관리-도구
편집 파일: fetch.cpython-39.pyc
a d4h� � @ s� d dl Z d dlZd dlZddlmZ ddlmZ ddlmZ ddlmZ ddlmZ ddlm Z dd lm Z d dl Z e j e j gZd Zd Zd Zd dd�Zdd� Zdd� Zeje �e j�dd d�d dd��ZG dd� de�Zejdd� �Z d d � Z dS ) � N� )�utils)�auth)�selinux)� http_utils)�config)�errors)� constantsz /usr/bin/gpgz/var/lib/kcare/gpgzrelease.content.jsonFc C s� t j}|rtj}tjr&td d d� }nt}|D ]R}z|| | �}W q�W q. tjy~ } z ||d krj|�W Y d }~q.d }~0 0 q.|| }t � ||� |S )N���) r �urlopenr � urlopen_authr �FORCE_JSON_SIG_V3�SIG_VERIFY_ORDERr �NotFoundr � save_to_file) �url�dst�do_authZ urlopen_localZsig_extsZsig_ext� signatureZnfZsig_dst� r �+/usr/libexec/kcare/python/kcarectl/fetch.py�fetch_signature s r c C s t j�t�s t�d�t���d S )Nz$No {0} present. Please install gnupg)�os�path�isfile�GPG_BINr � KcareError�formatr r r r � check_gpg_bin0 s r c C s t � |�tj�rrtj�td�}zt� || |� W n< tj yn } z"t � d� | t|����W Y d}~n d}~0 0 n�t|d��}|�� }W d � n1 s�0 Y tj�td�}zt�|| |� W n: ty� } z"t � d� | t|����W Y d}~n d}~0 0 dS )a8 Check a file signature using the gpg tool. If signature is wrong BadSignatureException will be raised. :param file_path: path to file which signature will be checked :param signature: a file with the signature :return: True in case of valid signature :raises: BadSignatureException zroot-keys.jsonzBad Signature: {0}: {1}N�rbz kcare_pub.key)r �endswithr �SIG_JSONr r �join� GPG_KEY_DIR� kcsig_verifyZverify�Errorr �BadSignatureExceptionr �str�open�readZrun_gpg_verify� Exception)Z file_pathr Z root_keys�e�fZsigdataZkeyringr r r �check_gpg_signature5 s . &r- � )�count�delayc C s^ t �| �}t�|�}t�||� |r2|�| |� n |rNt| |dd�}t||� t � ||� |S )NT)r ) r r r �selinux_safe_tmpnamer r �checkr r- r �rename)r r �check_signature� hash_checker�response�tmpr r r r � fetch_urlT s r8 c @ s e Zd Zdd� Zdd� ZdS )� HashCheckerc C s6 || _ t�|��d�d | _t�t�|��d | _d S )N�/�files) � content_filer �get_patch_server_url�rstrip� url_prefix�json�loads� read_file�hashes)�self�baseurlr< r r r �__init__e s zHashChecker.__init__c C sr |t | j�d � }|| jvr0t�d�|| j���t�t � |��� � }| j| d }||krnt� d�|||���d S )Nz3Invalid checksum: {0} not found in content file {1}�sha256z<Invalid checksum: {0} has invalid checksum {1}, expected {2}) �lenr? rC r r r r< �hashlibrG r � read_file_bin� hexdigestr& )rD r �fnameZcfnameZhshZ expected_hshr r r r2 j s �zHashChecker.checkN)�__name__� __module__� __qualname__rF r2 r r r r r9 d s r9 c C sj t js d S | jsd S | �t�}tj�|�s^z tt � | jt�|t j � W n t j y\ Y d S 0 t| j|�S )N)r �USE_CONTENT_FILE_V3rE � cache_path� CONTENT_FILEr r �existsr8 r r= � USE_SIGNATUREr r r9 )�levelr r r r �get_hash_checkerx s rV c s � fdd�}|S )z=Enrish request with a cache key, and save it if responce had.c sl t �� }|d ur.d|vr i |d< ||d tj< � | i |��}|j�tj�}|d urh||krht �tj|� |S )N�headers)r � get_cache_keyr �CACHE_KEY_HEADERrW �get� atomic_write�CACHE_KEY_DUMP_PATH)�args�kwargs� cache_key�respZ new_cache_key��clblr r �wrapper� s z$wrap_with_cache_key.<locals>.wrapperr )rb rc r ra r �wrap_with_cache_key� s rd )F)FN) r r@ rI � r r r r r r r r$ �SIGr! r r r# rR r r r- �retry� check_excr& r8 �objectr9 �cachedrV rd r r r r �<module> s.