TRUST_FULLY
[GNUPG:] DECRYPTION_OKAY
[GNUPG:] GOODMDC
[GNUPG:] END_DECRYPTION
As you can see: everything worked well...
BUT, doing more tests, things became more and more strange:
I tried
gpg --no-tty --status-fd 1 --command-fd 0 --yes \
--output output.txt --decrypt
And pasted in the message using copy and paste, then I got this error:
gpg: CRC error; 6E24DE - 15B95A
[GNUPG:] END_DECRYPTION
So I set pgg-gpg-debug to t and found the same error.
Even more strange, when using the gpg-agent
gpg --no-tty --status-fd 1 --command-fd 0 --yes \
--output output.txt --decrypt <test.msg
works fine, while decryption using the agent + pgg-gpg just hangs...
cheers
sascha
--
Sascha Wilde : "Der Nicht-Denkende glaubt, dass niemand denkt,
: der Denkende weiss es!"
: (Gabriel Laub)
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg-gpg broken?
2006-04-06 9:00 ` Sascha Wilde
@ 2006-04-06 9:21 ` Daiki Ueno
2006-04-06 9:58 ` Sascha Wilde
0 siblings, 1 reply; 156+ messages in thread
From: Daiki Ueno @ 2006-04-06 9:21 UTC (permalink / raw)
Cc: Simon Josefsson, ding, emacs-devel
>>>>> In <m21wwbcc46.fsf@kenny.sha-bang.de>
>>>>> Sascha Wilde <wilde@sha-bang.de> wrote:
> > A straightforward way to investigate this problem is decrypting the mail
> > from the command line as pgg-gpg does. Could you try the following?
> >
> > $ cat input.txt | gpg --no-tty --status-fd 1 --command-fd 0 --yes \
> > --output output.txt --decrypt
> This doesn't work (it tries to read the passphrase from the pipe, too.
As I said in the private mail, this is because the pipe is closed after
cat exits. Could you try this one and see if gpg waits after "[GNUPG:]
GET_HIDDEN passphrase.enter"?
$ (cat test.msg; sleep 10) | gpg --no-tty --status-fd 1 --command-fd 0 --yes \
--output output.txt --decrypt
Regards,
--
Daiki Ueno
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg-gpg broken?
2006-04-06 9:21 ` Daiki Ueno
@ 2006-04-06 9:58 ` Sascha Wilde
2006-04-06 10:13 ` Daiki Ueno
2006-04-07 10:32 ` gpg-agent support removed?! (was: pgg-gpg broken?) Sascha Wilde
0 siblings, 2 replies; 156+ messages in thread
From: Sascha Wilde @ 2006-04-06 9:58 UTC (permalink / raw)
Cc: Simon Josefsson, ding, emacs-devel
Daiki Ueno <ueno@unixuser.org> wrote:
>>>>>> In <m21wwbcc46.fsf@kenny.sha-bang.de>
>>>>>> Sascha Wilde <wilde@sha-bang.de> wrote:
>> > A straightforward way to investigate this problem is decrypting the mail
>> > from the command line as pgg-gpg does. Could you try the following?
>> >
>> > $ cat input.txt | gpg --no-tty --status-fd 1 --command-fd 0 --yes \
>> > --output output.txt --decrypt
>
>> This doesn't work (it tries to read the passphrase from the pipe, too.
>
> As I said in the private mail, this is because the pipe is closed after
> cat exits. Could you try this one and see if gpg waits after "[GNUPG:]
> GET_HIDDEN passphrase.enter"?
>
> $ (cat test.msg; sleep 10) | gpg --no-tty --status-fd 1 --command-fd 0 --yes \
> --output output.txt --decrypt
No, it doesn't -- here is what happens
(thomas agreed with posting this information, so no more '*'s):
(cat test.msg; sleep 10) | gpg --no-tty --status-fd 1 --command-fd 0 --yes \
--output output.txt --decrypt
[GNUPG:] ENC_TO 31A16202F8F7E674 16 0
[GNUPG:] USERID_HINT 31A16202F8F7E674 Sascha Wilde <Sascha.Wilde@intevation.de>
[GNUPG:] NEED_PASSPHRASE 31A16202F8F7E674 BB2185144BB86568 16 0
[GNUPG:] GET_HIDDEN passphrase.enter
[GNUPG:] GOT_IT
[GNUPG:] BAD_PASSPHRASE 31A16202F8F7E674
gpg: Invalid passphrase; please try again ...
[GNUPG:] USERID_HINT 31A16202F8F7E674 Sascha Wilde <Sascha.Wilde@intevation.de>
[GNUPG:] NEED_PASSPHRASE 31A16202F8F7E674 BB2185144BB86568 16 0
[GNUPG:] GET_HIDDEN passphrase.enter
[GNUPG:] GOT_IT
[GNUPG:] BAD_PASSPHRASE 31A16202F8F7E674
gpg: Invalid passphrase; please try again ...
[GNUPG:] USERID_HINT 31A16202F8F7E674 Sascha Wilde <Sascha.Wilde@intevation.de>
[GNUPG:] NEED_PASSPHRASE 31A16202F8F7E674 BB2185144BB86568 16 0
[GNUPG:] GET_HIDDEN passphrase.enter
[GNUPG:] GOT_IT
[GNUPG:] BAD_PASSPHRASE 31A16202F8F7E674
[GNUPG:] ENC_TO 8699BF5FC42134DD 16 0
gpg: encrypted with 1024-bit ELG-E key, ID C42134DD, created 2003-06-24
"Thomas Arendsen Hein <thomas@intevation.de>"
[GNUPG:] NO_SECKEY 8699BF5FC42134DD
gpg: encrypted with 2048-bit ELG-E key, ID F8F7E674, created 2004-11-15
"Sascha Wilde <Sascha.Wilde@intevation.de>"
gpg: public key decryption failed: bad passphrase
[GNUPG:] BEGIN_DECRYPTION
[GNUPG:] DECRYPTION_FAILED
gpg: decryption failed: secret key not available
gpg: CRC error; 474D93 - 15B95A
[GNUPG:] END_DECRYPTION
is seems that gpg detects the end early and uses the rest of the
message as passphrase, which of cause fails...
So either the PGP Message is malformed, or that there is a
bug in gpg.
In either case, I don't understand why
gpg --no-tty --status-fd 1 --command-fd 0 --yes \
--output output.txt --decrypt test.msg
works without any error:
[GNUPG:] ENC_TO 31A16202F8F7E674 16 0
[GNUPG:] USERID_HINT 31A16202F8F7E674 Sascha Wilde <Sascha.Wilde@intevation.de>
[GNUPG:] NEED_PASSPHRASE 31A16202F8F7E674 BB2185144BB86568 16 0
[GNUPG:] GET_HIDDEN passphrase.enter
*************************
[GNUPG:] GOT_IT
[GNUPG:] GOOD_PASSPHRASE
[GNUPG:] ENC_TO 8699BF5FC42134DD 16 0
gpg: encrypted with 1024-bit ELG-E key, ID C42134DD, created 2003-06-24
"Thomas Arendsen Hein <thomas@intevation.de>"
[GNUPG:] NO_SECKEY 8699BF5FC42134DD
gpg: encrypted with 2048-bit ELG-E key, ID F8F7E674, created 2004-11-15
"Sascha Wilde <Sascha.Wilde@intevation.de>"
[GNUPG:] BEGIN_DECRYPTION
[GNUPG:] PLAINTEXT 74 1143202578 mutt-eukrante-10004-12773-1220
gpg: Signature made Fre 24 Mr 2006 13:16:19 CET using DSA key ID 5816791A
[GNUPG:] SIG_ID AfiFfg5+XNFF741BR7ts3MOF6ds 2006-03-24 1143202579
[GNUPG:] GOODSIG 5BB3F5195816791A Thomas Arendsen Hein <thomas@intevation.de>
gpg: Good signature from "Thomas Arendsen Hein <thomas@intevation.de>"
gpg: aka "Thomas Arendsen Hein (private) <thomas@jtah.de>"
gpg: aka "Thomas Arendsen Hein <Thomas.Arendsen.Hein@intevation. de>"
[GNUPG:] VALIDSIG 53D27A45B9AD27915EE44EDE5BB3F5195816791A 2006-03-24 1143202579 0 3 0 17 2 01 53D27A45B9AD27915EE44EDE5BB3F5195816791A
[GNUPG:] TRUST_FULLY
[GNUPG:] DECRYPTION_OKAY
[GNUPG:] GOODMDC
[GNUPG:] END_DECRYPTION
cheers
--
Sascha Wilde
A conclusion is simply the place where someone got tired of thinking.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: pgg-gpg broken?
