Sindbad~EG File Manager
3
��"h� � @ s� d dl Z d dlZd dlZddlmZ ddlmZ ddlmZ ddlmZ ddlmZ ddlm Z dd lm
Z
d dl Z e
j e
j
gZd
Zd Zd Zd dd�Zdd� Zdd� Zeje je j�dd d�d dd��ZG dd� de�Zejdd� �Z d d � Z dS ) � N� )�utils)�auth)�selinux)�
http_utils)�config)�errors)� constantsz /usr/bin/gpgz/var/lib/kcare/gpgzrelease.content.jsonFc C s� t j}|rtj}tjr&td d d� }nt}xT|D ]L}y|| | �}P W q0 tjk
rz } z||d krj|�W Y d d }~X q0X q0W || }t j
||� |S )Nr ���r
) r �urlopenr � urlopen_authr �FORCE_JSON_SIG_V3�SIG_VERIFY_ORDERr �NotFoundr � save_to_file) �url�dst�do_authZ
urlopen_localZsig_extsZsig_ext� signatureZnfZsig_dst� r �+/usr/libexec/kcare/python/kcarectl/fetch.py�fetch_signature s
r c C s t jjt�s tjdjt���d S )Nz$No {0} present. Please install gnupg)�os�path�isfile�GPG_BINr �
KcareError�formatr r r r �
check_gpg_bin0 s r c C s� t � |jtj�rptjjtd�}ytj || |� W q� tj
k
rl } z t j dj
| t|����W Y dd}~X q�X nxt|d��}|j� }W dQ R X tjjtd�}ytj|| |� W n8 tk
r� } z t j dj
| t|����W Y dd}~X nX dS )a8
Check a file signature using the gpg tool.
If signature is wrong BadSignatureException will be raised.
:param file_path: path to file which signature will be checked
:param signature: a file with the signature
:return: True in case of valid signature
:raises: BadSignatureException
zroot-keys.jsonzBad Signature: {0}: {1}N�rbz
kcare_pub.key)r �endswithr �SIG_JSONr r �join� GPG_KEY_DIR� kcsig_verifyZverify�Errorr �BadSignatureExceptionr �str�open�readZrun_gpg_verify� Exception)Z file_pathr Z root_keys�e�fZsigdataZkeyringr r r �check_gpg_signature5 s
* r- � )�count�delayc C s^ t j| �}tj|�}tj||� |r2|j| |� n |rNt| |dd�}t||� t j
||� |S )NT)r ) r r r �selinux_safe_tmpnamer r �checkr r- r �rename)r r �check_signature� hash_checker�response�tmpr r r r � fetch_urlT s
r8 c @ s e Zd Zdd� Zdd� ZdS )� HashCheckerc C s6 || _ tj|�jd�d | _tjtj|��d | _d S )N�/�files) � content_filer �get_patch_server_url�rstrip�
url_prefix�json�loads� read_file�hashes)�self�baseurlr< r r r �__init__e s zHashChecker.__init__c C sr |t | j�d � }|| jkr0tjdj|| j���tjt j
|��j � }| j| d }||krntj dj|||���d S )Nz3Invalid checksum: {0} not found in content file {1}�sha256z<Invalid checksum: {0} has invalid checksum {1}, expected {2})
�lenr? rC r r r r< �hashlibrG r �
read_file_bin� hexdigestr& )rD r �fnameZcfnameZhshZ expected_hshr r r r2 j s
zHashChecker.checkN)�__name__�
__module__� __qualname__rF r2 r r r r r9 d s r9 c C sj t js
d S | jsd S | jt�}tjj|�s^y tt j
| jt�|t j � W n t j
k
r\ d S X t| j|�S )N)r �USE_CONTENT_FILE_V3rE �
cache_path� CONTENT_FILEr r �existsr8 r r= �
USE_SIGNATUREr r r9 )�levelr r r r �get_hash_checkerx s
rV c s � fdd�}|S )z=Enrish request with a cache key, and save it if responce had.c sh t j� }|d k r.d|kr i |d< ||d tj< � | |�}|jjtj�}|d k rd||krdt jtj|� |S )N�headers)r �
get_cache_keyr �CACHE_KEY_HEADERrW �get� atomic_write�CACHE_KEY_DUMP_PATH)�args�kwargs� cache_key�respZ
new_cache_key)�clblr r �wrapper� s
z$wrap_with_cache_key.<locals>.wrapperr )ra rb r )ra r �wrap_with_cache_key� s rc )F)FN) r r@ rI � r r r r r r r r$ �SIGr! r r r# rR r r r- �retry� check_excr& r8 �objectr9 �cachedrV rc r r r r �<module> s,
Sindbad File Manager Version 1.0, Coded By Sindbad EG ~ The Terrorists