D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
usr
/
libexec
/
kcare
/
python
/
__pycache__
/
Filename :
kcsig_verify.cpython-36.pyc
back
Copy
3 ��wh[ � @ s d dl Z d dlZd dlZd dlZd dlZd dlZd dlZdgZdd1iZd Z e d �Z e d �Z e d �Z G d d � d e�Zd2dd�Zdd� Zd3dd�Zdd� Zdd� Zdd� Zd d � Zd d � Zd d!� Zejd"d#� �Zejd$d%� �Zd&d'� Z d(d)� Z d4d+d,�Z d5d-d.�Z d6d/d0�Z dS )7� NZrsa4096�gpg�type�kind�role�serial�keyz/dev/shm� � c @ s e Zd ZdS )�ErrorN)�__name__� __module__� __qualname__� r r �)/usr/libexec/kcare/python/kcsig_verify.pyr s r �latin1c C sN t | �}|tkr| S |tkr&| j|�S |tkr:tt| ��S tdt|� ��d S )NzUnsupported pae type )r �btype�utype�encode�int�to_bytes�str� ValueError)�data�encoding�dtyper r r r s r c C s@ t | �}|tkr| S |tkr&| jd�S |tkr8| jd�S t�d S )Nzutf-8)r �ntyper �decoder r �NotImplementedError)r r r r r �nstr' s r �wc C s8 | d }t ||��}|j|� W d Q R X tj|| � d S )Nz.tmp)�open�write�os�rename)�fname�content�mode� tmp_fname�fr r r � atomic_write2 s r) c C s t | �� }|j� S Q R X d S )N)r �read)r$ r( r r r � read_file: s r+ c C s t jt| ��S )N)�json�loadsr+ )r$ r r r � read_json? s r. c G s: dt | � }x(| D ] }t|�}|dt |�|f 7 }qW |S )Ns %ds %d%s)�lenr )�parts�result�pZbpr r r �paeC s r3 c s t � fdd�|D �� S )Nc s g | ] }� | �qS r r )�.0r( )r r r � <listcomp>N s z pae_fields.<locals>.<listcomp>)r3 )r Zfieldsr )r r � pae_fieldsL s r6 c C s t | t| d �S )Nr )r6 � PAE_FIELDS)r r r r �pae_typeQ s r8 c C s$ | d t kr tdt| d � ��d S )Nr zinvalid key type: )r7 r r )r r r r � check_keyU s r9 c c sH |r | V n8t jtdd��$}|jt| �� |j� |jV W d Q R X d S )Nz kcsig-data-)�dir�prefix)�tempfile�NamedTemporaryFile�TMPDIRr! r �flush�name)r � data_is_filer( r r r � temp_datafileZ s rB c c s* t j| |d�}z |V W d tj|� X d S )N)r; r: )r< �mkdtemp�shutil�rmtree)r; r: Ztemp_dirr r r �temp_directorye s rF c C s| t tdd��f}dd|d| dd|g}tj|tjtjtjd�}|j|�\}}|jd krntd t|� d t|� ��W d Q R X d S ) Nz kcsig-gpgtmp-)r: r; r z --homedirz --keyringz--verify�-)�stdin�stdout�stderrr zVerify error: � ) rF r> � subprocess�Popen�PIPE� communicate� returncode� Exceptionr )�keyfile�datafile�sigdataZtmp_dir�cmdr2 rI rJ r r r �run_gpg_verifyn s rV c C sx t |� tjtdd��X}|jtjt|d ��� |j� t ||��"}tjt| ��}t |j ||� W d Q R X W d Q R X d S )Nz kcsig-key-)r: r; r ) r9 r< r= r> r! �base64� b64decoder r? rB rV r@ )� signaturer r rA �key_filerS rT r r r � verify_keyx s r[ Fc C s� d}i }xt| j � D ]h\}}||kr,d||< qyt||| ||� W n. tk rp } zt|�||< W Y d d }~X qX |d7 }qW ||fS )Nr zno corresponding root key� )�itemsr[ rQ r ) � signatures�keysr rA �count�errors�keyid�sig�er r r � verify_count� s re c C s� |j dd�}|j dd�}i }|p"t}i }x�| d j� D ]�\}} yXt| � | d |krjdj| d |�||< n*| d |k r�d j| d |�||< n| ||< W q6 tk r� } zt| �||< w6W Y d d } ~ X q6X q6W i } xN|j� D ]B\}} t| d |d t| �d �\} } | |k �r| ||< q�| | |< q�W d } xl| j� D ]`\}} y t | d | | |d d� W n0 tk �r� } zt| �||< W Y d d } ~ X n X | d7 } �q.W | �s�t dt j |� ��d S )N� thresholdi' � min_seriali��r_ r z&invalid kind {0}, accepted list is {1}r z"invalid serial {0}, current is {1}r^ )r r T)r rA r\ z!Error validating file signature: ) �get�AVAILABLE_KINDSr] r9 �formatrQ r re r8 r[ r r, �dumps)rT rS � root_keys�kindsrf rg ra Zapplicable_keysrb r rd Z verified_keysr` Z root_errorsr r r �_verify� s> rn c C s$ t | �}t |�}t||||d� d S )N)rm )r. rn )ZsigfilerS Zrootfilerm rT rl r r r �verify� s ro )r r r r r )r )r )F)N)N)!r" rW r< rL r, rD � contextlibri r7 r> r r r r rQ r r r r) r+ r. r3 r6 r8 r9 �contextmanagerrB rF rV r[ re rn ro r r r r �<module> s: +