a
!cB @ sv d dl mZmZmZ d dlZd dlZd dlZd dlmZ d dl m
Z
e dZ da
dd Zdd Zd
d Zd d
ZdS ) )print_functionabsolute_importunicode_literalsN)which)_Zdnfc C s$ t d u r tda ttdt t S )Nrpmkeysz3Using rpmkeys executable at %s to verify signatures)_rpmkeys_binaryr _loggerdebugr r r 5/usr/lib/python3.9/site-packages/dnf/rpm/miscutils.py_find_rpmkeys_binary s
r
c C s t | dk s | d dks | d r$dS d\}}}}| dd D ]R}d|v rN dS |d r^d
}q<|d rnd
}q<|d r~d
}q<|d
s< dS q<|rdS |rdS |rdS dS )N r s -: )FFFF s : BADs : NOKEYTs : NOTTRUSTEDs
: NOTFOUNDs : OK )lenendswith)dataZseen_sigZ missing_keyZ not_trustedZ
not_signedir r r _process_rpm_output$ s*
r c C s t }|d u stj|s,ttd dS ddd|dddd f}ttj}d
|d < t j
|||t j d | d
}| d }W d n1 s0 Y |j
}t|turtd|dks|dk rdS t|d}|r|S |rdS dS )Nz4Cannot find rpmkeys executable to verify signatures.r r z
--checksigz--rootz --verbosez#--define=_pkgverify_level signaturez --define=_pkgverify_flags 0x0-CLC_ALL/)args
executableenvstdoutcwdstdinr z Popen set return code to non-int
)r
ospathisfiler Zcriticalr dictenviron
subprocessPopenPIPEZ communicate
returncodetypeintAssertionErrorr split) packageZ installrootZrpmkeys_binaryr r pr r+ retr r r _verifyPackageUsingRpmkeys? s:
* r3 c C sH t |t jt jB t jB }z t|| jj}W t | n t | 0 |S )a
Takes a transaction set and a package, check it's sigs,
return 0 if they are all fine
return 1 if the gpg key can't be found
return 2 if the header is in someway damaged
return 3 if the key is not trusted
return 4 if the pkg is not gpg or pgp signed) r# openO_RDONLYO_NOCTTY O_CLOEXECr3 tsZrootDirclose)r8 r0 Zfdnovaluer r r checkSig` s
r; )Z
__future__r r r r# r( Zloggingshutilr Zdnf.i18nr Z getLoggerr r r
r r3 r; r r r r s
!