2 4d5ee956 2022-07-02 jrick * Copyright (c) 2022 Josh Rickmar <jrick@zettaport.com>
4 4d5ee956 2022-07-02 jrick * Permission to use, copy, modify, and distribute this software for any
5 4d5ee956 2022-07-02 jrick * purpose with or without fee is hereby granted, provided that the above
6 4d5ee956 2022-07-02 jrick * copyright notice and this permission notice appear in all copies.
8 4d5ee956 2022-07-02 jrick * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 4d5ee956 2022-07-02 jrick * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 4d5ee956 2022-07-02 jrick * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11 4d5ee956 2022-07-02 jrick * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 4d5ee956 2022-07-02 jrick * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13 4d5ee956 2022-07-02 jrick * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14 4d5ee956 2022-07-02 jrick * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17 1b2dedff 2022-07-04 stsp #include <sys/time.h>
18 4d5ee956 2022-07-02 jrick #include <sys/types.h>
19 4d5ee956 2022-07-02 jrick #include <sys/stat.h>
20 4d5ee956 2022-07-02 jrick #include <sys/socket.h>
21 4d5ee956 2022-07-02 jrick #include <sys/queue.h>
22 4d5ee956 2022-07-02 jrick #include <sys/wait.h>
24 4d5ee956 2022-07-02 jrick #include <stdlib.h>
25 4d5ee956 2022-07-02 jrick #include <stdio.h>
26 4d5ee956 2022-07-02 jrick #include <fcntl.h>
27 4d5ee956 2022-07-02 jrick #include <unistd.h>
28 4d5ee956 2022-07-02 jrick #include <string.h>
29 4d5ee956 2022-07-02 jrick #include <err.h>
30 4d5ee956 2022-07-02 jrick #include <assert.h>
31 4d5ee956 2022-07-02 jrick #include <sha1.h>
33 4d5ee956 2022-07-02 jrick #include "got_error.h"
34 4d5ee956 2022-07-02 jrick #include "got_date.h"
35 4d5ee956 2022-07-02 jrick #include "got_object.h"
36 4d5ee956 2022-07-02 jrick #include "got_opentemp.h"
38 4d5ee956 2022-07-02 jrick #include "got_sigs.h"
40 4d5ee956 2022-07-02 jrick #include "buf.h"
42 4d5ee956 2022-07-02 jrick #ifndef MIN
43 4d5ee956 2022-07-02 jrick #define MIN(_a,_b) ((_a) < (_b) ? (_a) : (_b))
46 4d5ee956 2022-07-02 jrick #ifndef nitems
47 4d5ee956 2022-07-02 jrick #define nitems(_a) (sizeof((_a)) / sizeof((_a)[0]))
50 4d5ee956 2022-07-02 jrick #ifndef GOT_TAG_PATH_SSH_KEYGEN
51 4d5ee956 2022-07-02 jrick #define GOT_TAG_PATH_SSH_KEYGEN "/usr/bin/ssh-keygen"
54 4d5ee956 2022-07-02 jrick #ifndef GOT_TAG_PATH_SIGNIFY
55 4d5ee956 2022-07-02 jrick #define GOT_TAG_PATH_SIGNIFY "/usr/bin/signify"
58 4d5ee956 2022-07-02 jrick const struct got_error *
59 4d5ee956 2022-07-02 jrick got_sigs_apply_unveil()
61 4d5ee956 2022-07-02 jrick if (unveil(GOT_TAG_PATH_SSH_KEYGEN, "x") != 0) {
62 4d5ee956 2022-07-02 jrick return got_error_from_errno2("unveil",
63 4d5ee956 2022-07-02 jrick GOT_TAG_PATH_SSH_KEYGEN);
65 4d5ee956 2022-07-02 jrick if (unveil(GOT_TAG_PATH_SIGNIFY, "x") != 0) {
66 4d5ee956 2022-07-02 jrick return got_error_from_errno2("unveil",
