File: //usr/libexec/kcare/python/kcarectl/__pycache__/fetch.cpython-312.pyc
�
p��g� � �t � d dl Z d dlZd dlZddlmZ ddlmZ ddlmZ ddlmZ ddlmZ ddlm Z dd lm
Z
d dl Z e
j e
j gZd
Zd Zd Zdd
�Zd� Zd� Z ej* e j, e j. � dd �� dd�� Z G d� de� Zej6 d� � Z d� Z y)� N� )�utils)�auth)�selinux)�
http_utils)�config)�errors)� constantsz /usr/bin/gpgz/var/lib/kcare/gpgzrelease.content.jsonc �B � t j }|rt j }t j
r
t d d d� }nt }|D ] } || |z � } n |z }t j |� |S # t j $ r}||d k( r|�Y d }~�Qd }~ww xY w)N���) r �urlopenr � urlopen_authr �FORCE_JSON_SIG_V3�SIG_VERIFY_ORDERr �NotFoundr � save_to_file) �url�dst�do_auth�
urlopen_local�sig_exts�sig_ext� signature�nf�sig_dsts �+/usr/libexec/kcare/python/kcarectl/fetch.py�fetch_signaturer s� � � �&�&�M�� �)�)�
�
� � �#�D�b�D�)��#��� �� �%�c�G�m�4�I� �� �G�m�G� ���y�'�*� �N��
��� ��(�2�,�&��� '�� �s � A7�7B �
B�B c � � t j j t � s(t j
dj
t � � �y )Nz$No {0} present. Please install gnupg)�os�path�isfile�GPG_BINr �
KcareError�format� � r �
check_gpg_binr' 0 s4 � �
�7�7�>�>�'� "�� � � F� M� M�g� V�W�W� #r& c � � t � |j t j � r=t j
j
t d� } t j || |� yt |d� 5 }|j! � }ddd� t j
j
t d� } t j" || � y# t j $ r3}t j dj | t |� � � �d}~ww xY w# 1 sw Y ��xY w# t$ $ r3}t j dj | t |� � � �d}~ww xY w)a8
Check a file signature using the gpg tool.
If signature is wrong BadSignatureException will be raised.
:param file_path: path to file which signature will be checked
:param signature: a file with the signature
:return: True in case of valid signature
:raises: BadSignatureException
zroot-keys.jsonzBad Signature: {0}: {1}N�rbz
kcare_pub.key)r' �endswithr
�SIG_JSONr r �join� GPG_KEY_DIR� kcsig_verify�verify�Errorr �BadSignatureExceptionr$ �str�open�read�run_gpg_verify� Exception)� file_pathr � root_keys�e�f�sigdata�keyrings r �check_gpg_signaturer= 5 s! � � �O����)�,�,�-��G�G�L�L��.>�?� � d� � � � �9�i� @� �)�T�
"� �a��f�f�h�G� � �'�'�,�,�{�O�<�� d� � '� '���G� D�� �!�!� d��.�.�/H�/O�/O�PY�[^�_`�[a�/b�c� c�� d�� � �� � d��.�.�/H�/O�/O�PY�[^�_`�[a�/b�c� c�� d�s< �C �3D�1D � D� .D
�
D�D� E�'.E�E� )�count�delayc � � t j | � }t j |� }t j
||� |r|j
| |� n |rt | |d�� }t ||� t j ||� |S )NT)r ) r r r �selinux_safe_tmpnamer r �checkr r= r �rename)r r �check_signature� hash_checker�response�tmpr s r � fetch_urlrI T ss � �� � ��%�H�
�
&�
&�s�
+�C� ���x��%�����3��$� �#�C��d�;� ��C��+��I�I�c�3�� �Or& c � � e Zd Zd� Zd� Zy)� HashCheckerc �� � || _ t j |� j d� dz | _ t j t j |� � d | _ y )N�/�files) � content_filer �get_patch_server_url�rstrip�
url_prefix�json�loads� read_file�hashes)�self�baseurlrO s r �__init__zHashChecker.__init__e sJ � � (��� �4�4�W�=�D�D�S�I�C�O����j�j�� � � �!>�?��H�� r& c � � |t | j � d }|| j vr/t j dj || j � � �t j t j |� � j � }| j | d }||k7 r&t j dj |||� � �y )Nz3Invalid checksum: {0} not found in content file {1}�sha256z<Invalid checksum: {0} has invalid checksum {1}, expected {2})
�lenrR rV r r# r$ rO �hashlibr[ r �
read_file_bin� hexdigestr1 )rW r �fname�cfname�hsh� expected_hshs r rC zHashChecker.checkj s� � ��S�� � �)�+�,�� ���� $��#�#�$Y�$`�$`�ag�im�iz�iz�${�|� |��n�n�U� 0� 0�� 7�8�B�B�D���{�{�6�*�8�4� � �,� ��.�.�N�U�U�V[�]`�bn�o��
� r& N)�__name__�
__module__� __qualname__rY rC r% r& r rK rK d s
� �I�
r& rK c � � t j sy | j sy | j t � }t
j j |� s> t t j | j t � |t j � t | j |� S # t j $ r Y y w xY w)N)r �USE_CONTENT_FILE_V3rX �
cache_path� CONTENT_FILEr r �existsrI r rP �
USE_SIGNATUREr r rK )�levelr s r �get_hash_checkerrn x s� � � � %� %�� �=�=��
�
�
�<�
(�C�
�7�7�>�>�#� � � �e�0�0�� � � �M�s�TZ�Th�Th� i� �u�}�}�c� *�*�� ��� �� �s �=B' �'B=�<B=c � � � � fd�}|S )z=Enrish request with a cache key, and save it if responce had.c �* �� t j � }|� d|vri |d< ||d t j < �| i |��}|j j t j � }|�)||k7 r$t j t j |� |S )N�headers)r �
get_cache_keyr
�CACHE_KEY_HEADERrq �get� atomic_write�CACHE_KEY_DUMP_PATH)�args�kwargs� cache_key�resp�
new_cache_key�clbls �r �wrapperz$wrap_with_cache_key.<locals>.wrapper� s� �� ��'�'�)� � � ���&�$&��y�!�<E�F�9� �i� 8� 8� 9��T�$�V�$�� � � �(�(��)C�)C�D�
� � $� �)�)C� � � �y� <� <�m� L�� r& r% )r| r} s ` r �wrap_with_cache_keyr~ � s �� �
� �Nr& )F)FN) r rS r] � r r r r r r r
r. �SIGr+ r r" r- rj r r' r= �retry� check_excr1 rI �objectrK �cachedrn r~ r% r& r �<module>r� s� ��
� � � � � � � � � � � �M�M�9�#5�#5�6� �
��"� �%� ��,X�
d�>
����
�V�
�
�f� :� :�
;�1�A�N� � O� � �&� �( � � � +� � +� r&