| Server IP : 216.92.14.13 / Your IP : 216.73.217.126 Web Server : Apache System : Linux vps4089.pairvps.com 5.15.0-190-generic #200-Ubuntu SMP Fri Aug 7 15:06:04 UTC 2026 x86_64 User : rmlac2fmr ( 1040637) PHP Version : 8.2.32 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /usr/libexec/kcare/python/__pycache__/ |
Upload File : |
o
�Ri\ � @ s d dl Z d dlZd dlZd dlZd dlZd dlZd dlZ dgZddiZd Zed
�Z ed �Z ed �Z G d d
� d
e �Z d0dd�Z!dd� Z"d1dd�Z#dd� Z$dd� Z%dd� Z&d d � Z'd d � Z(d d!� Z)ej*d"d#� �Z+ej*d$d%� �Z,d&d'� Z-d(d)� Z.d2d*d+�Z/d3d,d-�Z0d3d.d/�Z1dS )4� NF) �Any�Dict�Iterator�List�Mapping�Optional�Sequence�Tuple�Union� )�AnyKey�
ReleaseKey�RootKey�RootKeys� Signature�anystr�rsa4096�gpg)�type�kind�role�serial�keyz/dev/shm� � c @ s e Zd ZdS )�ErrorN)�__name__�
__module__� __qualname__� r r �)/usr/libexec/kcare/python/kcsig_verify.pyr s r �latin1c C sJ t | �}|tu r
| S |tu r| �|�S |tu r tt| ��S tdt|� ��)NzUnsupported pae type )r �btype�utype�encode�int�to_bytes�str�
ValueError)�data�encoding�dtyper r r r& s
r& c C s< t | �}|tu r
| S |tu r| �d�S |tu r | �d�S t�)Nzutf-8)r �ntyper" �decoder# r$ �NotImplementedError)r) r+ r r r �nstr( s
r/ �wc C sL | d }t ||��
}|�|� W d � n1 sw Y t�|| � d S )Nz.tmp)�open�write�os�rename)�fname�content�mode� tmp_fname�fr r r � atomic_write3 s
�r: c C s4 t | �� }|�� W d � S 1 sw Y d S �N)r1 �read)r5 r9 r r r � read_file; s
$�r= c C s t �t| ��S r; )�json�loadsr= )r5 r r r � read_json@ s r@ c G s6 dt | � }| D ]}t|�}|dt |�|f 7 }q|S )Ns %ds %d%s)�lenr& )�parts�result�p�bpr r r �paeD s
rF c s t � fdd�|D �� S )Nc s g | ]}� | �qS r r )�.0r9 �r) r r �
<listcomp>O s z pae_fields.<locals>.<listcomp>)rF )r) �fieldsr rH r �
pae_fieldsM s rK c C s t | t| d �S )Nr )rK �
PAE_FIELDSrH r r r �pae_typeR s rM c C s$ | d t vrtdt| d � ��d S )Nr zinvalid key type: )rL r( r/ )r r r r � check_keyV s �rN c c sb � |r| V d S t jtdd��}|�t| �� |�� |jV W d � d S 1 s*w Y d S )Nz kcsig-data-��dir�prefix)�tempfile�NamedTemporaryFile�TMPDIRr2 r& �flush�name)r) � data_is_filer9 r r r �
temp_datafile[ s �
"�rX c c s4 � t j| |d�}z |V W t�|� d S t�|� w )N)rQ rP )rR �mkdtemp�shutil�rmtree)rQ rP �temp_dirr r r �temp_directoryf s
�r] c C s� t tdd��9}dd|d| dd|g}tj|tjtjtjd�}|�|�\}}|jd kr7td
t|� d t|� ��W d � d S 1 sBw Y d S ) Nz
kcsig-gpgtmp-rO r z --homedirz --keyringz--verify�-)�stdin�stdout�stderrr zVerify error: �
) r] rT �
subprocess�Popen�PIPE� communicate�
returncode� Exceptionr/ )�keyfile�datafile�sigdata�tmp_dir�cmdrD r` ra r r r �run_gpg_verifyo s
�"�rn c C s� t |� tjtdd��D}|�t�t|d ��� |�� t ||��}t�t| ��}t
|j ||� W d � n1 s:w Y W d � d S W d � d S 1 sRw Y d S )Nz
kcsig-key-rO r ) rN rR rS rT r2 �base64� b64decoder& rU rX rn rV )� signaturer r) rW �key_filerj rk r r r �
verify_keyy s ��"�rs c C s� d}i }| � � D ]5\}}||vrd||< qz t||| ||� W n ty8 } z t|�||< W Y d }~qd }~ww |d7 }q||fS )Nr zno corresponding root keyr )�itemsrs rh r' ) �
signatures�keysr) rW �count�errors�keyid�sig�er r r � verify_count� s ��
r| c C s� |� dd�}|� dd�}i }|pt}i }| d �� D ]H\}} z,t| � | d |vr4d�| d |�||< n| d |k rEd �| d |�||< n| ||< W q tyb }
z t|
�||< W Y d }
~
qd }
~
ww i } |�� D ] \}} t| d
|d t| �d �\} }
| |k r�|
||< qi| | |< qid } | �� D ]/\}} zt | d
| | |d
d� W n ty� }
z t|
�||< W Y d }
~
q�d }
~
ww | d7 } q�| s�t
dt � |� ��d S )N� thresholdi' �
min_seriali��rv r z&invalid kind {0}, accepted list is {1}r z"invalid serial {0}, current is {1}ru rH r T)r) rW r z!Error validating file signature: )
�get�AVAILABLE_KINDSrt rN �formatrh r' r| rM rs r r> �dumps)rk rj � root_keys�kindsr} r~ rx �applicable_keysry r r{ �
verified_keysrw � root_errorsr r r �_verify� sJ � ��
��
�r� c C s$ t | �}t |�}t||||d� d S )N)r� )r@ r� )�sigfilerj �rootfiler� rk r� r r r �verify� s r� )r! )r0 )Fr; )2ro �
contextlibr> r3 rZ rc rR �typingr r r r r r r r r
�typesr r
r r r r r� rL rT r r" r# r, rh r r& r/ r: r= r@ rF rK rM rN �contextmanagerrX r] rn rs r| r� r� r r r r �<module> sB
+