| Dir : /usr/libexec/kcare/python/kcarectl/__pycache__/ |
| Server: Linux red.truehostdns.com 4.18.0-553.150.1.el8_10.x86_64 #1 SMP Fri Jul 31 15:23:31 EDT 2026 x86_64 IP: 51.161.15.103 |
| Dir : //usr/libexec/kcare/python/kcarectl/__pycache__/fetch.cpython-36.pyc |
3
0�j� � @ s� d dl Z d dlZd dlZd dlZddlmZmZmZmZm Z m
Z
m Z ej ej
gZdZdZdZddd �Zd
d � Zd d
� Ze jejej�dd d�ddd��ZG dd� de�Ze jdd� �Z dd� Z dS )� N� )�auth�config� constants�errors�
http_utils�selinux�utilsz /usr/bin/gpgz/var/lib/kcare/gpgzrelease.content.jsonFc C s� t j}|rtj}tjr&td d d� }nt}xT|D ]L}y|| | �}P W q0 tjk
rz } z||d krj|�W Y d d }~X q0X q0W || }t j
||� |S )Nr ���r
) r �urlopenr � urlopen_authr �FORCE_JSON_SIG_V3�SIG_VERIFY_ORDERr �NotFoundr � save_to_file) �url�dst�do_authZ
urlopen_localZsig_extsZsig_ext� signatureZnfZsig_dst� r �+/usr/libexec/kcare/python/kcarectl/fetch.py�fetch_signature s
r c C s$ t jjt�s tjdjt�dd��d S )Nz$No {0} present. Please install gnupgzgnupg not found)�status)�os�path�isfile�GPG_BINr �
KcareError�formatr r r r �
check_gpg_bin) s r c C s� t � |jtj�rptjjtd�}ytj || |� W q� tj
k
rl } z t j dj
| t|����W Y dd}~X q�X nxt|d��}|j� }W dQ R X tjjtd�}ytj|| |� W n8 tk
r� } z t j dj
| t|����W Y dd}~X nX dS )a8
Check a file signature using the gpg tool.
If signature is wrong BadSignatureException will be raised.
:param file_path: path to file which signature will be checked
:param signature: a file with the signature
:return: True in case of valid signature
:raises: BadSignatureException
zroot-keys.jsonzBad Signature: {0}: {1}N�rbz
kcare_pub.key)r �endswithr �SIG_JSONr r �join� GPG_KEY_DIR� kcsig_verifyZverify�Errorr �BadSignatureExceptionr �str�open�readZrun_gpg_verify� Exception)� file_pathr Z root_keys�e�fZsigdataZkeyringr r r �check_gpg_signature. s
* r/ � )�count�delayc C s^ t j| �}tj|�}tj||� |r2|j| |� n |rNt| |dd�}t||� t j
||� |S )NT)r ) r r r �selinux_safe_tmpnamer r �checkr r/ r �rename)r r Zcheck_signature� hash_checker�response�tmpr r r r � fetch_urlM s
r9 c @ s e Zd Zdd� Zdd� ZdS )� HashCheckerc C s6 || _ tj|�jd�d | _tjtj|��d | _d S )N�/�files) � content_filer �get_patch_server_url�rstrip�
url_prefix�json�loads� read_file�hashes)�self�baseurlr= r r r �__init__^ s zHashChecker.__init__c C sv |t | j�d � }|| jkr4tjdj|| j�dd��tjt j
|��j � }| j| d }||krrtj dj|||���d S )Nz3Invalid checksum: {0} not found in content file {1}zinvalid checksum)r �sha256z<Invalid checksum: {0} has invalid checksum {1}, expected {2})
�lenr@ rD r r r r= �hashlibrH r �
read_file_bin� hexdigestr' )rE r �fnameZcfnameZhshZ expected_hshr r r r4 c s
zHashChecker.checkN)�__name__�
__module__� __qualname__rG r4 r r r r r: ] s r: c C sj t js
d S | jsd S | jt�}tjj|�s^y tt j
| jt�|t j � W n t j
k
r\ d S X t| j|�S )N)r �USE_CONTENT_FILE_V3rF �
cache_path� CONTENT_FILEr r �existsr9 r r> �
USE_SIGNATUREr r r: )�levelr r r r �get_hash_checkert s
rW c s � fdd�}|S )z=Enrich request with a cache key, and save it if response had.c sh t j� }|d k r.d|kr i |d< ||d tj< � | |�}|jjtj�}|d k rd||krdt jtj|� |S )N�headers)r �
get_cache_keyr �CACHE_KEY_HEADERrX �get� atomic_write�CACHE_KEY_DUMP_PATH)�args�kwargs� cache_key�respZ
new_cache_key)�clblr r �wrapper� s
z$wrap_with_cache_key.<locals>.wrapperr )rb rc r )rb r �wrap_with_cache_key� s rd )F)FN) rJ rA r r% � r r r r r r r �SIGr" r r r$ rS r r r/ �retry� check_excr' r9 �objectr: �cachedrW rd r r r r �<module> s $