67 4d5ee956 2022-07-02 jrick GOT_TAG_PATH_SIGNIFY);
70 4d5ee956 2022-07-02 jrick return NULL;
73 4d5ee956 2022-07-02 jrick const struct got_error *
74 4d5ee956 2022-07-02 jrick got_sigs_sign_tag_ssh(pid_t *newpid, int *in_fd, int *out_fd,
75 4d5ee956 2022-07-02 jrick const char* key_file, int verbosity)
77 4d5ee956 2022-07-02 jrick const struct got_error *error = NULL;
78 4d5ee956 2022-07-02 jrick int pid, in_pfd[2], out_pfd[2];
79 4d5ee956 2022-07-02 jrick const char* argv[11];
80 4d5ee956 2022-07-02 jrick int i = 0, j;
82 4d5ee956 2022-07-02 jrick *newpid = -1;
83 4d5ee956 2022-07-02 jrick *in_fd = -1;
84 4d5ee956 2022-07-02 jrick *out_fd = -1;
86 4d5ee956 2022-07-02 jrick argv[i++] = GOT_TAG_PATH_SSH_KEYGEN;
87 4d5ee956 2022-07-02 jrick argv[i++] = "-Y";
88 4d5ee956 2022-07-02 jrick argv[i++] = "sign";
89 4d5ee956 2022-07-02 jrick argv[i++] = "-f";
90 4d5ee956 2022-07-02 jrick argv[i++] = key_file;
91 4d5ee956 2022-07-02 jrick argv[i++] = "-n";
92 4d5ee956 2022-07-02 jrick argv[i++] = "git";
93 4d5ee956 2022-07-02 jrick if (verbosity <= 0) {
94 4d5ee956 2022-07-02 jrick argv[i++] = "-q";
96 4d5ee956 2022-07-02 jrick /* ssh(1) allows up to 3 "-v" options. */
97 4d5ee956 2022-07-02 jrick for (j = 0; j < MIN(3, verbosity); j++)
98 4d5ee956 2022-07-02 jrick argv[i++] = "-v";
100 4d5ee956 2022-07-02 jrick argv[i++] = NULL;
101 4d5ee956 2022-07-02 jrick assert(i <= nitems(argv));
103 c632297d 2022-07-03 jrick if (pipe(in_pfd) == -1)
104 c632297d 2022-07-03 jrick return got_error_from_errno("pipe");
105 c632297d 2022-07-03 jrick if (pipe(out_pfd) == -1)
106 c632297d 2022-07-03 jrick return got_error_from_errno("pipe");
108 4d5ee956 2022-07-02 jrick pid = fork();
109 4d5ee956 2022-07-02 jrick if (pid == -1) {
110 4d5ee956 2022-07-02 jrick error = got_error_from_errno("fork");
111 4d5ee956 2022-07-02 jrick close(in_pfd[0]);
112 4d5ee956 2022-07-02 jrick close(in_pfd[1]);
113 4d5ee956 2022-07-02 jrick close(out_pfd[0]);
114 4d5ee956 2022-07-02 jrick close(out_pfd[1]);
115 4d5ee956 2022-07-02 jrick return error;
116 4d5ee956 2022-07-02 jrick } else if (pid == 0) {
117 4d5ee956 2022-07-02 jrick if (close(in_pfd[1]) == -1)
118 4d5ee956 2022-07-02 jrick err(1, "close");
119 1bd8e3b1 2022-07-12 jrick if (close(out_pfd[0]) == -1)
120 4d5ee956 2022-07-02 jrick err(1, "close");
121 4d5ee956 2022-07-02 jrick if (dup2(in_pfd[0], 0) == -1)
122 4d5ee956 2022-07-02 jrick err(1, "dup2");
123 1bd8e3b1 2022-07-12 jrick if (dup2(out_pfd[1], 1) == -1)
124 4d5ee956 2022-07-02 jrick err(1, "dup2");
125 4d5ee956 2022-07-02 jrick if (execv(GOT_TAG_PATH_SSH_KEYGEN, (char **const)argv) == -1)
126 4d5ee956 2022-07-02 jrick err(1, "execv");
127 4d5ee956 2022-07-02 jrick abort(); /* not reached */
129 4d5ee956 2022-07-02 jrick if (close(in_pfd[0]) == -1)
130 4d5ee956 2022-07-02 jrick return got_error_from_errno("close");
131 1bd8e3b1 2022-07-12 jrick if (close(out_pfd[1]) == -1)
