File: //usr/libexec/kcare/python/kcarectl/fetch.pyc
�
%��ic @ s d d l Z d d l Z d d l Z d d l Z d d l m Z m Z m Z m Z m Z m
Z
m Z e j e j
g Z d Z d Z d Z e d � Z d � Z d � Z e j e j e j � d
d d d
�e d d � � Z d e f d � � YZ e j d � � Z d � Z d S( i����Ni ( t autht configt constantst errorst
http_utilst selinuxt utilss /usr/bin/gpgs /var/lib/kcare/gpgs release.content.jsonc C s� t j } | r t j } n t j r: t d d d � } n t } xU | D]M } y | | | � } PWqG t j k
r� } | | d k r� | � q� qG XqG W| | } t j
| | � | S( Ni����( R t urlopenR t urlopen_authR t FORCE_JSON_SIG_V3t SIG_VERIFY_ORDERR t NotFoundR t save_to_file( t urlt dstt do_autht
urlopen_localt sig_extst sig_extt signaturet nft sig_dst( ( s+ /usr/libexec/kcare/python/kcarectl/fetch.pyt fetch_signature s
c C s7 t j j t � s3 t j d j t � d d �� n d S( Ns$ No {0} present. Please install gnupgt statuss gnupg not found( t ost patht isfilet GPG_BINR t
KcareErrort format( ( ( s+ /usr/libexec/kcare/python/kcarectl/fetch.pyt
check_gpg_bin) s c C s
t � | j t j � r� t j j t d � } y t j | | | � Wq t j
k
r~ } t j d j
| t | � � � � q Xn� t | d � � } | j � } Wd QXt j j t d � } y t j | | | � Wn4 t k
r} t j d j
| t | � � � � n Xd S( s8
Check a file signature using the gpg tool.
If signature is wrong BadSignatureException will be raised.
:param file_path: path to file which signature will be checked
:param signature: a file with the signature
:return: True in case of valid signature
:raises: BadSignatureException
s root-keys.jsons Bad Signature: {0}: {1}t rbNs
kcare_pub.key( R t endswithR t SIG_JSONR R t joint GPG_KEY_DIRt kcsig_verifyt verifyt ErrorR t BadSignatureExceptionR t strt opent readt run_gpg_verifyt Exception( t file_pathR t root_keyst et ft sigdatat keyring( ( s+ /usr/libexec/kcare/python/kcarectl/fetch.pyt check_gpg_signature. s
(t counti t delayi c C s� t j | � } t j | � } t j | | � | rG | j | | � n+ | rr t | | d t �} t | | � n t
j | | � | S( NR ( R R R t selinux_safe_tmpnameR R t checkR t TrueR3 R t rename( R
R t check_signaturet hash_checkert responset tmpR ( ( s+ /usr/libexec/kcare/python/kcarectl/fetch.pyt fetch_urlM s t HashCheckerc B s e Z d � Z d � Z RS( c C sK | | _ t j | � j d � d | _ t j t j | � � d | _ d S( Nt /t files( t content_fileR t get_patch_server_urlt rstript
url_prefixt jsont loadst read_filet hashes( t selft baseurlRB ( ( s+ /usr/libexec/kcare/python/kcarectl/fetch.pyt __init__^ s c C s� | t | j � } | | j k rI t j d j | | j � d d �� n t j t j
| � � j � } | j | d } | | k r� t j d j | | | � � � n d S( Ns3 Invalid checksum: {0} not found in content file {1}R s invalid checksumt sha256s< Invalid checksum: {0} has invalid checksum {1}, expected {2}(
t lenRE RI R R R RB t hashlibRM R t
read_file_bint hexdigestR' ( RJ R
t fnamet cfnamet hsht expected_hsh( ( s+ /usr/libexec/kcare/python/kcarectl/fetch.pyR7 c s ( t __name__t
__module__RL R7 ( ( ( s+ /usr/libexec/kcare/python/kcarectl/fetch.pyR? ] s c C s� t j s
d S| j s d S| j t � } t j j | � s| y& t t
j | j t � | t j � Wq| t
j k
rx d SXn t | j | � S( N( R t USE_CONTENT_FILE_V3t NoneRK t
cache_patht CONTENT_FILER R t existsR> R RC t
USE_SIGNATURER R R? ( t levelR ( ( s+ /usr/libexec/kcare/python/kcarectl/fetch.pyt get_hash_checkert s &c s � f d � } | S( s= Enrich request with a cache key, and save it if response had.c s� t j � } | d k rE d | k r1 i | d <n | | d t j <n � | | � } | j j t j � } | d k r� | | k r� t j t j | � n | S( Nt headers( R t
get_cache_keyRY R t CACHE_KEY_HEADERR` t gett atomic_writet CACHE_KEY_DUMP_PATH( t argst kwargst cache_keyt respt
new_cache_key( t clbl( s+ /usr/libexec/kcare/python/kcarectl/fetch.pyt wrapper� s
( ( Rk Rl ( ( Rk s+ /usr/libexec/kcare/python/kcarectl/fetch.pyt wrap_with_cache_key� s ( RO RF R R$ t R R R R R R R t SIGR! R
R R# R[ t FalseR R R3 t retryt check_excR' RY R> t objectR? t cachedR_ Rm ( ( ( s+ /usr/libexec/kcare/python/kcarectl/fetch.pyt <module> s 4 $