D7net
Home
Console
Upload
information
Create File
Create Folder
About
Tools
:
/
usr
/
libexec
/
kcare
/
python
/
kcarectl
/
__pycache__
/
Filename :
fetch.cpython-36.pyc
back
Copy
3 ��wh� � @ s� d dl Z d dlZd dlZddlmZ ddlmZ ddlmZ ddlmZ ddlmZ ddlm Z dd lm Z d dl Z e j e j gZd Zd Zd Zd dd�Zdd� Zdd� Zeje je j�dd d�d dd��ZG dd� de�Zejdd� �Z d d � Z dS ) � N� )�utils)�auth)�selinux)� http_utils)�config)�errors)� constantsz /usr/bin/gpgz/var/lib/kcare/gpgzrelease.content.jsonFc C s� t j}|rtj}tjr&td d d� }nt}xT|D ]L}y|| | �}P W q0 tjk rz } z||d krj|�W Y d d }~X q0X q0W || }t j ||� |S )Nr ���r ) r �urlopenr � urlopen_authr �FORCE_JSON_SIG_V3�SIG_VERIFY_ORDERr �NotFoundr � save_to_file) �url�dst�do_authZ urlopen_localZsig_extsZsig_ext� signatureZnfZsig_dst� r �+/usr/libexec/kcare/python/kcarectl/fetch.py�fetch_signature s r c C s t jjt�s tjdjt���d S )Nz$No {0} present. Please install gnupg)�os�path�isfile�GPG_BINr � KcareError�formatr r r r � check_gpg_bin0 s r c C s� t � |jtj�rptjjtd�}ytj || |� W q� tj k rl } z t j dj | t|����W Y dd}~X q�X nxt|d��}|j� }W dQ R X tjjtd�}ytj|| |� W n8 tk r� } z t j dj | t|����W Y dd}~X nX dS )a8 Check a file signature using the gpg tool. If signature is wrong BadSignatureException will be raised. :param file_path: path to file which signature will be checked :param signature: a file with the signature :return: True in case of valid signature :raises: BadSignatureException zroot-keys.jsonzBad Signature: {0}: {1}N�rbz kcare_pub.key)r �endswithr �SIG_JSONr r �join� GPG_KEY_DIR� kcsig_verifyZverify�Errorr �BadSignatureExceptionr �str�open�readZrun_gpg_verify� Exception)Z file_pathr Z root_keys�e�fZsigdataZkeyringr r r �check_gpg_signature5 s * r- � )�count�delayc C s^ t j| �}tj|�}tj||� |r2|j| |� n |rNt| |dd�}t||� t j ||� |S )NT)r ) r r r �selinux_safe_tmpnamer r �checkr r- r �rename)r r �check_signature� hash_checker�response�tmpr r r r � fetch_urlT s r8 c @ s e Zd Zdd� Zdd� ZdS )� HashCheckerc C s6 || _ tj|�jd�d | _tjtj|��d | _d S )N�/�files) � content_filer �get_patch_server_url�rstrip� url_prefix�json�loads� read_file�hashes)�self�baseurlr< r r r �__init__e s zHashChecker.__init__c C sr |t | j�d � }|| jkr0tjdj|| j���tjt j |��j � }| j| d }||krntj dj|||���d S )Nz3Invalid checksum: {0} not found in content file {1}�sha256z<Invalid checksum: {0} has invalid checksum {1}, expected {2}) �lenr? rC r r r r< �hashlibrG r � read_file_bin� hexdigestr& )rD r �fnameZcfnameZhshZ expected_hshr r r r2 j s zHashChecker.checkN)�__name__� __module__� __qualname__rF r2 r r r r r9 d s r9 c C sj t js d S | jsd S | jt�}tjj|�s^y tt j | jt�|t j � W n t j k r\ d S X t| j|�S )N)r �USE_CONTENT_FILE_V3rE � cache_path� CONTENT_FILEr r �existsr8 r r= � USE_SIGNATUREr r r9 )�levelr r r r �get_hash_checkerx s rV c s � fdd�}|S )z=Enrish request with a cache key, and save it if responce had.c sh t j� }|d k r.d|kr i |d< ||d tj< � | |�}|jjtj�}|d k rd||krdt jtj|� |S )N�headers)r � get_cache_keyr �CACHE_KEY_HEADERrW �get� atomic_write�CACHE_KEY_DUMP_PATH)�args�kwargs� cache_key�respZ new_cache_key)�clblr r �wrapper� s z$wrap_with_cache_key.<locals>.wrapperr )ra rb r )ra r �wrap_with_cache_key� s rc )F)FN) r r@ rI � r r r r r r r r$ �SIGr! r r r# rR r r r- �retry� check_excr& r8 �objectr9 �cachedrV rc r r r r �<module> s,