|
Server IP : 184.107.3.203 / Your IP : 216.73.216.51 Web Server : Apache System : Linux dedicated2.avenfashion.com.ph 4.18.0-553.40.1.el8_10.x86_64 #1 SMP Mon Feb 10 12:11:18 EST 2025 x86_64 User : adminteladeoro ( 1015) PHP Version : 8.2.28 Disable Function : exec,passthru,shell_exec,system MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON Directory (0755) : /usr/libexec/kcare/python/__pycache__/ |
| [ Home ] | [ C0mmand ] | [ Upload File ] |
|---|
3
tHh[ � @ s d dl Z d dlZd dlZd dlZd dlZd dlZd dlZdgZdd1iZd Z e
d
�Z e
d �Z e
d �Z
G d d
� d
e�Zd2dd�Zdd� Zd3dd�Zdd� Zdd� Zdd� Zd d � Zd d � Zd d!� Zejd"d#� �Zejd$d%� �Zd&d'� Z d(d)� Z d4d+d,�Z d5d-d.�Z d6d/d0�Z dS )7� NZrsa4096�gpg�type�kind�role�serial�keyz/dev/shm� � c @ s e Zd ZdS )�ErrorN)�__name__�
__module__� __qualname__� r r �)/usr/libexec/kcare/python/kcsig_verify.pyr
s r
�latin1c C sN t | �}|tkr| S |tkr&| j|�S |tkr:tt| ��S tdt|� ��d S )NzUnsupported pae type )r �btype�utype�encode�int�to_bytes�str�
ValueError)�data�encoding�dtyper r r r s
r c C s@ t | �}|tkr| S |tkr&| jd�S |tkr8| jd�S t�d S )Nzutf-8)r �ntyper �decoder r �NotImplementedError)r r r r r �nstr' s
r �wc
C s8 | d }t ||��}|j|� W d Q R X tj|| � d S )Nz.tmp)�open�write�os�rename)�fname�content�mode� tmp_fname�fr r r � atomic_write2 s r) c C s t | ��
}|j� S Q R X d S )N)r �read)r$ r( r r r � read_file: s
r+ c C s t jt| ��S )N)�json�loadsr+ )r$ r r r � read_json? s r. c G s: dt | � }x(| D ] }t|�}|dt |�|f 7 }qW |S )Ns %ds %d%s)�lenr )�parts�result�pZbpr r r �paeC s
r3 c s t � fdd�|D �� S )Nc s g | ] }� | �qS r r )�.0r( )r r r �
<listcomp>N s z pae_fields.<locals>.<listcomp>)r3 )r Zfieldsr )r r �
pae_fieldsL s r6 c C s t | t| d �S )Nr )r6 �
PAE_FIELDS)r r r r �pae_typeQ s r8 c C s$ | d t kr tdt| d � ��d S )Nr zinvalid key type: )r7 r r )r r r r � check_keyU s r9 c
c sH |r | V n8t jtdd��$}|jt| �� |j� |jV W d Q R X d S )Nz kcsig-data-)�dir�prefix)�tempfile�NamedTemporaryFile�TMPDIRr! r �flush�name)r � data_is_filer( r r r �
temp_datafileZ s rB c c s* t j| |d�}z
|V W d tj|� X d S )N)r; r: )r< �mkdtemp�shutil�rmtree)r; r: Ztemp_dirr r r �temp_directorye s
rF c C s| t tdd��f}dd|d| dd|g}tj|tjtjtjd�}|j|�\}}|jd krntd
t|� d t|� ��W d Q R X d S ) Nz
kcsig-gpgtmp-)r: r; r z --homedirz --keyringz--verify�-)�stdin�stdout�stderrr zVerify error: �
) rF r> �
subprocess�Popen�PIPE� communicate�
returncode� Exceptionr )�keyfile�datafile�sigdataZtmp_dir�cmdr2 rI rJ r r r �run_gpg_verifyn s
rV c C sx t |� tjtdd��X}|jtjt|d ��� |j� t ||��"}tjt| ��}t
|j ||� W d Q R X W d Q R X d S )Nz
kcsig-key-)r: r; r ) r9 r< r= r> r! �base64� b64decoder r? rB rV r@ )� signaturer r rA �key_filerS rT r r r �
verify_keyx s r[ Fc C s� d}i }xt| j � D ]h\}}||kr,d||< qyt||| ||� W n. tk
rp } zt|�||< W Y d d }~X qX |d7 }qW ||fS )Nr zno corresponding root key� )�itemsr[ rQ r ) �
signatures�keysr rA �count�errors�keyid�sig�er r r � verify_count� s re c C s� |j dd�}|j dd�}i }|p"t}i }x�| d j� D ]�\}} yXt| � | d |krjdj| d |�||< n*| d |k r�d j| d |�||< n| ||< W q6 tk
r� }
zt|
�||< w6W Y d d }
~
X q6X q6W i } xN|j� D ]B\}} t| d
|d t| �d �\} }
| |k �r|
||< q�| | |< q�W d } xl| j� D ]`\}} y t | d
| | |d
d� W n0 tk
�r� }
zt|
�||< W Y d d }
~
X n
X | d7 } �q.W | �s�t
dt j |� ��d S )N� thresholdi' �
min_seriali��r_ r z&invalid kind {0}, accepted list is {1}r z"invalid serial {0}, current is {1}r^ )r r T)r rA r\ z!Error validating file signature: )
�get�AVAILABLE_KINDSr] r9 �formatrQ r re r8 r[ r
r, �dumps)rT rS � root_keys�kindsrf rg ra Zapplicable_keysrb r rd Z
verified_keysr` Z root_errorsr r r �_verify� s>
rn c C s$ t | �}t |�}t||||d� d S )N)rm )r. rn )ZsigfilerS Zrootfilerm rT rl r r r �verify� s ro )r r r r r )r )r )F)N)N)!r" rW r< rL r, rD �
contextlibri r7 r> r r r r rQ r
r r r) r+ r. r3 r6 r8 r9 �contextmanagerrB rF rV r[ re rn ro r r r r �<module> s:
+