132 4d5ee956 2022-07-02 jrick return got_error_from_errno("close");
133 4d5ee956 2022-07-02 jrick *newpid = pid;
134 4d5ee956 2022-07-02 jrick *in_fd = in_pfd[1];
135 1bd8e3b1 2022-07-12 jrick *out_fd = out_pfd[0];
136 4d5ee956 2022-07-02 jrick return NULL;
139 4d5ee956 2022-07-02 jrick static char *
140 4d5ee956 2022-07-02 jrick signer_identity(const char *tagger)
142 4d5ee956 2022-07-02 jrick char *lt, *gt;
144 4d5ee956 2022-07-02 jrick lt = strstr(tagger, " <");
145 4d5ee956 2022-07-02 jrick gt = strrchr(tagger, '>');
146 4d5ee956 2022-07-02 jrick if (lt && gt && lt+1 < gt)
147 4d5ee956 2022-07-02 jrick return strndup(lt+2, gt-lt-2);
148 4d5ee956 2022-07-02 jrick return NULL;
151 4d5ee956 2022-07-02 jrick static const char* BEGIN_SSH_SIG = "-----BEGIN SSH SIGNATURE-----\n";
152 4d5ee956 2022-07-02 jrick static const char* END_SSH_SIG = "-----END SSH SIGNATURE-----\n";
154 4d5ee956 2022-07-02 jrick const char *
155 4d5ee956 2022-07-02 jrick got_sigs_get_tagmsg_ssh_signature(const char *tagmsg)
157 4d5ee956 2022-07-02 jrick const char *s = tagmsg, *begin = NULL, *end = NULL;
159 4d5ee956 2022-07-02 jrick while ((s = strstr(s, BEGIN_SSH_SIG)) != NULL) {
160 4d5ee956 2022-07-02 jrick begin = s;
161 4d5ee956 2022-07-02 jrick s += strlen(BEGIN_SSH_SIG);
163 4d5ee956 2022-07-02 jrick if (begin)
164 4d5ee956 2022-07-02 jrick end = strstr(begin+strlen(BEGIN_SSH_SIG), END_SSH_SIG);
165 4d5ee956 2022-07-02 jrick if (end == NULL)
166 4d5ee956 2022-07-02 jrick return NULL;
167 4d5ee956 2022-07-02 jrick return (end[strlen(END_SSH_SIG)] == '\0') ? begin : NULL;
170 4d5ee956 2022-07-02 jrick static const struct got_error *
171 4d5ee956 2022-07-02 jrick got_tag_write_signed_data(BUF *buf, struct got_tag_object *tag,
172 4d5ee956 2022-07-02 jrick const char *start_sig)
174 4d5ee956 2022-07-02 jrick const struct got_error *err = NULL;
175 4d5ee956 2022-07-02 jrick struct got_object_id *id;
176 4d5ee956 2022-07-02 jrick char *id_str = NULL;
177 4d5ee956 2022-07-02 jrick char *tagger = NULL;
178 4d5ee956 2022-07-02 jrick const char *tagmsg;
179 4d5ee956 2022-07-02 jrick char gmtoff[6];
180 4d5ee956 2022-07-02 jrick size_t len;
182 4d5ee956 2022-07-02 jrick id = got_object_tag_get_object_id(tag);
183 4d5ee956 2022-07-02 jrick err = got_object_id_str(&id_str, id);
185 4d5ee956 2022-07-02 jrick goto done;
187 4d5ee956 2022-07-02 jrick const char *type_label = NULL;
188 4d5ee956 2022-07-02 jrick switch (got_object_tag_get_object_type(tag)) {
189 4d5ee956 2022-07-02 jrick case GOT_OBJ_TYPE_BLOB:
190 4d5ee956 2022-07-02 jrick type_label = GOT_OBJ_LABEL_BLOB;
192 4d5ee956 2022-07-02 jrick case GOT_OBJ_TYPE_TREE:
193 4d5ee956 2022-07-02 jrick type_label = GOT_OBJ_LABEL_TREE;
195 4d5ee956 2022-07-02 jrick case GOT_OBJ_TYPE_COMMIT:
196 4d5ee956 2022-07-02 jrick type_label = GOT_OBJ_LABEL_COMMIT;
198 4d5ee956 2022-07-02 jrick case GOT_OBJ_TYPE_TAG:
