| Disable Functions: Path : /usr/libexec/kcare/python/kcarectl/ |
| Current File : //usr/libexec/kcare/python/kcarectl/fetch.pyo |
�
o��fc @ sM d d l Z d d l Z d d l Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m
Z
d d l Z e
j e
j
g Z d
Z d Z d Z e d
� Z d � Z d � Z e j e j e j � d d d d �e d d � � Z d e f d � � YZ e j d � � Z d � Z d S( i����Ni ( t utils( t auth( t selinux( t
http_utils( t config( t errors( t constantss /usr/bin/gpgs /var/lib/kcare/gpgs release.content.jsonc C s� t j } | r t j } n t j r: t d d d � } n t } xU | D]M } y | | | � } PWqG t j k
r� } | | d k r� | � q� qG XqG W| | } t j
| | � | S( Ni����( R t urlopenR t urlopen_authR t FORCE_JSON_SIG_V2t SIG_VERIFY_ORDERR t NotFoundR t save_to_file( t urlt dstt do_autht
urlopen_localt sig_extst sig_extt signaturet nft sig_dst( ( s+ /usr/libexec/kcare/python/kcarectl/fetch.pyt fetch_signature s
c C s1 t j j t � s- t j d j t � � � n d S( Ns$ No {0} present. Please install gnupg( t ost patht isfilet GPG_BINR t
KcareErrort format( ( ( s+ /usr/libexec/kcare/python/kcarectl/fetch.pyt
check_gpg_bin0 s c C s
t � | j t j � r� t j j t d � } y t j | | | � Wq t j
k
r~ } t j d j
| t | � � � � q Xn� t | d � � } | j � } Wd QXt j j t d � } y t j | | | � Wn4 t k
r} t j d j
| t | � � � � n Xd S( s8
Check a file signature using the gpg tool.
If signature is wrong BadSignatureException will be raised.
:param file_path: path to file which signature will be checked
:param signature: a file with the signature
:return: True in case of valid signature
:raises: BadSignatureException
s root-keys.jsons Bad Signature: {0}: {1}t rbNs
kcare_pub.key( R t endswithR t SIG_JSONR R t joint GPG_KEY_DIRt kcsig_verifyt verifyt ErrorR t BadSignatureExceptionR t strt opent readt run_gpg_verifyt Exception( t file_pathR t root_keyst et ft sigdatat keyring( ( s+ /usr/libexec/kcare/python/kcarectl/fetch.pyt check_gpg_signature5 s
(t counti t delayi c C s� t j | � } t j | � } t j | | � | rG | j | | � n+ | rr t | | d t �} t | | � n t
j | | � | S( NR ( R R R t selinux_safe_tmpnameR R t checkR t TrueR2 R t rename( R
R t check_signaturet hash_checkert responset tmpR ( ( s+ /usr/libexec/kcare/python/kcarectl/fetch.pyt fetch_urlT s t HashCheckerc B s e Z d � Z d � Z RS( c C sK | | _ t j | � j d � d | _ t j t j | � � d | _ d S( Nt /t files( t content_fileR t get_patch_server_urlt rstript
url_prefixt jsont loadst read_filet hashes( t selft baseurlRA ( ( s+ /usr/libexec/kcare/python/kcarectl/fetch.pyt __init__e s c C s� | t | j � } | | j k rC t j d j | | j � � � n t j t j
| � � j � } | j | d } | | k r� t j d j | | | � � � n d S( Ns3 Invalid checksum: {0} not found in content file {1}t sha256s< Invalid checksum: {0} has invalid checksum {1}, expected {2}(
t lenRD RH R R R RA t hashlibRL R t
read_file_bint hexdigestR& ( RI R
t fnamet cfnamet hsht expected_hsh( ( s+ /usr/libexec/kcare/python/kcarectl/fetch.pyR6 j s ! ( t __name__t
__module__RK R6 ( ( ( s+ /usr/libexec/kcare/python/kcarectl/fetch.pyR> d s c C s� t j s
d S| j s d S| j t � } t j j | � s| y& t t
j | j t � | t j � Wq| t
j k
rx d SXn t | j | � S( N( R t USE_CONTENT_FILE_V2t NoneRJ t
cache_patht CONTENT_FILER R t existsR= R RB t
USE_SIGNATURER R R> ( t levelR ( ( s+ /usr/libexec/kcare/python/kcarectl/fetch.pyt get_hash_checkerx s &c s � f d � } | S( s= Enrish request with a cache key, and save it if responce had.c s� t j � } | d k rE d | k r1 i | d <n | | d t j <n � | | � } | j j t j � } | d k r� | | k r� t j t j | � n | S( Nt headers( R t
get_cache_keyRX R t CACHE_KEY_HEADERR_ t gett atomic_writet CACHE_KEY_DUMP_PATH( t argst kwargst cache_keyt respt
new_cache_key( t clbl( s+ /usr/libexec/kcare/python/kcarectl/fetch.pyt wrapper� s
( ( Rj Rk ( ( Rj s+ /usr/libexec/kcare/python/kcarectl/fetch.pyt wrap_with_cache_key� s ( R RE RN t R R R R R R R R# t SIGR R
R R" RZ t FalseR R R2 t retryt check_excR& RX R= t objectR> t cachedR^ Rl ( ( ( s+ /usr/libexec/kcare/python/kcarectl/fetch.pyt <module> s, $