amaharaneko/guix-mirrors
1
1
Fork 0
mirror of https://codeberg.org/guix/guix.git synced 2025-10-02 02:15:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

pk-crypto: Don't use Ed25519 when libgcrypt is older than 1.6.0.

Browse source 
* guix/pk-crypto.scm (gcrypt-version): New procedure.
* guix/scripts/archive.scm (%key-generation-parameters): New variable.
  (%options) <generate-key>: Use it.
* tests/pk-crypto.scm ("sign + verify, Ed25519"): Skip if using gcrypt < 1.6.0.
This commit is contained in:
Ludovic Courtès 2014-03-20 22:33:52 +01:00
parent 2f66e64c53
commit 1fda6840a8
3 changed files with 23 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

10
guix/scripts/archive.scm
View file

@ -87,6 +87,13 @@ Export/import one or more packages from/to the store.\n"))
(newline)
(show-bug-report-information))
(define %key-generation-parameters
;; Default key generation parameters. We prefer Ed25519, but it was
;; introduced in libgcrypt 1.6.0.
(if (version>? (gcrypt-version) "1.6.0")
"(genkey (ecdsa (curve Ed25519) (flags rfc6979)))"
"(genkey (rsa (nbits 4:4096)))"))
(define %options
;; Specifications of the command-line options.
(cons* (option '(#\h "help") #f #f
@ -114,8 +121,7 @@ Export/import one or more packages from/to the store.\n"))
;; libgcrypt 1.6.0.
(let ((params
(string->canonical-sexp
(or arg "\
(genkey (ecdsa (curve Ed25519) (flags rfc6979)))"))))
(or arg %key-generation-parameters))))
(alist-cons 'generate-key params result)))
(lambda (key err)
(leave (_ "invalid key generation parameters: ~a: ~a~%")