199 4d5ee956 2022-07-02 jrick type_label = GOT_OBJ_LABEL_TAG;
204 4d5ee956 2022-07-02 jrick got_date_format_gmtoff(gmtoff, sizeof(gmtoff),
205 4d5ee956 2022-07-02 jrick got_object_tag_get_tagger_gmtoff(tag));
206 4d5ee956 2022-07-02 jrick if (asprintf(&tagger, "%s %lld %s", got_object_tag_get_tagger(tag),
207 b9a36ae5 2022-07-04 naddy (long long)got_object_tag_get_tagger_time(tag), gmtoff) == -1) {
208 4d5ee956 2022-07-02 jrick err = got_error_from_errno("asprintf");
209 4d5ee956 2022-07-02 jrick goto done;
212 4d5ee956 2022-07-02 jrick err = buf_puts(&len, buf, GOT_TAG_LABEL_OBJECT);
214 4d5ee956 2022-07-02 jrick goto done;
215 4d5ee956 2022-07-02 jrick err = buf_puts(&len, buf, id_str);
217 4d5ee956 2022-07-02 jrick goto done;
218 4d5ee956 2022-07-02 jrick err = buf_putc(buf, '\n');
220 4d5ee956 2022-07-02 jrick goto done;
221 4d5ee956 2022-07-02 jrick err = buf_puts(&len, buf, GOT_TAG_LABEL_TYPE);
223 4d5ee956 2022-07-02 jrick goto done;
224 4d5ee956 2022-07-02 jrick err = buf_puts(&len, buf, type_label);
226 4d5ee956 2022-07-02 jrick goto done;
227 4d5ee956 2022-07-02 jrick err = buf_putc(buf, '\n');
229 4d5ee956 2022-07-02 jrick goto done;
230 4d5ee956 2022-07-02 jrick err = buf_puts(&len, buf, GOT_TAG_LABEL_TAG);
232 4d5ee956 2022-07-02 jrick goto done;
233 4d5ee956 2022-07-02 jrick err = buf_puts(&len, buf, got_object_tag_get_name(tag));
235 4d5ee956 2022-07-02 jrick goto done;
236 4d5ee956 2022-07-02 jrick err = buf_putc(buf, '\n');
238 4d5ee956 2022-07-02 jrick goto done;
239 4d5ee956 2022-07-02 jrick err = buf_puts(&len, buf, GOT_TAG_LABEL_TAGGER);
241 4d5ee956 2022-07-02 jrick goto done;
242 4d5ee956 2022-07-02 jrick err = buf_puts(&len, buf, tagger);
244 4d5ee956 2022-07-02 jrick goto done;
245 4d5ee956 2022-07-02 jrick err = buf_puts(&len, buf, "\n");
247 4d5ee956 2022-07-02 jrick goto done;
248 4d5ee956 2022-07-02 jrick tagmsg = got_object_tag_get_message(tag);
249 4d5ee956 2022-07-02 jrick err = buf_append(&len, buf, tagmsg, start_sig-tagmsg);
251 4d5ee956 2022-07-02 jrick goto done;
254 4d5ee956 2022-07-02 jrick free(id_str);
255 4d5ee956 2022-07-02 jrick free(tagger);
256 4d5ee956 2022-07-02 jrick return err;
259 4d5ee956 2022-07-02 jrick const struct got_error *
260 4d5ee956 2022-07-02 jrick got_sigs_verify_tag_ssh(char **msg, struct got_tag_object *tag,
261 4d5ee956 2022-07-02 jrick const char *start_sig, const char* allowed_signers, const char* revoked,
262 4d5ee956 2022-07-02 jrick int verbosity)
264 4d5ee956 2022-07-02 jrick const struct got_error *error = NULL;
265 4d5ee956 2022-07-02 jrick const char* argv[17];
266 4d5ee956 2022-07-02 jrick int pid, status, in_pfd[2], out_pfd[2];
267 4d5ee956 2022-07-02 jrick char* parsed_identity = NULL;
268 4d5ee956 2022-07-02 jrick const char *identity;
269 84bc347c 2022-07-14 stsp char *tmppath = NULL;
270 1bd8e3b1 2022-07-12 jrick FILE *tmpsig = NULL;
272 4d5ee956 2022-07-02 jrick int i = 0, j;
274 4d5ee956 2022-07-02 jrick *msg = NULL;
