Google
Edit File: kcsig_verify.cpython-36.pyc
3 !S�i\ � @ s d dl Z d dlZd dlZd dlZd dlZd dlZd dlZdgZdd1iZd Z e d �Z e d �Z e d �Z G d d � d e�Zd2dd�Zdd� Zd3dd�Zdd� Zdd� Zdd� Zd d � Zd d � Zd d!� Zejd"d#� �Zejd$d%� �Zd&d'� Z d(d)� Z d4d+d,�Z d5d-d.�Z d6d/d0�Z dS )7� NZrsa4096�gpg�type�kind�role�serial�keyz/dev/shm� � c @ s e Zd ZdS )�ErrorN)�__name__� __module__� __qualname__� r r �)/usr/libexec/kcare/python/kcsig_verify.pyr s r �latin1c C sN t | �}|tkr| S |tkr&| j|�S |tkr:tt| ��S tdt|� ��d S )NzUnsupported pae type )r �btype�utype�encode�int�to_bytes�str� ValueError)�data�encoding�dtyper r r r s r c C s@ t | �}|tkr| S |tkr&| jd�S |tkr8| jd�S t�d S )Nzutf-8)r �ntyper �decoder r �NotImplementedError)r r r r r �nstr( s r �wc C s8 | d }t ||��}|j|� W d Q R X tj|| � d S )Nz.tmp)�open�write�os�rename)�fname�content�mode� tmp_fname�fr r r � atomic_write3 s r) c C s t | �� }|j� S Q R X d S )N)r �read)r$ r( r r r � read_file; s r+ c C s t jt| ��S )N)�json�loadsr+ )r$ r r r � read_json@ s r. c G s: dt | � }x(| D ] }t|�}|dt |�|f 7 }qW |S )Ns %ds %d%s)�lenr )�parts�result�pZbpr r r �paeD s r3 c s t � fdd�|D �� S )Nc s g | ] }� | �qS r r )�.0r( )r r r � <listcomp>O s z pae_fields.<locals>.<listcomp>)r3 )r �fieldsr )r r � pae_fieldsM s r7 c C s t | t| d �S )Nr )r7 � PAE_FIELDS)r r r r �pae_typeR s r9 c C s$ | d t kr tdt| d � ��d S )Nr zinvalid key type: )r8 r r )r r r r � check_keyV s r: c c sH |r | V n8t jtdd��$}|jt| �� |j� |jV W d Q R X d S )Nz kcsig-data-)�dir�prefix)�tempfile�NamedTemporaryFile�TMPDIRr! r �flush�name)r � data_is_filer( r r r � temp_datafile[ s rC c c s* t j| |d�}z |V W d tj|� X d S )N)r< r; )r= �mkdtemp�shutil�rmtree)r< r; Ztemp_dirr r r �temp_directoryf s rG c C s| t tdd��f}dd|d| dd|g}tj|tjtjtjd�}|j|�\}}|jd krntd t|� d t|� ��W d Q R X d S ) Nz kcsig-gpgtmp-)r; r< r z --homedirz --keyringz--verify�-)�stdin�stdout�stderrr zVerify error: � ) rG r? � subprocess�Popen�PIPE� communicate� returncode� Exceptionr )�keyfile�datafile�sigdataZtmp_dir�cmdr2 rJ rK r r r �run_gpg_verifyo s rW c C sx t |� tjtdd��X}|jtjt|d ��� |j� t ||��"}tjt| ��}t |j ||� W d Q R X W d Q R X d S )Nz kcsig-key-)r; r< r ) r: r= r> r? r! �base64� b64decoder r@ rC rW rA )� signaturer r rB �key_filerT rU r r r � verify_keyy s r\ Fc C s� d}i }xt| j � D ]h\}}||kr,d||< qyt||| ||� W n. tk rp } zt|�||< W Y d d }~X qX |d7 }qW ||fS )Nr zno corresponding root key� )�itemsr\ rR r ) � signatures�keysr rB �count�errors�keyid�sig�er r r � verify_count� s rf c C s� |j dd�}|j dd�}i }|p"t}i }x�| d j� D ]�\}} yXt| � | d |krjdj| d |�||< n*| d |k r�d j| d |�||< n| ||< W q6 tk r� } zt| �||< w6W Y d d } ~ X q6X q6W i } xN|j� D ]B\}} t| d |d t| �d �\} } | |k �r| ||< q�| | |< q�W d } xl| j� D ]`\}} y t | d | | |d d� W n0 tk �r� } zt| �||< W Y d d } ~ X n X | d7 } �q.W | �s�t dt j |� ��d S )N� thresholdi' � min_seriali��r` r z&invalid kind {0}, accepted list is {1}r z"invalid serial {0}, current is {1}r_ )r r T)r rB r] z!Error validating file signature: ) �get�AVAILABLE_KINDSr^ r: �formatrR r rf r9 r\ r r, �dumps)rU rT � root_keys�kindsrg rh rb Zapplicable_keysrc r re Z verified_keysra Z root_errorsr r r �_verify� s> ro c C s$ t | �}t |�}t||||d� d S )N)rn )r. ro )ZsigfilerT Zrootfilern rU rm r r r �verify� s rp )r r r r r )r )r )F)N)N)!rX � contextlibr, r" rE rM r= rj r8 r? r r r r rR r r r r) r+ r. r3 r7 r9 r: �contextmanagerrC rG rW r\ rf ro rp r r r r �<module> s: +