2006-04-06 9:58 ` Sascha Wilde
@ 2006-04-06 10:13 ` Daiki Ueno
2006-04-07 10:32 ` gpg-agent support removed?! (was: pgg-gpg broken?) Sascha Wilde
1 sibling, 0 replies; 156+ messages in thread
From: Daiki Ueno @ 2006-04-06 10:13 UTC (permalink / raw)
Cc: emacs-devel, ding, Simon Josefsson
>>>>> In <m2y7yjdo02.fsf@kenny.sha-bang.de>
>>>>> Sascha Wilde <wilde@sha-bang.de> wrote:
> Daiki Ueno <ueno@unixuser.org> wrote:
> > As I said in the private mail, this is because the pipe is closed after
> > cat exits. Could you try this one and see if gpg waits after "[GNUPG:]
> > GET_HIDDEN passphrase.enter"?
> >
> > $ (cat test.msg; sleep 10) | gpg --no-tty --status-fd 1 --command-fd 0 --yes \
> > --output output.txt --decrypt
> No, it doesn't -- here is what happens
> is seems that gpg detects the end early and uses the rest of the
> message as passphrase, which of cause fails...
If you have pgpdump installed, you will see what packets are read from
the message.
Anyway, I'll try to change pgg-gpg-decrypt-region to read a PGP message
from a temporary file. Thanks for testing!
Regards,
--
Daiki Ueno
^ permalink raw reply [flat|nested] 156+ messages in thread
* gpg-agent support removed?! (was: pgg-gpg broken?)
2006-04-06 9:58 ` Sascha Wilde
2006-04-06 10:13 ` Daiki Ueno
@ 2006-04-07 10:32 ` Sascha Wilde
2006-04-07 12:11 ` Simon Josefsson
` (2 more replies)
1 sibling, 3 replies; 156+ messages in thread
From: Sascha Wilde @ 2006-04-07 10:32 UTC (permalink / raw)
Cc: Daiki Ueno, emacs-devel, Reiner Steib, ding, Simon Josefsson
Hi *,
after noticing, that the broken mail con suddenly be decrypted again I
checked the changelog and found this entry:
2006-04-06 Romain Francoise <romain@orebokech.com>
* pgg-gpg.el: Sync back with Gnus 5.10, reverting changes that add
symmetric encryption features and a new asynchronous interface to
GnuPG. This new version is version 1.4, plus whitespace changes.
why was that done?! And why was it done without any discussion or
even informing the people involved?!?
sascha
--
Sascha Wilde : "I heard that if you play the Windows CD backward, you
: get a satanic message. But that's nothing compared to
: when you play it forward: It installs Windows...."
: -- G. R. Gaudreau
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?! (was: pgg-gpg broken?)
2006-04-07 10:32 ` gpg-agent support removed?! (was: pgg-gpg broken?) Sascha Wilde
@ 2006-04-07 12:11 ` Simon Josefsson
2006-04-07 12:14 ` gpg-agent support removed?! Romain Francoise
2006-04-07 12:35 ` Reiner Steib
2 siblings, 0 replies; 156+ messages in thread
From: Simon Josefsson @ 2006-04-07 12:11 UTC (permalink / raw)
Cc: Daiki Ueno, romain, Reiner Steib, ding, emacs-devel
> Hi *,
>
> after noticing, that the broken mail con suddenly be decrypted again I
> checked the changelog and found this entry:
>
> 2006-04-06 Romain Francoise <romain@orebokech.com>
>
> * pgg-gpg.el: Sync back with Gnus 5.10, reverting changes that
> add
> symmetric encryption features and a new asynchronous interface to
> GnuPG. This new version is version 1.4, plus whitespace changes.
>
> why was that done?! And why was it done without any discussion or
> even informing the people involved?!?
I thought all discussions about this were kept on the mailing list? Maybe
check the ding list, perhaps emacs-devel was removed at some point.
I think we decided to back out Daiki's asynchronous interface, because it
is too much new code and we need to have people use it for a while and
work out the problems (on the Gnus CVS trunk). Perhaps Romain backed out
more than that? I think we should revert to the pgg-gpg.el right before
adding Daiki's partial rewrite. The symmetric stuff, and the more recent
addition of the pgg-gpg-use-agent variable should be fine.
I don't have a workable internet connection, and I'm going away on holiday
tomorrow, so I hope others can help work out the details, or wait 10 days.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-07 10:32 ` gpg-agent support removed?! (was: pgg-gpg broken?) Sascha Wilde
2006-04-07 12:11 ` Simon Josefsson
@ 2006-04-07 12:14 ` Romain Francoise
2006-04-07 13:00 ` Sascha Wilde
2006-04-07 12:35 ` Reiner Steib
2 siblings, 1 reply; 156+ messages in thread
From: Romain Francoise @ 2006-04-07 12:14 UTC (permalink / raw)
Cc: Daiki Ueno, emacs-devel, Reiner Steib, ding, Simon Josefsson
Sascha Wilde <wilde@sha-bang.de> writes:
> And why was it done without any discussion or even informing the
> people involved?!?
Since PGG is historically a Gnus package, it was discussed on the ding
mailing-list, which you obviously don't read... :-)
The relevant sub-thread starts here:
<URL: http://article.gmane.org/gmane.emacs.gnus.general/62545>
The reasons why this was done are:
1) The new code has bugs and is a major rewrite from previous versions;
it isn't yet very stable, at least not enough for a stable Gnus
release.
2) A new Gnus v5.10 release is due out this week-end, so there wasn't
enough time to fix the bugs in the new code, hence the decision to
revert it in Gnus 5.10. Since Emacs 22 is supposed to have Gnus
5.10, I reverted the changes in Emacs CVS in order to keep the
upcoming Gnus release and Emacs in sync.
3) The changes broke allout.el's encryption features, and require a
transition to ensure that allout and PGG can work correctly together
without breakage.
4) We're trying to get Emacs to a releasable state, and introducing new
features right now might not be the best idea, depending on how
seriously you take the feature freeze.
At the moment, the plan is to let the new code mature in the Gnus trunk
(not the Emacs trunk), and then sync it back in Gnus' v5-10 branch and
the Emacs trunk once things have settled down. I realize that part of
the problem is that PGG is maintained as a Gnus package in Gnus, and as
a general-purpose package in Emacs...
Hoping this clarifies the situation,
--
Romain Francoise <romain@orebokech.com> | The sea! the sea! the open
it's a miracle -- http://orebokech.com/ | sea! The blue, the fresh, the
| ever free! --Bryan W. Procter
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-07 10:32 ` gpg-agent support removed?! (was: pgg-gpg broken?) Sascha Wilde
2006-04-07 12:11 ` Simon Josefsson
2006-04-07 12:14 ` gpg-agent support removed?! Romain Francoise
@ 2006-04-07 12:35 ` Reiner Steib
2006-04-07 13:02 ` Daiki Ueno
2006-04-07 21:36 ` Richard Stallman
2 siblings, 2 replies; 156+ messages in thread
From: Reiner Steib @ 2006-04-07 12:35 UTC (permalink / raw)
Cc: Simon Josefsson, Daiki Ueno, romain, ding, emacs-devel
On Fri, Apr 07 2006, Sascha Wilde wrote:
> 2006-04-06 Romain Francoise <romain@orebokech.com>
>
> * pgg-gpg.el: Sync back with Gnus 5.10, reverting changes that add
> symmetric encryption features and a new asynchronous interface to
> GnuPG. This new version is version 1.4, plus whitespace changes.
>
> why was that done?! And why was it done without any discussion or
> even informing the people involved?!?
Let me try to summarize (CMIIW):
There were several unresolved serious problems¹ (including your
report) with the new code. So for the upcoming release of Gnus 5.10.8
we (Simon and me) agreed to revert `pgg-gpg.el' in the stable Gnus
branch (v5-10).
Simon's advised on keeping the new code in the Gnus trunk, so I
followed his suggestion. I didn't have a strong option on what is
best for the version² in Emacs CVS, so I didn't touch it. IIRC Simon
didn't express an opinion concerning this version neither. Probably
Romain thought that the problems with the new code are too serious
also for Emacs CVS.
After the Gnus 5.10.8 release (which should be this week-end unless
Lars needs to shift it) we can put the new code plus Daiki's fixes
posted today back in all three branches.
Bye, Reiner.
¹ Unresolved serious problems with the new code in `pgg-gpg.el':
http://article.gmane.org/gmane.emacs.pretest.bugs/11591
http://article.gmane.org/gmane.emacs.devel/52450
http://article.gmane.org/gmane.emacs.gnus.general/62567
Maybe more? I don't remember exactly.
