| Dir : /usr/libexec/kcare/python/__pycache__/ |
| Server: Linux server1.ngambekcore.com 4.18.0-553.51.1.el8_10.x86_64 #1 SMP Wed Apr 30 04:00:07 EDT 2025 x86_64 IP: 159.198.77.92 |
| Dir : //usr/libexec/kcare/python/__pycache__/kcsig_verify.cpython-36.pyc |
3
� i\ � @ s d dl Z d dlZd dlZd dlZd dlZd dlZd dlZdgZdd1iZd Z e
d
�Z e
d �Z e
d �Z
G d d
� d
e�Zd2dd�Zdd� Zd3dd�Zdd� Zdd� Zdd� Zd d � Zd d � Zd d!� Zejd"d#� �Zejd$d%� �Zd&d'� Z d(d)� Z d4d+d,�Z d5d-d.�Z d6d/d0�Z dS )7� NZrsa4096�gpg�type�kind�role�serial�keyz/dev/shm� � c @ s e Zd ZdS )�ErrorN)�__name__�
__module__� __qualname__� r r �)/usr/libexec/kcare/python/kcsig_verify.pyr
s r
�latin1c C sN t | �}|tkr| S |tkr&| j|�S |tkr:tt| ��S tdt|� ��d S )NzUnsupported pae type )r �btype�utype�encode�int�to_bytes�str�
ValueError)�data�encoding�dtyper r r r s
r c C s@ t | �}|tkr| S |tkr&| jd�S |tkr8| jd�S t�d S )Nzutf-8)r �ntyper �decoder r �NotImplementedError)r r r r r �nstr( s
r �wc
C s8 | d }t ||��}|j|� W d Q R X tj|| � d S )Nz.tmp)�open�write�os�rename)�fname�content�mode� tmp_fname�fr r r � atomic_write3 s r) c C s t | ��
}|j� S Q R X d S )N)r �read)r$ r( r r r � read_file; s
r+ c C s t jt| ��S )N)�json�loadsr+ )r$ r r r � read_json@ s r. c G s: dt | � }x(| D ] }t|�}|dt |�|f 7 }qW |S )Ns %ds %d%s)�lenr )�parts�result�pZbpr r r �paeD s
r3 c s t � fdd�|D �� S )Nc s g | ] }� | �qS r r )�.0r( )r r r �
<listcomp>O s z pae_fields.<locals>.<listcomp>)r3 )r �fieldsr )r r �
pae_fieldsM s r7 c C s t | t| d �S )Nr )r7 �
PAE_FIELDS)r r r r �pae_typeR s r9 c C s$ | d t kr tdt| d � ��d S )Nr zinvalid key type: )r8 r r )r r r r � check_keyV s r: c
c sH |r | V n8t jtdd��$}|jt| �� |j� |jV W d Q R X d S )Nz kcsig-data-)�dir�prefix)�tempfile�NamedTemporaryFile�TMPDIRr! r �flush�name)r � data_is_filer( r r r �
temp_datafile[ s rC c c s* t j| |d�}z
|V W d tj|� X d S )N)r< r; )r= �mkdtemp�shutil�rmtree)r< r; Ztemp_dirr r r �temp_directoryf s
rG c C s| t tdd��f}dd|d| dd|g}tj|tjtjtjd�}|j|�\}}|jd krntd
t|� d t|� ��W d Q R X d S ) Nz
kcsig-gpgtmp-)r; r< r z --homedirz --keyringz--verify�-)�stdin�stdout�stderrr zVerify error: �
) rG r? �
subprocess�Popen�PIPE� communicate�
returncode� Exceptionr )�keyfile�datafile�sigdataZtmp_dir�cmdr2 rJ rK r r r �run_gpg_verifyo s
rW c C sx t |� tjtdd��X}|jtjt|d ��� |j� t ||��"}tjt| ��}t
|j ||� W d Q R X W d Q R X d S )Nz
kcsig-key-)r; r< r ) r: r= r> r? r! �base64� b64decoder r@ rC rW rA )� signaturer r rB �key_filerT rU r r r �
verify_keyy s r\ Fc C s� d}i }xt| j � D ]h\}}||kr,d||< qyt||| ||� W n. tk
rp } zt|�||< W Y d d }~X qX |d7 }qW ||fS )Nr zno corresponding root key� )�itemsr\ rR r ) �
signatures�keysr rB �count�errors�keyid�sig�er r r � verify_count� s rf c C s� |j dd�}|j dd�}i }|p"t}i }x�| d j� D ]�\}} yXt| � | d |krjdj| d |�||< n*| d |k r�d j| d |�||< n| ||< W q6 tk
r� }
zt|
�||< w6W Y d d }
~
X q6X q6W i } xN|j� D ]B\}} t| d
|d t| �d �\} }
| |k �r|
||< q�| | |< q�W d } xl| j� D ]`\}} y t | d
| | |d
d� W n0 tk
�r� }
zt|
�||< W Y d d }
~
X n
X | d7 } �q.W | �s�t
dt j |� ��d S )N� thresholdi' �
min_seriali��r` r z&invalid kind {0}, accepted list is {1}r z"invalid serial {0}, current is {1}r_ )r r T)r rB r] z!Error validating file signature: )
�get�AVAILABLE_KINDSr^ r: �formatrR r rf r9 r\ r
r, �dumps)rU rT � root_keys�kindsrg rh rb Zapplicable_keysrc r re Z
verified_keysra Z root_errorsr r r �_verify� s>
ro c C s$ t | �}t |�}t||||d� d S )N)rn )r. ro )ZsigfilerT Zrootfilern rU rm r r r �verify� s rp )r r r r r )r )r )F)N)N)!rX �
contextlibr, r" rE rM r= rj r8 r? r r r r rR r
r r r) r+ r. r3 r7 r9 r: �contextmanagerrC rG rW r\ rf ro rp r r r r �<module> s:
+