File: //usr/libexec/kcare/python/__pycache__/kcsig_verify.cpython-38.pyc
U
n�h\ � @ s d dl Z d dlZd dlZd dlZd dlZd dlZd dlZdgZddiZdZed�Zed�Zed�Z G dd � d e �Z d-d d �Z d
d� Z d.dd�Z!dd� Z"dd� Z#dd� Z$dd� Z%dd� Z&d d � Z'ej(d d � �Z)ej(d d!� �Z*d"d#� Z+d$d%� Z,d/d'd(�Z-d0d)d*�Z.d1d+d,�Z/dS )2� NZrsa4096�gpg)�type�kindZrole�serial�keyz/dev/shm� � c @ s e Zd ZdS )�ErrorN)�__name__�
__module__� __qualname__� r
r
�)/usr/libexec/kcare/python/kcsig_verify.pyr s r �latin1c C sN t | �}|tkr| S |tkr&| �|�S |tkr:tt| ��S tdt|� ��d S )NzUnsupported pae type )r �btype�utype�encode�int�to_bytes�str�
ValueError)�data�encoding�dtyper
r
r r s
r c C s@ t | �}|tkr| S |tkr&| �d�S |tkr8| �d�S t�d S )Nzutf-8)r �ntyper �decoder r �NotImplementedError)r r r
r
r �nstr( s
r �wc C s8 | d }t ||��}|�|� W 5 Q R X t�|| � d S )Nz.tmp)�open�write�os�rename)�fname�content�mode� tmp_fname�fr
r
r � atomic_write3 s r( c
C s( t | ��}|�� W 5 Q R � S Q R X d S �N)r �read)r# r' r
r
r � read_file; s
r+ c C s t �t| ��S r) )�json�loadsr+ )r# r
r
r � read_json@ s r. c G s6 dt | � }| D ] }t|�}|dt |�|f 7 }q|S )Ns %ds %d%s)�lenr )�parts�result�pZbpr
r
r �paeD s
r3 c s t � fdd�|D �� S )Nc s g | ] }� | �qS r
r
)�.0r' �r r
r �
<listcomp>O s z pae_fields.<locals>.<listcomp>)r3 )r �fieldsr
r5 r �
pae_fieldsM s r8 c C s t | t| d �S )Nr )r8 �
PAE_FIELDSr5 r
r
r �pae_typeR s r: c C s$ | d t kr tdt| d � ��d S )Nr zinvalid key type: )r9 r r )r r
r
r � check_keyV s r; c c sH |r | V n8t jtdd��$}|�t| �� |�� |jV W 5 Q R X d S )Nz kcsig-data-��dir�prefix)�tempfile�NamedTemporaryFile�TMPDIRr r �flush�name)r � data_is_filer' r
r
r �
temp_datafile[ s rE c c s* t j| |d�}z
|V W 5 t�|� X d S )N)r> r= )r? �mkdtemp�shutil�rmtree)r> r= Ztemp_dirr
r
r �temp_directoryf s
rI c C s| t tdd��f}dd|d| dd|g}tj|tjtjtjd�}|�|�\}}|jd krntd
t|� d t|� ��W 5 Q R X d S ) Nz
kcsig-gpgtmp-r< r z --homedirz --keyringz--verify�-)�stdin�stdout�stderrr zVerify error: �
) rI rA �
subprocess�Popen�PIPE� communicate�
returncode� Exceptionr )�keyfile�datafile�sigdataZtmp_dir�cmdr2 rL rM r
r
r �run_gpg_verifyo s
rY c
C sx t |� tjtdd��X}|�t�t|d ��� |�� t ||��"}t�t| ��}t
|j ||� W 5 Q R X W 5 Q R X d S )Nz
kcsig-key-r< r ) r; r? r@ rA r �base64� b64decoder rB rE rY rC )� signaturer r rD �key_filerV rW r
r
r �
verify_keyy s r^ Fc C s� d}i }| � � D ]h\}}||kr*d||< qzt||| ||� W n. tk
rn } zt|�||< W 5 d }~X Y qX |d7 }q||fS )Nr zno corresponding root key� )�itemsr^ rT r ) �
signatures�keysr rD �count�errors�keyid�sig�er
r
r � verify_count� s
rh c C s� |� dd�}|� dd�}i }|p"t}i }| d �� D ]�\}} zXt| � | d |krhd�| d |�||< n*| d |k r�d �| d |�||< n| ||< W q4 tk
r� }
zt|
�||< W Y �q4W 5 d }
~
X Y q4X q4i } |�� D ]B\}} t| d
|d t| �d �\} }
| |k �r|
||< q�| | |< q�d } | �� D ]`\}} z t | d
| | |d
d� W n0 tk
�r~ }
zt|
�||< W 5 d }
~
X Y n
X | d7 } �q*| �s�t
dt � |� ��d S )N� thresholdi' �
min_seriali��rb r z&invalid kind {0}, accepted list is {1}r z"invalid serial {0}, current is {1}ra r5 r T)r rD r_ z!Error validating file signature: )
�get�AVAILABLE_KINDSr` r; �formatrT r rh r: r^ r r, �dumps)rW rV � root_keys�kindsri rj rd Zapplicable_keysre r rg Z
verified_keysrc Z root_errorsr
r
r �_verify� s>
rq c C s$ t | �}t |�}t||||d� d S )N)rp )r. rq )ZsigfilerV Zrootfilerp rW ro r
r
r �verify� s rr )r )r )F)N)N)0rZ �
contextlibr, r! rG rO r? �Any�Dict�IteratorZList�Mapping�Optional�Sequence�Tuple�UnionZAnyKeyZ
ReleaseKeyZRootKeyZRootKeysZ SignatureZanystrrl r9 rA r r r r rT r r r r( r+ r. r3 r8 r: r; �contextmanagerrE rI rY r^ rh rq rr r
r
r
r �<module> s>
+