² Normally the version in Emacs CVS and Gnus stable (v5-10) are and
should be synched (semi-)automatically by Miles Bader. Because of
the upcoming stable Gnus release, I asked Miles suspend it until
Gnus 5.10.8 is released.
--
,,,
(o o)
---ooO-(_)-Ooo--- | PGP key available | http://rsteib.home.pages.de/
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-07 12:14 ` gpg-agent support removed?! Romain Francoise
@ 2006-04-07 13:00 ` Sascha Wilde
2006-04-07 13:30 ` Simon Josefsson
2006-04-08 9:36 ` Romain Francoise
0 siblings, 2 replies; 156+ messages in thread
From: Sascha Wilde @ 2006-04-07 13:00 UTC (permalink / raw)
Cc: Daiki Ueno, emacs-devel, Reiner Steib, ding, Simon Josefsson
Romain Francoise <romain@orebokech.com> wrote:
> Sascha Wilde <wilde@sha-bang.de> writes:
>
>> And why was it done without any discussion or even informing the
>> people involved?!?
>
> Since PGG is historically a Gnus package, it was discussed on the ding
> mailing-list, which you obviously don't read... :-)
That's true, so please CC me at any response.
(at least if it doesn't go too emacs-devel, too).
Thanks to everybody for summarizing the discussion.
May I suggest to revert the code to version 1.8 from GNU Emacs CVS instead?
This version includes my original agent support code and Reiners small
compatibility fix.
I would prefer this version because it:
- allow using the agent
- but only if enabled explicitly by the user, so the default behavior
is completely unchanged compared to the old code
- introduces only very few code changes, with no known bugs
- has none of the problems of Daikis code regarding robustness
or api changes
IIRC this version was already discussed and accepted for 5.10.
cheers
sascha
--
Sascha Wilde
Well, *my* brain likes to think it's vastly more powerful than any
finite Turing machine but it hasn't proven that to me...
-- Christopher Koppler in comp.lang.lisp
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-07 12:35 ` Reiner Steib
@ 2006-04-07 13:02 ` Daiki Ueno
2006-04-07 13:08 ` Sascha Wilde
2006-04-07 14:05 ` Thomas Baumann
2006-04-07 21:36 ` Richard Stallman
1 sibling, 2 replies; 156+ messages in thread
From: Daiki Ueno @ 2006-04-07 13:02 UTC (permalink / raw)
Cc: Sascha Wilde, Simon Josefsson, romain, ding, emacs-devel
>>>>> In <v9lkuhd0mv.fsf@marauder.physik.uni-ulm.de>
>>>>> Reiner Steib <reinersteib+gmane@imap.cc> wrote:
> ¹ Unresolved serious problems with the new code in `pgg-gpg.el':
> http://article.gmane.org/gmane.emacs.pretest.bugs/11591
Sorry, I didn't read emacs-pretest-bug. Thomas, could you tell me what
happened more precisely? i.e. (setq debug-on-error t) and (setq
pgg-gpg-debug t)
> http://article.gmane.org/gmane.emacs.devel/52450
I think this is fixed by the patch I posted some time ago.
http://article.gmane.org/gmane.emacs.gnus.general/62571
> http://article.gmane.org/gmane.emacs.gnus.general/62567
I hope that this should be fixed in the right way, not in the way such
as just reversion. So to say, this is a bug of *allout.el* and not of
PGG, I think.
Regards,
--
Daiki Ueno
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-07 13:02 ` Daiki Ueno
@ 2006-04-07 13:08 ` Sascha Wilde
2006-04-07 13:26 ` Daiki Ueno
2006-04-07 13:40 ` Reiner Steib
2006-04-07 14:05 ` Thomas Baumann
1 sibling, 2 replies; 156+ messages in thread
From: Sascha Wilde @ 2006-04-07 13:08 UTC (permalink / raw)
Cc: Reiner Steib, Thomas Baumann, romain, emacs-devel, ding,
Simon Josefsson
Daiki Ueno <ueno@unixuser.org> wrote:
>>>>>> In <v9lkuhd0mv.fsf@marauder.physik.uni-ulm.de>
>>>>>> Reiner Steib <reinersteib+gmane@imap.cc> wrote:
>> http://article.gmane.org/gmane.emacs.devel/52450
>
> I think this is fixed by the patch I posted some time ago.
> http://article.gmane.org/gmane.emacs.gnus.general/62571
This sounds interesting -- where can I get this version for testing?
--
Sascha Wilde
We're Germans and we use Unix. That's a combination of two
demographic groups known to have no sense of humour whatsoever.
-- Hanno Mueller in de.comp.os.unix.programming
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-07 13:08 ` Sascha Wilde
@ 2006-04-07 13:26 ` Daiki Ueno
2006-04-09 16:04 ` Sascha Wilde
2006-04-07 13:40 ` Reiner Steib
1 sibling, 1 reply; 156+ messages in thread
From: Daiki Ueno @ 2006-04-07 13:26 UTC (permalink / raw)
Cc: Reiner Steib, Thomas Baumann, romain, emacs-devel, ding,
Simon Josefsson
>>>>> In <m2lkuhcz2y.fsf@kenny.sha-bang.de>
>>>>> Sascha Wilde <wilde@sha-bang.de> wrote:
> >> http://article.gmane.org/gmane.emacs.devel/52450
> >
> > I think this is fixed by the patch I posted some time ago.
> > http://article.gmane.org/gmane.emacs.gnus.general/62571
> This sounds interesting -- where can I get this version for testing?
I put the tarball which contains the current pgg*.el at
http://www.unixuser.org/~ueno/pgg-20060407.tar.gz
Regards,
--
Daiki Ueno
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-07 13:00 ` Sascha Wilde
@ 2006-04-07 13:30 ` Simon Josefsson
2006-04-07 20:59 ` Reiner Steib
2006-04-08 9:36 ` Romain Francoise
1 sibling, 1 reply; 156+ messages in thread
From: Simon Josefsson @ 2006-04-07 13:30 UTC (permalink / raw)
Cc: Daiki Ueno, Romain Francoise, Reiner Steib, ding, emacs-devel
> May I suggest to revert the code to version 1.8 from GNU Emacs CVS
> instead?
>
> This version includes my original agent support code and Reiners small
> compatibility fix.
>
> I would prefer this version because it:
> - allow using the agent
> - but only if enabled explicitly by the user, so the default behavior
> is completely unchanged compared to the old code
> - introduces only very few code changes, with no known bugs
> - has none of the problems of Daikis code regarding robustness
> or api changes
>
> IIRC this version was already discussed and accepted for 5.10.
I agree, we shouldn't revert more than Daiki's asynchronous stuff in
v5-10/Emacs CVS.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-07 13:08 ` Sascha Wilde
2006-04-07 13:26 ` Daiki Ueno
@ 2006-04-07 13:40 ` Reiner Steib
1 sibling, 0 replies; 156+ messages in thread
From: Reiner Steib @ 2006-04-07 13:40 UTC (permalink / raw)
Cc: Daiki Ueno, ding, emacs-devel
[-- Attachment #1.1: Type: text/plain, Size: 1115 bytes --]
[ Reducing Cc list ]
On Fri, Apr 07 2006, Sascha Wilde wrote:
> Daiki Ueno <ueno@unixuser.org> wrote:
>
>>>>>>> In <v9lkuhd0mv.fsf@marauder.physik.uni-ulm.de>
>>>>>>> Reiner Steib <reinersteib+gmane@imap.cc> wrote:
>
>>> http://article.gmane.org/gmane.emacs.devel/52450
>>
>> I think this is fixed by the patch I posted some time ago.
>> http://article.gmane.org/gmane.emacs.gnus.general/62571
,----
| RCS file: /usr/local/cvsroot/gnus/lisp/pgg-gpg.el,v
| retrieving revision 7.22
| diff -u -r7.22 pgg-gpg.el
| --- lisp/pgg-gpg.el 5 Apr 2006 12:57:22 -0000 7.22
| +++ lisp/pgg-gpg.el 7 Apr 2006 08:07:26 -0000
`----
So this is a patch against the Gnus trunk (revision 7.22)
> This sounds interesting -- where can I get this version for testing?
$ cvs -d :pserver:gnus@cvs.gnus.org:/usr/local/cvsroot login
CVS password: gnus
$ cvs -d :pserver:gnus@cvs.gnus.org:/usr/local/cvsroot checkout gnus/lisp/pgg-gpg.el
(cf. http://www.gnus.org/distribution.html)
Bye, Reiner.
