관리-도구
편집 파일: kcsig_verify.cpython-39.pyc
a d4h[ � @ s d dl Z d dlZd dlZd dlZd dlZd dlZd dlZdgZddiZdZed�Zed�Zed�Z G dd � d e �Z d-d d �Z d d� Z d.dd�Z!dd� Z"dd� Z#dd� Z$dd� Z%dd� Z&d d � Z'ej(d d � �Z)ej(d d!� �Z*d"d#� Z+d$d%� Z,d/d'd(�Z-d0d)d*�Z.d1d+d,�Z/dS )2� NZrsa4096�gpg)�type�kindZrole�serial�keyz/dev/shm� � c @ s e Zd ZdS )�ErrorN)�__name__� __module__� __qualname__� r r �)/usr/libexec/kcare/python/kcsig_verify.pyr s r �latin1c C sN t | �}|tu r| S |tu r&| �|�S |tu r:tt| ��S tdt|� ��d S )NzUnsupported pae type )r �btype�utype�encode�int�to_bytes�str� ValueError)�data�encoding�dtyper r r r s r c C s@ t | �}|tu r| S |tu r&| �d�S |tu r8| �d�S t�d S )Nzutf-8)r �ntyper �decoder r �NotImplementedError)r r r r r �nstr' s r �wc C sL | d }t ||��}|�|� W d � n1 s20 Y t�|| � d S )Nz.tmp)�open�write�os�rename)�fname�content�mode� tmp_fname�fr r r � atomic_write2 s (r( c C s4 t | ��}|�� W d � S 1 s&0 Y d S �N)r �read)r# r' r r r � read_file: s r+ c C s t �t| ��S r) )�json�loadsr+ )r# r r r � read_json? s r. c G s6 dt | � }| D ] }t|�}|dt |�|f 7 }q|S )Ns %ds %d%s)�lenr )�parts�result�pZbpr r r �paeC s r3 c s t � fdd�|D �� S )Nc s g | ] }� | �qS r r )�.0r' �r r r � <listcomp>N r z pae_fields.<locals>.<listcomp>)r3 )r �fieldsr r5 r � pae_fieldsL s r8 c C s t | t| d �S )Nr )r8 � PAE_FIELDSr5 r r r �pae_typeQ s r: c C s$ | d t vr tdt| d � ��d S )Nr zinvalid key type: )r9 r r )r r r r � check_keyU s r; c c s\ |r | V nLt jtdd��.}|�t| �� |�� |jV W d � n1 sN0 Y d S )Nz kcsig-data-��dir�prefix)�tempfile�NamedTemporaryFile�TMPDIRr r �flush�name)r � data_is_filer' r r r � temp_datafileZ s rE c c s4 t j| |d�}z|V W t�|� n t�|� 0 d S )N)r> r= )r? �mkdtemp�shutil�rmtree)r> r= Ztemp_dirr r r �temp_directorye s rI c C s� t tdd��p}dd|d| dd|g}tj|tjtjtjd�}|�|�\}}|jd krntd t|� d t|� ��W d � n1 s�0 Y d S ) Nz kcsig-gpgtmp-r< r z --homedirz --keyringz--verify�-)�stdin�stdout�stderrr zVerify error: � ) rI rA � subprocess�Popen�PIPE� communicate� returncode� Exceptionr )�keyfile�datafile�sigdataZtmp_dir�cmdr2 rL rM r r r �run_gpg_verifyn s rY c C s� t |� tjtdd��v}|�t�t|d ��� |�� t ||��,}t�t| ��}t |j ||� W d � n1 st0 Y W d � n1 s�0 Y d S )Nz kcsig-key-r< r ) r; r? r@ rA r �base64� b64decoder rB rE rY rC )� signaturer r rD �key_filerV rW r r r � verify_keyx s r^ Fc C s� d}i }| � � D ]j\}}||vr*d||< qzt||| ||� W n0 typ } zt|�||< W Y d }~qd }~0 0 |d7 }q||fS )Nr zno corresponding root key� )�itemsr^ rT r ) � signatures�keysr rD �count�errors�keyid�sig�er r r � verify_count� s " rh c C s� |� dd�}|� dd�}i }|p"t}i }| d �� D ]�\}} zXt| � | d |vrhd�| d |�||< n*| d |k r�d �| d |�||< n| ||< W q4 ty� } z$t| �||< W Y d } ~ q4W Y d } ~ q4d } ~ 0 0 q4i } |�� D ]B\}} t| d |d t| �d �\} } | |k �r| ||< q�| | |< q�d } | �� D ]b\}} z t | d | | |d d� W n2 t�y� } zt| �||< W Y d } ~ nd } ~ 0 0 | d7 } �q0| �s�t dt � |� ��d S )N� thresholdi' � min_seriali��rb r z&invalid kind {0}, accepted list is {1}r z"invalid serial {0}, current is {1}ra r5 r T)r rD r_ z!Error validating file signature: ) �get�AVAILABLE_KINDSr` r; �formatrT r rh r: r^ r r, �dumps)rW rV � root_keys�kindsri rj rd Zapplicable_keysre r rg Z verified_keysrc Z root_errorsr r r �_verify� s> $ " rq c C s$ t | �}t |�}t||||d� d S )N)rp )r. rq )ZsigfilerV Zrootfilerp rW ro r r r �verify� s rr )r )r )F)N)N)0r! rZ r? rO r, rG � contextlib�Union�List�Mapping�Any�Sequence�Optional�Tuple�Dict�IteratorZ ReleaseKeyZAnyKeyZRootKeyZanystrZ SignatureZRootKeysrl r9 rA r r r r rT r r r r( r+ r. r3 r8 r: r; �contextmanagerrE rI rY r^ rh rq rr r r r r �<module> s> +