276 4d5ee956 2022-07-02 jrick error = got_opentemp_named(&tmppath, &tmpsig,
277 4d5ee956 2022-07-02 jrick GOT_TMPDIR_STR "/got-tagsig");
278 4d5ee956 2022-07-02 jrick if (error)
279 4d5ee956 2022-07-02 jrick goto done;
281 4d5ee956 2022-07-02 jrick identity = got_object_tag_get_tagger(tag);
282 4d5ee956 2022-07-02 jrick parsed_identity = signer_identity(identity);
283 4d5ee956 2022-07-02 jrick if (parsed_identity != NULL)
284 4d5ee956 2022-07-02 jrick identity = parsed_identity;
286 4d5ee956 2022-07-02 jrick if (fputs(start_sig, tmpsig) == EOF) {
287 4d5ee956 2022-07-02 jrick error = got_error_from_errno("fputs");
288 4d5ee956 2022-07-02 jrick goto done;
290 4d5ee956 2022-07-02 jrick if (fflush(tmpsig) == EOF) {
291 4d5ee956 2022-07-02 jrick error = got_error_from_errno("fflush");
292 4d5ee956 2022-07-02 jrick goto done;
295 4d5ee956 2022-07-02 jrick error = buf_alloc(&buf, 0);
296 4d5ee956 2022-07-02 jrick if (error)
297 4d5ee956 2022-07-02 jrick goto done;
298 4d5ee956 2022-07-02 jrick error = got_tag_write_signed_data(buf, tag, start_sig);
299 4d5ee956 2022-07-02 jrick if (error)
300 4d5ee956 2022-07-02 jrick goto done;
302 4d5ee956 2022-07-02 jrick argv[i++] = GOT_TAG_PATH_SSH_KEYGEN;
303 4d5ee956 2022-07-02 jrick argv[i++] = "-Y";
304 4d5ee956 2022-07-02 jrick argv[i++] = "verify";
305 4d5ee956 2022-07-02 jrick argv[i++] = "-f";
306 4d5ee956 2022-07-02 jrick argv[i++] = allowed_signers;
307 4d5ee956 2022-07-02 jrick argv[i++] = "-I";
308 4d5ee956 2022-07-02 jrick argv[i++] = identity;
309 4d5ee956 2022-07-02 jrick argv[i++] = "-n";
310 4d5ee956 2022-07-02 jrick argv[i++] = "git";
311 4d5ee956 2022-07-02 jrick argv[i++] = "-s";
312 4d5ee956 2022-07-02 jrick argv[i++] = tmppath;
313 4d5ee956 2022-07-02 jrick if (revoked) {
314 4d5ee956 2022-07-02 jrick argv[i++] = "-r";
315 4d5ee956 2022-07-02 jrick argv[i++] = revoked;
317 4d5ee956 2022-07-02 jrick if (verbosity > 0) {
318 4d5ee956 2022-07-02 jrick /* ssh(1) allows up to 3 "-v" options. */
319 4d5ee956 2022-07-02 jrick for (j = 0; j < MIN(3, verbosity); j++)
320 4d5ee956 2022-07-02 jrick argv[i++] = "-v";
322 4d5ee956 2022-07-02 jrick argv[i++] = NULL;
323 4d5ee956 2022-07-02 jrick assert(i <= nitems(argv));
325 c632297d 2022-07-03 jrick if (pipe(in_pfd) == -1) {
326 c632297d 2022-07-03 jrick error = got_error_from_errno("pipe");
327 4d5ee956 2022-07-02 jrick goto done;
329 c632297d 2022-07-03 jrick if (pipe(out_pfd) == -1) {
330 c632297d 2022-07-03 jrick error = got_error_from_errno("pipe");
331 4d5ee956 2022-07-02 jrick goto done;
334 4d5ee956 2022-07-02 jrick pid = fork();
335 4d5ee956 2022-07-02 jrick if (pid == -1) {
336 4d5ee956 2022-07-02 jrick error = got_error_from_errno("fork");
337 4d5ee956 2022-07-02 jrick close(in_pfd[0]);
338 4d5ee956 2022-07-02 jrick close(in_pfd[1]);
339 4d5ee956 2022-07-02 jrick close(out_pfd[0]);
340 4d5ee956 2022-07-02 jrick close(out_pfd[1]);