--
,,,
(o o)
---ooO-(_)-Ooo--- | PGP key available | http://rsteib.home.pages.de/
[-- Attachment #1.2: Type: application/pgp-signature, Size: 188 bytes --]
[-- Attachment #2: Type: text/plain, Size: 142 bytes --]
_______________________________________________
Emacs-devel mailing list
Emacs-devel@gnu.org
http://lists.gnu.org/mailman/listinfo/emacs-devel
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-07 13:02 ` Daiki Ueno
2006-04-07 13:08 ` Sascha Wilde
@ 2006-04-07 14:05 ` Thomas Baumann
2006-04-07 14:40 ` Daiki Ueno
1 sibling, 1 reply; 156+ messages in thread
From: Thomas Baumann @ 2006-04-07 14:05 UTC (permalink / raw)
Cc: Reiner Steib, Sascha Wilde, romain, emacs-devel, ding,
Simon Josefsson
GNU Emacs 22.0.50.1 (i686-suse-linux-gnu, X toolkit, Xaw3d scroll bars)
of 2006-04-05 on norvel
gpg (GnuPG) 1.4.2
Description:
I write an email to be signed.
From: Thomas Baumann <thomas.baumann@ch.tum.de>
To: tb
cc:
Subject: sign
X-Mailer: MH-E 7.93+cvs; nmh 1.2; GNU Emacs 22.0.50.1
Reply-To: thomas.baumann@ch.tum.de
--------
<#secure method=pgpmime mode=sign sender=AE757F32>
Test
after C-cC-c emacs waits for something endlessly....
backtrace
Debugger entered--Lisp error: (quit)
accept-process-output(#<process pgg-gpg<4>> 1)
pgg-gpg-wait-for-status(#<process pgg-gpg<4>> ("BEGIN_SIGNING"))
pgg-gpg-sign-region(1 7 nil nil)
funcall(pgg-gpg-sign-region 1 7 nil nil)
apply(funcall pgg-gpg-sign-region (1 7 nil nil))
pgg-invoke("sign-region" gpg 1 7 nil nil)
pgg-sign-region(1 7)
mml2015-pgg-sign((part (sign . "pgpmime") (sender . "AE757F32") (tag-location . 173) (contents . "Test\n")))
mml2015-sign((part (sign . "pgpmime") (sender . "AE757F32") (tag-location . 173) (contents . "Test\n")))
mml-pgpmime-sign-buffer((part (sign . "pgpmime") (sender . "AE757F32") (tag-location . 173) (contents . "Test\n")))
mml-generate-mime-1((part (sign . "pgpmime") (sender . "AE757F32") (tag-location . 173) (contents . "Test\n")))
mml-generate-mime()
message-encode-message-body()
mml-to-mime()
(condition-case err (mml-to-mime) (error (with-current-buffer buffer ... ... ...) (error ...)))
(let ((saved-text ...) (buffer ...) (modified-flag ...)) (condition-case err (mml-to-mime) (error ... ...)))
mh-mml-to-mime()
mh-send-letter(nil)
call-interactively(mh-send-letter)
Things are ok if I the following version of pgg-gpg.el
-rw-r--r-- 1 tb users 13819 Feb 10 07:33 pgg-gpg.el
With todays cvs signing does work, but checking the signatures won't
work any more.
open an email with signature
[mouse-1] on [[PGP Signed Part:Undecided]]
= everything between [[PGP Signed Part:Undecided]] and [[End of PGP
Signed Part]] disappears and there is no change to the buttons....
again this works with pgg-gpg from February...
Thomas
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-07 14:05 ` Thomas Baumann
@ 2006-04-07 14:40 ` Daiki Ueno
2006-04-07 15:45 ` Reiner Steib
0 siblings, 1 reply; 156+ messages in thread
From: Daiki Ueno @ 2006-04-07 14:40 UTC (permalink / raw)
Cc: Reiner Steib, Sascha Wilde, romain, ding, emacs-devel,
Simon Josefsson
>>>>> In <25746.1144418743@norvel.baumann-gauting.site>
>>>>> Thomas Baumann <thomas.baumann@ch.tum.de> wrote:
Thanks for testing again, Thomas.
> Debugger entered--Lisp error: (quit)
> accept-process-output(#<process pgg-gpg<4>> 1)
> pgg-gpg-wait-for-status(#<process pgg-gpg<4>> ("BEGIN_SIGNING"))
Looks odd. I think that the code which waits only for "BEGIN_SIGNING"
has not ever been incorporated in Gnus CVS.
> Things are ok if I the following version of pgg-gpg.el
> -rw-r--r-- 1 tb users 13819 Feb 10 07:33 pgg-gpg.el
Could you tell me what version did you test the above?
Regards,
--
Daiki Ueno
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-07 14:40 ` Daiki Ueno
@ 2006-04-07 15:45 ` Reiner Steib
2006-04-07 20:55 ` Daiki Ueno
0 siblings, 1 reply; 156+ messages in thread
From: Reiner Steib @ 2006-04-07 15:45 UTC (permalink / raw)
Cc: thomas.baumann, ding, emacs-devel
[ Reducing Cc list ]
On Fri, Apr 07 2006, Daiki Ueno wrote:
>>>>>> In <25746.1144418743@norvel.baumann-gauting.site>
>>>>>> Thomas Baumann <thomas.baumann@ch.tum.de> wrote:
>> Debugger entered--Lisp error: (quit)
>> accept-process-output(#<process pgg-gpg<4>> 1)
>> pgg-gpg-wait-for-status(#<process pgg-gpg<4>> ("BEGIN_SIGNING"))
>
> Looks odd. I think that the code which waits only for "BEGIN_SIGNING"
> has not ever been incorporated in Gnus CVS.
| X-Mailer: MH-E 7.93+cvs; nmh 1.2; GNU Emacs 22.0.50.1
MH-E uses the MIME stuff from Gnus, but Thomas is using MH-E from
Emacs CVS.
Bye, Reiner.
--
,,,
(o o)
---ooO-(_)-Ooo--- | PGP key available | http://rsteib.home.pages.de/
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-07 15:45 ` Reiner Steib
@ 2006-04-07 20:55 ` Daiki Ueno
2006-04-07 21:22 ` Reiner Steib
0 siblings, 1 reply; 156+ messages in thread
From: Daiki Ueno @ 2006-04-07 20:55 UTC (permalink / raw)
Cc: thomas.baumann, ding, emacs-devel
>>>>> In <v97j61crtc.fsf@marauder.physik.uni-ulm.de>
>>>>> Reiner Steib <reinersteib+gmane@imap.cc> wrote:
> >>>>>> In <25746.1144418743@norvel.baumann-gauting.site>
> >>>>>> Thomas Baumann <thomas.baumann@ch.tum.de> wrote:
> >> Debugger entered--Lisp error: (quit)
> >> accept-process-output(#<process pgg-gpg<4>> 1)
> >> pgg-gpg-wait-for-status(#<process pgg-gpg<4>> ("BEGIN_SIGNING"))
> >
> > Looks odd. I think that the code which waits only for "BEGIN_SIGNING"
> > has not ever been incorporated in Gnus CVS.
> | X-Mailer: MH-E 7.93+cvs; nmh 1.2; GNU Emacs 22.0.50.1
> MH-E uses the MIME stuff from Gnus, but Thomas is using MH-E from
> Emacs CVS.
Did someone mistakenly installed the first BEGIN_SIGNING patch to Emacs
CVS, while it has not been commited in Gnus CVS? Simon vetoed it
because it does _not_ work with the earlier GnuPG versions than 1.4.3.
http://article.gmane.org/gmane.emacs.gnus.general/62513
http://article.gmane.org/gmane.emacs.gnus.general/62514
Regards,
--
Daiki Ueno
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-07 13:30 ` Simon Josefsson
@ 2006-04-07 20:59 ` Reiner Steib
0 siblings, 0 replies; 156+ messages in thread
From: Reiner Steib @ 2006-04-07 20:59 UTC (permalink / raw)
Cc: Romain Francoise, Reiner Steib, Sascha Wilde, Daiki Ueno, ding,
emacs-devel
On Fri, Apr 07 2006, Simon Josefsson wrote:
>> May I suggest to revert the code to version 1.8 from GNU Emacs CVS
>> instead?
>>
>> This version includes my original agent support code and Reiners small
>> compatibility fix.
