Add a signature verification method to keyring

- At least within rpm itself, callers aren't particularly interested
  in the actual key that matches a given signature, they just want
  simple good/bad/nokey answers. This makes life simple for them
  and avoids exposing further rpmPubkey internals through APIs.

1 files changed, 18 insertions, 0 deletions

diff --git a/rpmio/rpmkeyring.c b/rpmio/rpmkeyring.c
index 74b152aba..6ebaab89e 100644
--- a/rpmio/rpmkeyring.c
+++ b/rpmio/rpmkeyring.c
@@ -255,3 +255,21 @@ rpmRC rpmKeyringLookup(rpmKeyring keyring, pgpDig sig)
 
     return res;
 }
+
+rpmRC rpmKeyringVerifySig(rpmKeyring keyring, pgpDigParams sig, DIGEST_CTX ctx)
+{
+    rpmRC rc = RPMRC_FAIL;
+
+    if (sig && ctx) {
+	pgpDigParams pgpkey = NULL;
+	rpmPubkey key = findbySig(keyring, sig);
+
+	if (key)
+	    pgpkey = key->pgpkey;
+
+	/* We call verify even if key not found for a signature sanity check */
+	rc = pgpVerifySignature(pgpkey, sig, ctx);
+    }
+
+    return rc;
+}