PHP gnupg part of functions are not working

Question

I've just installed gnupg pecl extension and required libraries, gnupg seems to be enabled in my phpinfo();

php -i | grep gnupg

/etc/php/7.3/cli/conf.d/20-gnupg.ini,
gnupg
gnupg support => enabled

when i try to call gnupg_init() it's succeed and give me resource id but then i'm trying gnupg_import and it always fails and return false

when i try to execute command in shell: gpg --import somekey.txt it works here is my test test.key:

do i have to initialize gpg somehow before using it in my web application? point me into the right direction pls

exported previously imported key by fingerprint:

gpg --export --armor B4A57058391D51C5853BBFA317916E7C04C17179 > /var/www/test/test.key

below is my test.php:

<?php
$key=file_get_contents('/var/www/test/test.key');
$gpg=gnupg_init();
print_r($gpg); //returns Resource id #7 
$res=gnupg_import($gpg, $key);
print_r($res); //returns empty string
var_dump($res); //returns (bool)false
$er=gnupg_geterror($gpg);
var_dump($er); //return (bool)false
?>

p.s. using nginx+php7.3-fpm and gpg 1.4.23 my gnupg homedir is in /var/www/.gnupg belongs to nginx/php user and has required previleges 600/700

Are there any Warnings in your PHP error log, or with `ini_set('display_errors', 'on'); error_reporting(E_ALL);`? Often, functions that return false on failure will raise warnings describing the specific error. — IMSoP, Feb 15 '19 at 10:20
i got this warning: php-fpm7.3[31083]: [15-Feb-2019 05:02:50] NOTICE: PHP message: PHP Warning: Module 'gnupg' already loaded in Unknown on line 0. error_reporting is E_ALL display_errors=On — Olympic Bear, Feb 15 '19 at 10:56
@МишкаОлимпийский What is the return value of `gnupg_geterror()` after your `gnupg_import()` call failed? — Progman, Feb 15 '19 at 13:21
@МишкаОлимпийский Please edit your question to include the source code you have now with the added `gnupg_geterror()` check. — Progman, Feb 15 '19 at 16:20

Jan Myszkier · Accepted Answer · 2019-02-17T10:30:40.327

0

There might be newlines at fault here, because you're posting the key contents instead of the actual key file. Please replace that field with upload-file field and it should cause no newline issues (as long as you didn't edit the exported keys, but I'd export them once again, just to make sure)

I just tried and both armored and normal public exported files work fine with the gnupg_import. Code I tried:

//gpg --export --armor 4E8D5B22A24A1CFFA5BD2E771A9A0D703BDDF81B > public-armor.key
$PublicData = file_get_contents('public-armor.key');
$res=gnupg_import($gpg, $PublicData);
var_dump($res); 
$er=gnupg_geterror($gpg);
var_dump($er);

My output:

array(9) {
  'imported' =>
  int(0)
  'unchanged' =>
  int(1)
  'newuserids' =>
  int(0)
  'newsubkeys' =>
  int(0)
  'secretimported' =>
  int(0)
  'secretunchanged' =>
  int(0)
  'newsignatures' =>
  int(0)
  'skippedkeys' =>
  int(0)
  'fingerprint' =>
  string(40) "4E8D5B22A24A1CFFA5BD2E771A9A0D703BDDF81B"
}
/tmp/so_5469155777_test_php_gnupg.php:12:
bool(false)

EDIT: I just gave it a spin on DO droplet to confirm the bug and while it's weird it's really there. Please modify the beginning of your key from:

-----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1

to:

-----BEGIN PGP PUBLIC KEY BLOCK-----

and it will all work nicely. (yes, just remove the version info from it)

edited Feb 17 '19 at 10:30

answered Feb 15 '19 at 17:11

Jan Myszkier

2,714
1
16
23

Hey, please see my edit, it should solve the issue for you – Jan Myszkier Feb 17 '19 at 10:31
thanks for your time, but i forgot to update that part of question because armored export already stripped key of the version, and it did not make any changes – Olympic Bear Feb 17 '19 at 12:11
did you also made sure the key file is split by newlines? Because it's not if you copypaste SO key into a file. (if you did, please update the SO question so the key includes the newlines and the `=wIHb` should be in its own line, too) – Jan Myszkier Feb 17 '19 at 13:58
Hi, man! the "=wIHb" already on it's own line. Since i've exported key that have already been imported to the keyring, so there should be no issues with formatting. I'm incline to conclusion that pecl gnupg extension or gpg itself installed wrong. may be do i have to initialize it somehow before using? – Olympic Bear Feb 18 '19 at 05:54
you don't have to initialize it. on "clean" server I installed only php-gnupg + php7.3 (from ondrej PPA) and that was all I needed to do to make it work. Key and code works fine there. Have you tried to use CLI ? or are you simply encountering nginx permission issues which I described on https://stackoverflow.com/a/54732387/2129097 ? – Jan Myszkier Feb 18 '19 at 09:10

PHP gnupg part of functions are not working

1 Answers1