>>
>> I would prefer this version because it:
>> - allow using the agent
>> - but only if enabled explicitly by the user, so the default behavior
>> is completely unchanged compared to the old code
>> - introduces only very few code changes, with no known bugs
>> - has none of the problems of Daikis code regarding robustness
>> or api changes
>>
>> IIRC this version was already discussed and accepted for 5.10.
>
> I agree, we shouldn't revert more than Daiki's asynchronous stuff in
> v5-10/Emacs CVS.
Okay, I'll do this (revision 7.15 in Gnus).
Bye, Reiner.
--
,,,
(o o)
---ooO-(_)-Ooo--- | PGP key available | http://rsteib.home.pages.de/
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-07 20:55 ` Daiki Ueno
@ 2006-04-07 21:22 ` Reiner Steib
2006-04-08 7:03 ` Thomas Baumann
2006-04-08 10:18 ` Daiki Ueno
0 siblings, 2 replies; 156+ messages in thread
From: Reiner Steib @ 2006-04-07 21:22 UTC (permalink / raw)
Cc: thomas.baumann, ding, emacs-devel
On Fri, Apr 07 2006, Daiki Ueno wrote:
>>>>>> Reiner Steib <reinersteib+gmane@imap.cc> wrote:
>> > Looks odd. I think that the code which waits only for "BEGIN_SIGNING"
>> > has not ever been incorporated in Gnus CVS.
>
>> | X-Mailer: MH-E 7.93+cvs; nmh 1.2; GNU Emacs 22.0.50.1
>
>> MH-E uses the MIME stuff from Gnus, but Thomas is using MH-E from
>> Emacs CVS.
>
> Did someone mistakenly installed the first BEGIN_SIGNING patch to Emacs
> CVS, while it has not been commited in Gnus CVS?
----------------------------
revision 1.13
date: 2006-04-05 11:00:11 +0000; author: jas; state: Exp; lines: +2 -2
2006-04-05 Daiki Ueno <ueno@unixuser.org>
* pgg-gpg.el (pgg-gpg-encrypt-region, pgg-gpg-sign-region): Wait
for BEGIN_SIGNING too, new in GnuPG 1.4.3.
----------------------------
> Simon vetoed it because it does _not_ work with the earlier GnuPG
> versions than 1.4.3.
AFAICS, Simon installed a modified version:
--8<---------------cut here---------------start------------->8---
--- pgg-gpg.el 4 Apr 2006 23:30:02 -0000 1.12
+++ pgg-gpg.el 5 Apr 2006 11:00:11 -0000 1.13
@@ -256,7 +256,7 @@
(list pgg-gpg-user-id))))))))
(process (pgg-gpg-start-process args)))
(if (and sign (not pgg-gpg-use-agent))
- (pgg-gpg-wait-for-status process '("GOOD_PASSPHRASE")))
+ (pgg-gpg-wait-for-status process '("BEGIN_SIGNING" "GOOD_PASSPHRASE")))
(process-send-region process start end)
(pgg-gpg-wait-for-completion process)
(save-excursion
@@ -303,7 +303,7 @@
(if pgg-text-mode '("--textmode"))))
(process (pgg-gpg-start-process args)))
(unless pgg-gpg-use-agent
- (pgg-gpg-wait-for-status process '("GOOD_PASSPHRASE")))
+ (pgg-gpg-wait-for-status process '("BEGIN_SIGNING" "GOOD_PASSPHRASE")))
(process-send-region process start end)
(pgg-gpg-wait-for-completion process)
(save-excursion
--8<---------------cut here---------------end--------------->8---
Thomas should update from CVS (I have reverted to revision 1.8,
i.e. before your asynchronous gpg call, after adding gpg-agent support
from Sascha) and check again, I think. Or test your version.
Bye, Reiner.
--
,,,
(o o)
---ooO-(_)-Ooo--- | PGP key available | http://rsteib.home.pages.de/
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-07 12:35 ` Reiner Steib
2006-04-07 13:02 ` Daiki Ueno
@ 2006-04-07 21:36 ` Richard Stallman
2006-04-08 9:45 ` Romain Francoise
1 sibling, 1 reply; 156+ messages in thread
From: Richard Stallman @ 2006-04-07 21:36 UTC (permalink / raw)
Cc: wilde, jas, ueno, Reiner Steib, emacs-devel
Simon's advised on keeping the new code in the Gnus trunk, so I
followed his suggestion. I didn't have a strong option on what is
best for the version² in Emacs CVS, so I didn't touch it. IIRC Simon
didn't express an opinion concerning this version neither. Probably
Romain thought that the problems with the new code are too serious
also for Emacs CVS.
Romain, would you please explain to me why you removed the code in
Emacs CVS? Why not install Daiki's fixes instead?
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-07 21:22 ` Reiner Steib
@ 2006-04-08 7:03 ` Thomas Baumann
2006-04-08 10:18 ` Daiki Ueno
1 sibling, 0 replies; 156+ messages in thread
From: Thomas Baumann @ 2006-04-08 7:03 UTC (permalink / raw)
Reiner Steib <reinersteib+gmane@imap.cc> wrote:
> On Fri, Apr 07 2006, Daiki Ueno wrote:
>
> >>>>>> Reiner Steib <reinersteib+gmane@imap.cc> wrote:
> >> > Looks odd. I think that the code which waits only for "BEGIN_SIGNING"
> >> > has not ever been incorporated in Gnus CVS.
> >
> >> | X-Mailer: MH-E 7.93+cvs; nmh 1.2; GNU Emacs 22.0.50.1
> >
> >> MH-E uses the MIME stuff from Gnus, but Thomas is using MH-E from
> >> Emacs CVS.
> >
> > Did someone mistakenly installed the first BEGIN_SIGNING patch to Emacs
> > CVS, while it has not been commited in Gnus CVS?
>
> ----------------------------
> revision 1.13
> date: 2006-04-05 11:00:11 +0000; author: jas; state: Exp; lines: +2 -2
> 2006-04-05 Daiki Ueno <ueno@unixuser.org>
>
> * pgg-gpg.el (pgg-gpg-encrypt-region, pgg-gpg-sign-region): Wait
> for BEGIN_SIGNING too, new in GnuPG 1.4.3.
> ----------------------------
>
> > Simon vetoed it because it does _not_ work with the earlier GnuPG
> > versions than 1.4.3.
>
> AFAICS, Simon installed a modified version:
>
> --8<---------------cut here---------------start------------->8---
> --- pgg-gpg.el 4 Apr 2006 23:30:02 -0000 1.12
> +++ pgg-gpg.el 5 Apr 2006 11:00:11 -0000 1.13
> @@ -256,7 +256,7 @@
> (list pgg-gpg-user-id))))))))
> (process (pgg-gpg-start-process args)))
> (if (and sign (not pgg-gpg-use-agent))
> - (pgg-gpg-wait-for-status process '("GOOD_PASSPHRASE")))
> + (pgg-gpg-wait-for-status process '("BEGIN_SIGNING" "GOOD_PASSPHRASE")))
> (process-send-region process start end)
> (pgg-gpg-wait-for-completion process)
> (save-excursion
> @@ -303,7 +303,7 @@
> (if pgg-text-mode '("--textmode"))))
> (process (pgg-gpg-start-process args)))
> (unless pgg-gpg-use-agent
> - (pgg-gpg-wait-for-status process '("GOOD_PASSPHRASE")))
> + (pgg-gpg-wait-for-status process '("BEGIN_SIGNING" "GOOD_PASSPHRASE")))
> (process-send-region process start end)
> (pgg-gpg-wait-for-completion process)
> (save-excursion
> --8<---------------cut here---------------end--------------->8---
>
> Thomas should update from CVS (I have reverted to revision 1.8,
> i.e. before your asynchronous gpg call, after adding gpg-agent support
> from Sascha) and check again, I think. Or test your version.
>
> Bye, Reiner.
> --
> ,,,
> (o o)
> ---ooO-(_)-Ooo--- | PGP key available | http://rsteib.home.pages.de/
>
Everything back to normal with this mornings CVS, at least for the
pgg-gpg.el, thanks
Thomas
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-07 13:00 ` Sascha Wilde
2006-04-07 13:30 ` Simon Josefsson
@ 2006-04-08 9:36 ` Romain Francoise
2006-04-08 10:05 ` Sascha Wilde
1 sibling, 1 reply; 156+ messages in thread
From: Romain Francoise @ 2006-04-08 9:36 UTC (permalink / raw)
Cc: Daiki Ueno, emacs-devel, Reiner Steib, ding, Simon Josefsson
Sascha Wilde <wilde@sha-bang.de> writes:
> May I suggest to revert the code to version 1.8 from GNU Emacs CVS
> instead?
