Dashboard
PHP:
8.2.33
OS:
Linux
User:
lmarccom
/
/
usr
/
libexec
/
kcare
/
python
/
kcarectl
/
__pycache__
📤 Upload
📝 New File
📁 New Folder
Close
Editing: fetch.cpython-39.pyc
a ��;j� � @ s� d dl Z d dlZd dlZd dlZddlmZmZmZmZm Z m Z m Z ej ej gZdZdZdZddd �Zd d � Zd d � Ze je�ej�dd d�ddd��ZG dd� de�Ze jdd� �Z dd� Z dS )� N� )�auth�config� constants�errors� http_utils�selinux�utilsz /usr/bin/gpgz/var/lib/kcare/gpgzrelease.content.jsonFc C s� t j}|rtj}tjr&td d d� }nt}|D ]R}z|| | �}W q�W q. tjy~ } z ||d krj|�W Y d }~q.d }~0 0 q.|| }t � ||� |S )N���) r �urlopenr � urlopen_authr �FORCE_JSON_SIG_V3�SIG_VERIFY_ORDERr �NotFoundr � save_to_file) �url�dst�do_authZ urlopen_localZsig_extsZsig_ext� signatureZnfZsig_dst� r �+/usr/libexec/kcare/python/kcarectl/fetch.py�fetch_signature s r c C s$ t j�t�s tjd�t�dd��d S )Nz$No {0} present. Please install gnupgzgnupg not found��status)�os�path�isfile�GPG_BINr � KcareError�formatr r r r � check_gpg_bin) s r c C s t � |�tj�rrtj�td�}zt� || |� W n< tj yn } z"t � d� | t|����W Y d}~n d}~0 0 n�t|d��}|�� }W d � n1 s�0 Y tj�td�}zt�|| |� W n: ty� } z"t � d� | t|����W Y d}~n d}~0 0 dS )a8 Check a file signature using the gpg tool. If signature is wrong BadSignatureException will be raised. :param file_path: path to file which signature will be checked :param signature: a file with the signature :return: True in case of valid signature :raises: BadSignatureException zroot-keys.jsonzBad Signature: {0}: {1}N�rbz kcare_pub.key)r �endswithr �SIG_JSONr r �join� GPG_KEY_DIR� kcsig_verifyZverify�Errorr �BadSignatureExceptionr �str�open�readZrun_gpg_verify� Exception)� file_pathr Z root_keys�e�fZsigdataZkeyringr r r �check_gpg_signature. s . &r0 � )�count�delayc C s^ t �| �}t�|�}t�||� |r2|�| |� n |rNt| |dd�}t||� t � ||� |S )NT)r ) r r r �selinux_safe_tmpnamer r �checkr r0 r �rename)r r Zcheck_signature� hash_checker�response�tmpr r r r � fetch_urlM s r: c @ s e Zd Zdd� Zdd� ZdS )� HashCheckerc C s6 || _ t�|��d�d | _t�t�|��d | _d S )N�/�files) � content_filer �get_patch_server_url�rstrip� url_prefix�json�loads� read_file�hashes)�self�baseurlr> r r r �__init__^ s zHashChecker.__init__c C sv |t | j�d � }|| jvr4tjd�|| j�dd��t�t � |��� � }| j| d }||krrt� d�|||���d S )Nz3Invalid checksum: {0} not found in content file {1}zinvalid checksumr �sha256z<Invalid checksum: {0} has invalid checksum {1}, expected {2}) �lenrA rE r r r r> �hashlibrI r � read_file_bin� hexdigestr( )rF r �fnameZcfnameZhshZ expected_hshr r r r5 c s � �zHashChecker.checkN)�__name__� __module__� __qualname__rH r5 r r r r r; ] s r; c C sj t js d S | jsd S | �t�}tj�|�s^z tt � | jt�|t j � W n t j y\ Y d S 0 t| j|�S )N)r �USE_CONTENT_FILE_V3rG � cache_path� CONTENT_FILEr r �existsr: r r? � USE_SIGNATUREr r r; )�levelr r r r �get_hash_checkert s rX c s � fdd�}|S )z=Enrich request with a cache key, and save it if response had.c sl t �� }|d ur.d|vr i |d< ||d tj< � | i |��}|j�tj�}|d urh||krht �tj|� |S )N�headers)r � get_cache_keyr �CACHE_KEY_HEADERrY �get� atomic_write�CACHE_KEY_DUMP_PATH)�args�kwargs� cache_key�respZ new_cache_key��clblr r �wrapper� s z$wrap_with_cache_key.<locals>.wrapperr )rd re r rc r �wrap_with_cache_key� s rf )F)FN) rK rB r r& � r r r r r r r �SIGr# r r r% rT r r r0 �retry� check_excr( r: �objectr; �cachedrX rf r r r r �<module> s" $
Save
Cancel