Handle closing the file descriptors in Node 20.x.x when work with streams

[10kc-svats]

• OpenPGP.js version: 5.5.0
• Affected platform (Browser or Node.js version): > Node 20.x.x

When we switched from node 18 to node 20 we've encountered this problem, where decrypt method resolves the promise, but the data does not contain a decrypted stream.

The code reads a file using a stream with the fs.createReadStream method. If the stream isn't properly closed (either because of an error, or because the stream wasn't fully read), the file remains open. In the original code, we were passing the stream directly to openpgp.readMessage, and if openpgp.readMessage didn't read the stream fully or there was an error in between, the stream was left open.

The piece of code:

const stream = fs.createReadStream(filePath, 'utf-8');
const privateKey = await openpgp.decryptKey({
  privateKey: await openpgp.readPrivateKey({
    armoredKey: this.privateKeyASCII,
  }),
  passphrase: this.passPhrase,
});
const options: openpgp.DecryptOptions = {
  decryptionKeys: privateKey,
  message: await openpgp.readMessage({
    armoredMessage: stream,
  }),
};
const { data } = await openpgp.decrypt(options);
return data;

Solution:
To resolve the issue, we explicitly close the stream using the stream.destroy() method after we're done processing it. This ensures that the file descriptor is closed and released appropriately, and it doesn't have to wait for the garbage collector to do it.

[larabr]

Hi @10kc-svats , could you try and see if 96d6e76 (#1691) fixes the issue ?

[10kc-svats]

@larabr hi, unfortunately this does not work

[10kc-svats]

@larabr if it can help you

[10kc-svats]

@larabr actually, stream.destroy() does not solve the problem, I accidentally switched to the prev node version and it works well (I thought I'm using node 20.x.x).

this solution works for me

[larabr]

How are you testing for the issue? Passing a stream with data that triggers an OpenPGP.js error?

[10kc-svats]

@larabr

1. saving an encrypted file to the local file
2. creating a read stream from that file
3. Passing the stream to the decrypt method

const options: openpgp.DecryptOptions = {
  config: {
    allowInsecureDecryptionWithSigningKeys: true,
    allowUnauthenticatedMessages: true,
  },
  decryptionKeys: privateKey,
  message: await openpgp.readMessage({
    armoredMessage: readStream,
  }),
};
const { data } = await openpgp.decrypt(options);

[larabr]

I am not clear on the issue you are observing.

Are you reading out the data stream (i.e. pulling chunks)? If not, the decryption process doesn't even start (and neither does readMessage consume the input stream), and it's expected that the file descriptor remains open.