Reiner has now done that, in Gnus and Emacs.
--
Romain Francoise <romain@orebokech.com> | The sea! the sea! the open
it's a miracle -- http://orebokech.com/ | sea! The blue, the fresh, the
| ever free! --Bryan W. Procter
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-07 21:36 ` Richard Stallman
@ 2006-04-08 9:45 ` Romain Francoise
2006-04-08 10:11 ` Daiki Ueno
2006-04-08 22:34 ` Richard Stallman
0 siblings, 2 replies; 156+ messages in thread
From: Romain Francoise @ 2006-04-08 9:45 UTC (permalink / raw)
Cc: wilde, jas, ueno, Reiner Steib, emacs-devel
Richard Stallman <rms@gnu.org> writes:
> Romain, would you please explain to me why you removed the code in
> Emacs CVS?
To keep it level with the same code in Gnus, which we planned to include
in a new Gnus stable release this week-end.
> Why not install Daiki's fixes instead?
Because they weren't available at the time, and because we had agreed to
test this new code in the Gnus trunk.
Anyway, Reiner has now changed it again in Gnus and Emacs to a later
version that satisfies everyone, I think (revision 1.8 vs. 1.4).
--
Romain Francoise <romain@orebokech.com> | The sea! the sea! the open
it's a miracle -- http://orebokech.com/ | sea! The blue, the fresh, the
| ever free! --Bryan W. Procter
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-08 9:36 ` Romain Francoise
@ 2006-04-08 10:05 ` Sascha Wilde
0 siblings, 0 replies; 156+ messages in thread
From: Sascha Wilde @ 2006-04-08 10:05 UTC (permalink / raw)
Cc: Daiki Ueno, emacs-devel, Reiner Steib, ding, Simon Josefsson
Romain Francoise <romain@orebokech.com> wrote:
> Sascha Wilde <wilde@sha-bang.de> writes:
>
>> May I suggest to revert the code to version 1.8 from GNU Emacs CVS
>> instead?
>
> Reiner has now done that, in Gnus and Emacs.
Thanks.
sascha
--
Sascha Wilde
Nothing is fool-proof to a sufficiently talented fool.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-08 9:45 ` Romain Francoise
@ 2006-04-08 10:11 ` Daiki Ueno
2006-04-08 11:30 ` Romain Francoise
2006-04-10 22:40 ` gpg-agent support removed?! Ken Manheimer
2006-04-08 22:34 ` Richard Stallman
1 sibling, 2 replies; 156+ messages in thread
From: Daiki Ueno @ 2006-04-08 10:11 UTC (permalink / raw)
Cc: wilde, jas, rms, Reiner Steib, emacs-devel
>>>>> In <873bgo4d0e.fsf@pacem.orebokech.com>
>>>>> Romain Francoise <romain@orebokech.com> wrote:
> Richard Stallman <rms@gnu.org> writes:
> > Romain, would you please explain to me why you removed the code in
> > Emacs CVS?
> To keep it level with the same code in Gnus, which we planned to include
> in a new Gnus stable release this week-end.
> > Why not install Daiki's fixes instead?
> Because they weren't available at the time,
As I said yesterday, the current version is at
http://www.unixuser.org/~ueno/pgg-20060407.tar.gz
This code should be fairly stable.
> and because we had agreed to test this new code in the Gnus trunk.
I agreeded to revert the code from v5-10 branch of Gnus because the
release of Gnus v5.10.8 is so imminent. However, I didn't think the
release of Emacs is as well.
> Anyway, Reiner has now changed it again in Gnus and Emacs to a later
> version that satisfies everyone, I think (revision 1.8 vs. 1.4).
No, I wasn't satisfied with your decision at all. Though allout.el
appearantly has a bug, i.e. allout.el uses PGG in a bad way, it works as
expected by Ken (the author of allout.el), so it won't be fixed. On the
other hand, I have many enhancement plans of PGG based on the new code
such as keysigning features, string-based interface, etc. I think it
should be tested not only by the Gnus people but also by Emacs people.
Regards,
--
Daiki Ueno
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-07 21:22 ` Reiner Steib
2006-04-08 7:03 ` Thomas Baumann
@ 2006-04-08 10:18 ` Daiki Ueno
1 sibling, 0 replies; 156+ messages in thread
From: Daiki Ueno @ 2006-04-08 10:18 UTC (permalink / raw)
Cc: thomas.baumann, ding, emacs-devel
>>>>> In <v9acaxw05w.fsf@marauder.physik.uni-ulm.de>
>>>>> Reiner Steib <reinersteib+gmane@imap.cc> wrote:
> AFAICS, Simon installed a modified version:
> --- pgg-gpg.el 4 Apr 2006 23:30:02 -0000 1.12
> +++ pgg-gpg.el 5 Apr 2006 11:00:11 -0000 1.13
This patch had a bug, and I posted the fix just after. However, I don't
see the reason, Simon didn't commit the fix to Emacs CVS.
http://article.gmane.org/gmane.emacs.gnus.general/62522
So, this bug is fixed in the current PGG code
http://www.unixuser.org/~ueno/pgg-20060407.tar.gz
Thomas, could you test this?
Regards,
--
Daiki Ueno
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-08 10:11 ` Daiki Ueno
@ 2006-04-08 11:30 ` Romain Francoise
2006-04-08 11:58 ` Daiki Ueno
2006-04-10 22:40 ` gpg-agent support removed?! Ken Manheimer
1 sibling, 1 reply; 156+ messages in thread
From: Romain Francoise @ 2006-04-08 11:30 UTC (permalink / raw)
Cc: rms, emacs-devel
Daiki Ueno <ueno@unixuser.org> writes:
> I agreeded to revert the code from v5-10 branch of Gnus because the
> release of Gnus v5.10.8 is so imminent. However, I didn't think the
> release of Emacs is as well.
The release isn't imminent partly because people keep adding new
features which, inevitably, introduce new bugs.
> On the other hand, I have many enhancement plans of PGG based on the
> new code such as keysigning features, string-based interface, etc.
That sounds great, and I look forward to having these new features.
However, I think the Emacs trunk isn't the place to test them, at least
at the moment.
--
Romain Francoise <romain@orebokech.com> | The sea! the sea! the open
it's a miracle -- http://orebokech.com/ | sea! The blue, the fresh, the
| ever free! --Bryan W. Procter
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-08 11:30 ` Romain Francoise
@ 2006-04-08 11:58 ` Daiki Ueno
2006-04-10 18:04 ` PGG maintainance (was: gpg-agent support removed?!) Reiner Steib
0 siblings, 1 reply; 156+ messages in thread
From: Daiki Ueno @ 2006-04-08 11:58 UTC (permalink / raw)
Cc: rms, emacs-devel
>>>>> In <87r7482tjt.fsf@pacem.orebokech.com>
>>>>> Romain Francoise <romain@orebokech.com> wrote:
> > On the other hand, I have many enhancement plans of PGG based on the
> > new code such as keysigning features, string-based interface, etc.
> However, I think the Emacs trunk isn't the place to test them, at least
> at the moment.
Yes, I know. However, I'm beginning to think that Gnus CVS is also not
the right place to do this because PGG is now used by programs other
than Gnus and I have no CVS write access to Gnus CVS. Even for a tiny
fix I have to explain the reason and wait for Simon to commit.
Regards,
--
Daiki Ueno
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-08 9:45 ` Romain Francoise
2006-04-08 10:11 ` Daiki Ueno
@ 2006-04-08 22:34 ` Richard Stallman
1 sibling, 0 replies; 156+ messages in thread
From: Richard Stallman @ 2006-04-08 22:34 UTC (permalink / raw)
Cc: wilde, jas, ueno, Reiner.Steib, emacs-devel
Anyway, Reiner has now changed it again in Gnus and Emacs to a later
version that satisfies everyone, I think (revision 1.8 vs. 1.4).
Ok, thanks.
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-07 13:26 ` Daiki Ueno
@ 2006-04-09 16:04 ` Sascha Wilde
2006-04-10 18:04 ` Reiner Steib
0 siblings, 1 reply; 156+ messages in thread
From: Sascha Wilde @ 2006-04-09 16:04 UTC (permalink / raw)
Cc: Reiner Steib, Thomas Baumann, romain, ding, emacs-devel,
Simon Josefsson
Daiki Ueno <ueno@unixuser.org> wrote:
>>>>>> In <m2lkuhcz2y.fsf@kenny.sha-bang.de>
>>>>>> Sascha Wilde <wilde@sha-bang.de> wrote:
>> >> http://article.gmane.org/gmane.emacs.devel/52450
>> >
>> > I think this is fixed by the patch I posted some time ago.