341 4d5ee956 2022-07-02 jrick return error;
342 4d5ee956 2022-07-02 jrick } else if (pid == 0) {
343 4d5ee956 2022-07-02 jrick if (close(in_pfd[1]) == -1)
344 4d5ee956 2022-07-02 jrick err(1, "close");
345 1bd8e3b1 2022-07-12 jrick if (close(out_pfd[0]) == -1)
346 4d5ee956 2022-07-02 jrick err(1, "close");
347 4d5ee956 2022-07-02 jrick if (dup2(in_pfd[0], 0) == -1)
348 4d5ee956 2022-07-02 jrick err(1, "dup2");
349 1bd8e3b1 2022-07-12 jrick if (dup2(out_pfd[1], 1) == -1)
350 4d5ee956 2022-07-02 jrick err(1, "dup2");
351 4d5ee956 2022-07-02 jrick if (execv(GOT_TAG_PATH_SSH_KEYGEN, (char **const)argv) == -1)
352 4d5ee956 2022-07-02 jrick err(1, "execv");
353 4d5ee956 2022-07-02 jrick abort(); /* not reached */
355 4d5ee956 2022-07-02 jrick if (close(in_pfd[0]) == -1) {
356 4d5ee956 2022-07-02 jrick error = got_error_from_errno("close");
357 4d5ee956 2022-07-02 jrick goto done;
359 1bd8e3b1 2022-07-12 jrick if (close(out_pfd[1]) == -1) {
360 4d5ee956 2022-07-02 jrick error = got_error_from_errno("close");
361 4d5ee956 2022-07-02 jrick goto done;
363 4d5ee956 2022-07-02 jrick if (buf_write_fd(buf, in_pfd[1]) == -1) {
364 4d5ee956 2022-07-02 jrick error = got_error_from_errno("write");
365 4d5ee956 2022-07-02 jrick goto done;
367 4d5ee956 2022-07-02 jrick if (close(in_pfd[1]) == -1) {
368 4d5ee956 2022-07-02 jrick error = got_error_from_errno("close");
369 4d5ee956 2022-07-02 jrick goto done;
371 4d5ee956 2022-07-02 jrick if (waitpid(pid, &status, 0) == -1) {
372 4d5ee956 2022-07-02 jrick error = got_error_from_errno("waitpid");
373 4d5ee956 2022-07-02 jrick goto done;
375 4d5ee956 2022-07-02 jrick if (!WIFEXITED(status)) {
376 4d5ee956 2022-07-02 jrick error = got_error(GOT_ERR_BAD_TAG_SIGNATURE);
377 4d5ee956 2022-07-02 jrick goto done;
380 1bd8e3b1 2022-07-12 jrick error = buf_load_fd(&buf, out_pfd[0]);
381 4d5ee956 2022-07-02 jrick if (error)
382 4d5ee956 2022-07-02 jrick goto done;
383 4d5ee956 2022-07-02 jrick error = buf_putc(buf, '\0');
384 4d5ee956 2022-07-02 jrick if (error)
385 4d5ee956 2022-07-02 jrick goto done;
386 1bd8e3b1 2022-07-12 jrick if (close(out_pfd[0]) == -1) {
387 4d5ee956 2022-07-02 jrick error = got_error_from_errno("close");
388 4d5ee956 2022-07-02 jrick goto done;
390 4d5ee956 2022-07-02 jrick *msg = buf_get(buf);
391 4d5ee956 2022-07-02 jrick if (WEXITSTATUS(status) != 0)
392 4d5ee956 2022-07-02 jrick error = got_error(GOT_ERR_BAD_TAG_SIGNATURE);
395 4d5ee956 2022-07-02 jrick free(parsed_identity);
396 84bc347c 2022-07-14 stsp if (tmppath && unlink(tmppath) == -1 && error == NULL)
397 84bc347c 2022-07-14 stsp error = got_error_from_errno("unlink");
398 4d5ee956 2022-07-02 jrick free(tmppath);
399 1bd8e3b1 2022-07-12 jrick close(out_pfd[0]);
400 4d5ee956 2022-07-02 jrick if (tmpsig && fclose(tmpsig) == EOF && error == NULL)
401 4d5ee956 2022-07-02 jrick error = got_error_from_errno("fclose");
402 4d5ee956 2022-07-02 jrick return error;