Google
Edit File: fetch.cpython-36.pyc
3 !S�i� � @ s� d dl Z d dlZd dlZd dlZddlmZmZmZmZm Z m Z m Z ej ej gZdZdZdZddd �Zd d � Zd d � Ze jejej�dd d�ddd��ZG dd� de�Ze jdd� �Z dd� Z dS )� N� )�auth�config� constants�errors� http_utils�selinux�utilsz /usr/bin/gpgz/var/lib/kcare/gpgzrelease.content.jsonFc C s� t j}|rtj}tjr&td d d� }nt}xT|D ]L}y|| | �}P W q0 tjk rz } z||d krj|�W Y d d }~X q0X q0W || }t j ||� |S )Nr ���r ) r �urlopenr � urlopen_authr �FORCE_JSON_SIG_V3�SIG_VERIFY_ORDERr �NotFoundr � save_to_file) �url�dst�do_authZ urlopen_localZsig_extsZsig_ext� signatureZnfZsig_dst� r �+/usr/libexec/kcare/python/kcarectl/fetch.py�fetch_signature s r c C s$ t jjt�s tjdjt�dd��d S )Nz$No {0} present. Please install gnupgzgnupg not found)�status)�os�path�isfile�GPG_BINr � KcareError�formatr r r r � check_gpg_bin) s r c C s� t � |jtj�rptjjtd�}ytj || |� W q� tj k rl } z t j dj | t|����W Y dd}~X q�X nxt|d��}|j� }W dQ R X tjjtd�}ytj|| |� W n8 tk r� } z t j dj | t|����W Y dd}~X nX dS )a8 Check a file signature using the gpg tool. If signature is wrong BadSignatureException will be raised. :param file_path: path to file which signature will be checked :param signature: a file with the signature :return: True in case of valid signature :raises: BadSignatureException zroot-keys.jsonzBad Signature: {0}: {1}N�rbz kcare_pub.key)r �endswithr �SIG_JSONr r �join� GPG_KEY_DIR� kcsig_verifyZverify�Errorr �BadSignatureExceptionr �str�open�readZrun_gpg_verify� Exception)� file_pathr Z root_keys�e�fZsigdataZkeyringr r r �check_gpg_signature. s * r/ � )�count�delayc C s^ t j| �}tj|�}tj||� |r2|j| |� n |rNt| |dd�}t||� t j ||� |S )NT)r ) r r r �selinux_safe_tmpnamer r �checkr r/ r �rename)r r Zcheck_signature� hash_checker�response�tmpr r r r � fetch_urlM s r9 c @ s e Zd Zdd� Zdd� ZdS )� HashCheckerc C s6 || _ tj|�jd�d | _tjtj|��d | _d S )N�/�files) � content_filer �get_patch_server_url�rstrip� url_prefix�json�loads� read_file�hashes)�self�baseurlr= r r r �__init__^ s zHashChecker.__init__c C sv |t | j�d � }|| jkr4tjdj|| j�dd��tjt j |��j � }| j| d }||krrtj dj|||���d S )Nz3Invalid checksum: {0} not found in content file {1}zinvalid checksum)r �sha256z<Invalid checksum: {0} has invalid checksum {1}, expected {2}) �lenr@ rD r r r r= �hashlibrH r � read_file_bin� hexdigestr' )rE r �fnameZcfnameZhshZ expected_hshr r r r4 c s zHashChecker.checkN)�__name__� __module__� __qualname__rG r4 r r r r r: ] s r: c C sj t js d S | jsd S | jt�}tjj|�s^y tt j | jt�|t j � W n t j k r\ d S X t| j|�S )N)r �USE_CONTENT_FILE_V3rF � cache_path� CONTENT_FILEr r �existsr9 r r> � USE_SIGNATUREr r r: )�levelr r r r �get_hash_checkert s rW c s � fdd�}|S )z=Enrich request with a cache key, and save it if response had.c sh t j� }|d k r.d|kr i |d< ||d tj< � | |�}|jjtj�}|d k rd||krdt jtj|� |S )N�headers)r � get_cache_keyr �CACHE_KEY_HEADERrX �get� atomic_write�CACHE_KEY_DUMP_PATH)�args�kwargs� cache_key�respZ new_cache_key)�clblr r �wrapper� s z$wrap_with_cache_key.<locals>.wrapperr )rb rc r )rb r �wrap_with_cache_key� s rd )F)FN) rJ rA r r% � r r r r r r r �SIGr" r r r$ rS r r r/ �retry� check_excr' r9 �objectr: �cachedrW rd r r r r �<module> s $