>> > http://article.gmane.org/gmane.emacs.gnus.general/62571
>
>> This sounds interesting -- where can I get this version for testing?
>
> I put the tarball which contains the current pgg*.el at
>
> http://www.unixuser.org/~ueno/pgg-20060407.tar.gz
Thanks. I finally found the time to give it a try -- and it seems to
solve my problem.
cheers
sascha
--
Sascha Wilde : "I heard that if you play the Windows CD backward, you
: get a satanic message. But that's nothing compared to
: when you play it forward: It installs Windows...."
: -- G. R. Gaudreau
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-09 16:04 ` Sascha Wilde
@ 2006-04-10 18:04 ` Reiner Steib
0 siblings, 0 replies; 156+ messages in thread
From: Reiner Steib @ 2006-04-10 18:04 UTC (permalink / raw)
Cc: romain, Thomas Baumann, Daiki Ueno, ding, emacs-devel,
Simon Josefsson
On Sun, Apr 09 2006, Sascha Wilde wrote:
> Daiki Ueno <ueno@unixuser.org> wrote:
>> I put the tarball which contains the current pgg*.el at
>>
>> http://www.unixuser.org/~ueno/pgg-20060407.tar.gz
>
> Thanks. I finally found the time to give it a try -- and it seems to
> solve my problem.
Daiki, should this version be installed in Gnus trunk? Could you
provide ChangeLog entries (compared to the version in Gnus CVS trunk),
please?
Bye, Reiner.
--
,,,
(o o)
---ooO-(_)-Ooo--- | PGP key available | http://rsteib.home.pages.de/
^ permalink raw reply [flat|nested] 156+ messages in thread
* PGG maintainance (was: gpg-agent support removed?!)
2006-04-08 11:58 ` Daiki Ueno
@ 2006-04-10 18:04 ` Reiner Steib
0 siblings, 0 replies; 156+ messages in thread
From: Reiner Steib @ 2006-04-10 18:04 UTC (permalink / raw)
Cc: Simon Josefsson, ding, emacs-devel
On Sat, Apr 08 2006, Daiki Ueno wrote:
>>>>>> In <87r7482tjt.fsf@pacem.orebokech.com>
>>>>>> Romain Francoise <romain@orebokech.com> wrote:
>> However, I think the Emacs trunk isn't the place to test them, at least
>> at the moment.
>
> Yes, I know. However, I'm beginning to think that Gnus CVS is also not
> the right place to do this because PGG is now used by programs other
> than Gnus and I have no CVS write access to Gnus CVS. Even for a tiny
> fix I have to explain the reason and wait for Simon to commit.
If you'd like to maintain pgg*.el in Gnus' repository, you could ask
Lars for write access.
Bye, Reiner.
--
,,,
(o o)
---ooO-(_)-Ooo--- | PGP key available | http://rsteib.home.pages.de/
^ permalink raw reply [flat|nested] 156+ messages in thread
* Re: gpg-agent support removed?!
2006-04-08 10:11 ` Daiki Ueno
2006-04-08 11:30 ` Romain Francoise
@ 2006-04-10 22:40 ` Ken Manheimer
1 sibling, 0 replies; 156+ messages in thread
From: Ken Manheimer @ 2006-04-10 22:40 UTC (permalink / raw)
Cc: rms, Reiner Steib, wilde, Romain Francoise, emacs-devel, jas
daiki, i still have some problems with your patch, and the changes
you're suggesting for allout, and i think you've oversimplified the
problems allout has having with your patches. details interspersed
with the cited text.
On 4/8/06, Daiki Ueno <ueno@unixuser.org> wrote:
> >>>>> In <873bgo4d0e.fsf@pacem.orebokech.com>
> >>>>> Romain Francoise <romain@orebokech.com> wrote:
> > Richard Stallman <rms@gnu.org> writes:
>
> > > Romain, would you please explain to me why you removed the code in
> > > Emacs CVS?
>
> > To keep it level with the same code in Gnus, which we planned to include
> > in a new Gnus stable release this week-end.
>
> > > Why not install Daiki's fixes instead?
>
> > Because they weren't available at the time,
>
> As I said yesterday, the current version is at
> http://www.unixuser.org/~ueno/pgg-20060407.tar.gz
> This code should be fairly stable.
>
> > and because we had agreed to test this new code in the Gnus trunk.
>
> I agreeded to revert the code from v5-10 branch of Gnus because the
> release of Gnus v5.10.8 is so imminent. However, I didn't think the
> release of Emacs is as well.
>
> > Anyway, Reiner has now changed it again in Gnus and Emacs to a later
> > version that satisfies everyone, I think (revision 1.8 vs. 1.4).
>
> No, I wasn't satisfied with your decision at all. Though allout.el
> appearantly has a bug, i.e. allout.el uses PGG in a bad way, it works as
you characterized it that way because allout uses some internal pgg
functions. that was not complete, nor did your suggested remedy solve
that problem, though it would allow the removal of those functions
from pgg-gpg.
first, your initial patch crippled allout's passphrase provisions
because the pgg-gpg functions which took an optional passphrase
argument were not respecting it. i mentioned that, and you seem to
have fixed it - that problem no longer exists with your more recent
patch. that's very important to allout's encryption operations, and
i'm glad it's resolved - thanks!
second, you suggest fixing some of the cases where allout uses
internal functions by having allout implement its own version of those
functions, allowing you to eliminate the versions of those functions
in pgg-gpg. that mostly works, but it amounts to allout's versions of
those functions depending on internal data structures in pgg-gpg,
leading to a yet more brittle situation than depending on internal
functions. i think a better fix would be to provide the
functionality, or some equivalent, at the generic pgg level. i did
not do so because i had limited time and no access to the other
backends, in order to establish that the functionality would be
available with them.
it also so happens that there is at least one other function from
pgg-gpg which allout depends on and which is missing from your revised
pgg-gpg: `pgg-gpg-lookup-all-secret-keys'. this one calls out to pgg,
and so does not even remotely belong in allout. perhaps it was
renamed or the functionality is available in another way, and i'm not
opposed to tracking that, but i cannot do so immediately, and would
need time and justification to do so.
> expected by Ken (the author of allout.el), so it won't be fixed. On the
now i'm confused. what gave you the idea that it won't be fixed? i
never said i wouldn't consider what you suggested, and in fact have
been planning to do so but haven't had the time until now. i think
the approach is flawed, for the reason i mentioned above, but you may
be able to convince me otherwise - i'm willing to talk about it.
> other hand, I have many enhancement plans of PGG based on the new code
> such as keysigning features, string-based interface, etc. I think it
> should be tested not only by the Gnus people but also by Emacs people.
i think pgg could stand some attention, and am glad you're willing to
do so. the thing is, taking it may require some consolidation before
extending it - it has grown a bit unordered, and probably needs some
attention to rationalizing it against existing consumer's
requirements, including those of allout.
for now, i have a branch version of allout that does as you suggested
and works partly against your pgg-20060407.tar.gz patch, except that
key-pair encryption fails for lack of pgg-gpg-lookup-all-secret-keys,
as mentioned above. i am going to be going away for a week, starting
tomorrow evening, so i'm hoping that there will not be a migration to
your new version until this is resolved. i ultimately would prefer
that the problems be resolved in a better way, along the lines
mentioned above, but am willing to go with a partial solution if some
provision for its stability can be made. i do want to see pgg
continue to ripen.
--
ken manheimer
ken.manheimer@gmail.com
http://myriadicity.net
^ permalink raw reply [flat|nested] 156+ messages in thread
end of thread, other threads:[~2006-04-10 22:40 UTC | newest]
Thread overview: 156+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2005-09-30 17:24 new version of allout.el - patch and ChangeLog Ken Manheimer
2005-09-30 21:06 ` Sascha Wilde
2005-09-30 21:52 ` Ken Manheimer
2005-10-01 8:20 ` Andreas Schwab
2005-10-01 12:41 ` Reiner Steib
2005-10-01 23:54 ` James Cloos
2005-10-01 16:28 ` Ken Manheimer
2005-10-02 10:48 ` Sascha Wilde
2005-10-02 14:23 ` Ken Manheimer
2005-10-02 20:31 ` Richard M. Stallman
2005-10-03 19:25 ` pgg symmetric encryption patch (was: new version of allout.el - patch and ChangeLog) Sascha Wilde
2005-10-03 19:50 ` Ken Manheimer
2005-10-04 10:53 ` Sascha Wilde
2005-10-04 12:46 ` pgg symmetric encryption patch Stefan Monnier
2005-10-05 16:19 ` Sascha Wilde
2005-10-05 19:16 ` Ken Manheimer
2005-10-10 4:15 ` Richard M. Stallman
2005-10-06 2:18 ` Daiki Ueno
2005-10-06 9:01 ` Sascha Wilde
2005-10-06 22:41 ` Ken Manheimer
2005-10-07 10:00 ` Sascha Wilde
2005-10-07 18:06 ` Ken Manheimer
2005-10-07 21:49 ` Sascha Wilde
2005-10-08 8:48 ` Simon Josefsson
2005-10-08 10:36 ` Sascha Wilde
2005-10-08 11:14 ` Simon Josefsson
2005-10-08 12:56 ` Ken Manheimer
2005-10-08 22:56 ` Richard M. Stallman
2005-10-10 21:50 ` Ken Manheimer
2005-10-11 14:44 ` Richard M. Stallman
2005-10-08 13:43 ` Sascha Wilde
2005-10-08 18:31 ` Ken Manheimer
2005-10-08 19:16 ` Ken Manheimer
2005-10-10 21:15 ` Ken Manheimer
2005-10-10 21:16 ` Ken Manheimer
2005-10-12 23:47 ` Ken Manheimer
2005-10-20 14:08 ` Ken Manheimer
2005-10-20 14:12 ` Simon Josefsson
2005-10-20 14:30 ` Ken Manheimer
2005-10-20 14:42 ` Sascha Wilde
2005-10-25 7:23 ` Sascha Wilde
2005-10-25 20:26 ` Ken Manheimer
2005-10-25 21:18 ` Sascha Wilde
2005-10-25 21:28 ` Ken Manheimer
2005-10-26 9:57 ` Sascha Wilde
2005-10-26 15:45 ` Ken Manheimer
2005-10-27 7:37 ` Sascha Wilde
2005-10-29 11:42 ` Eli Zaretskii
2005-10-29 19:50 ` Ken Manheimer
2005-10-31 17:30 ` Ken Manheimer
2005-11-04 14:45 ` Eli Zaretskii
2005-10-20 18:07 ` Relocating pgg*.el (was: pgg symmetric encryption patch) Reiner Steib
2005-10-20 22:22 ` Kim F. Storm
2005-10-21 4:49 ` Richard M. Stallman
2005-10-20 23:38 ` pgg symmetric encryption patch Richard M. Stallman
2005-10-21 7:07 ` Simon Josefsson
2006-03-18 21:17 ` Small patch to enable use of gpg-agent with pgg Sascha Wilde
2006-03-18 23:30 ` Daniel Pittman
2006-03-19 0:46 ` Miles Bader
2006-03-19 3:45 ` Daniel Pittman
2006-03-19 18:28 ` Miles Bader
2006-03-19 9:49 ` Sascha Wilde
2006-03-19 17:30 ` Sascha Wilde
2006-03-21 14:32 ` Simon Josefsson
2006-03-21 21:29 ` Reiner Steib
2006-03-22 9:49 ` Simon Josefsson
2006-03-22 8:36 ` Sascha Wilde
2006-03-22 9:16 ` Daiki Ueno
2006-03-22 9:48 ` Simon Josefsson
2006-03-22 11:03 ` Sascha Wilde
2006-03-22 11:13 ` Simon Josefsson
2006-03-22 12:25 ` Daiki Ueno
2006-03-23 10:40 ` Daiki Ueno
2006-03-23 11:00 ` Simon Josefsson
2006-03-23 12:18 ` Daiki Ueno
2006-03-23 13:08 ` Simon Josefsson
2006-03-24 5:51 ` Daiki Ueno
2006-03-26 0:29 ` Daiki Ueno
2006-03-26 1:08 ` Simon Josefsson
2006-03-26 3:29 ` Miles Bader
2006-03-26 5:06 ` Daiki Ueno
2006-03-26 17:05 ` Simon Josefsson
2006-03-26 18:24 ` Sascha Wilde
2006-03-27 9:36 ` Simon Josefsson
2006-03-23 12:52 ` Sascha Wilde
2006-03-23 20:07 ` Daiki Ueno
2006-03-23 22:16 ` Sascha Wilde
2006-04-05 9:13 ` pgg-gpg broken? Sascha Wilde
2006-04-05 9:42 ` Daiki Ueno
2006-04-05 10:18 ` Sascha Wilde
2006-04-05 21:33 ` Daiki Ueno
2006-04-06 9:00 ` Sascha Wilde
2006-04-06 9:21 ` Daiki Ueno
2006-04-06 9:58 ` Sascha Wilde
2006-04-06 10:13 ` Daiki Ueno
2006-04-07 10:32 ` gpg-agent support removed?! (was: pgg-gpg broken?) Sascha Wilde
2006-04-07 12:11 ` Simon Josefsson
2006-04-07 12:14 ` gpg-agent support removed?! Romain Francoise
2006-04-07 13:00 ` Sascha Wilde
2006-04-07 13:30 ` Simon Josefsson
2006-04-07 20:59 ` Reiner Steib
2006-04-08 9:36 ` Romain Francoise
2006-04-08 10:05 ` Sascha Wilde
2006-04-07 12:35 ` Reiner Steib
2006-04-07 13:02 ` Daiki Ueno
2006-04-07 13:08 ` Sascha Wilde
2006-04-07 13:26 ` Daiki Ueno
2006-04-09 16:04 ` Sascha Wilde
2006-04-10 18:04 ` Reiner Steib
2006-04-07 13:40 ` Reiner Steib
2006-04-07 14:05 ` Thomas Baumann
2006-04-07 14:40 ` Daiki Ueno
2006-04-07 15:45 ` Reiner Steib
2006-04-07 20:55 ` Daiki Ueno
2006-04-07 21:22 ` Reiner Steib
2006-04-08 7:03 ` Thomas Baumann
2006-04-08 10:18 ` Daiki Ueno
2006-04-07 21:36 ` Richard Stallman
2006-04-08 9:45 ` Romain Francoise
2006-04-08 10:11 ` Daiki Ueno
2006-04-08 11:30 ` Romain Francoise
2006-04-08 11:58 ` Daiki Ueno
2006-04-10 18:04 ` PGG maintainance (was: gpg-agent support removed?!) Reiner Steib
2006-04-10 22:40 ` gpg-agent support removed?! Ken Manheimer
2006-04-08 22:34 ` Richard Stallman
2006-04-05 16:14 ` pgg-gpg broken? Reiner Steib
2006-04-05 19:22 ` Sascha Wilde
2006-03-22 9:46 ` Small patch to enable use of gpg-agent with pgg Simon Josefsson
2006-03-22 16:13 ` Simon Josefsson
2006-03-22 23:01 ` Katsumi Yamaoka
2006-03-22 23:45 ` Simon Josefsson
2006-03-23 0:58 ` Katsumi Yamaoka
2006-03-23 9:12 ` Simon Josefsson
2006-03-23 10:26 ` Sascha Wilde
2006-03-23 10:54 ` Simon Josefsson
2006-03-23 11:12 ` Simon Josefsson
2006-03-23 11:16 ` Simon Josefsson
2006-03-23 12:51 ` Reiner Steib
2006-03-23 13:07 ` Sascha Wilde
2006-03-23 13:10 ` Simon Josefsson
2006-03-23 12:00 ` Sascha Wilde
2006-03-23 13:00 ` Simon Josefsson
2006-03-26 18:11 ` Sascha Wilde
[not found] ` <m2wtels74l.fsf@kenny.sha-bang .de>
2006-03-23 23:09 ` Miles Bader
2006-04-02 0:30 ` Ken Manheimer
2006-04-02 8:28 ` Daiki Ueno
2005-12-09 15:43 ` pgg symmetric encryption patch Simon Josefsson
2005-12-09 20:30 ` Stefan Monnier
2005-12-09 20:31 ` Stefan Monnier
2005-12-10 4:13 ` Richard M. Stallman
2005-12-10 10:50 ` Simon Josefsson
2005-12-11 13:32 ` Sascha Wilde
2005-12-11 13:42 ` Simon Josefsson
2005-10-02 17:08 ` new version of allout.el - patch and ChangeLog Richard M. Stallman
[not found] ` <E1ELj0L-0000Pn-3T@fencepost.gnu.org>
2005-10-01 22:33 ` Ken Manheimer
2005-10-20 13:57 ` Ken Manheimer
Code repositories for project(s) associated with this external index
https://git.savannah.gnu.org/cgit/emacs.git
https://git.savannah.gnu.org/cgit/emacs/org-mode.git
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.