OwlCyberSecurity - MANAGER
Edit File: auth.cpython-38.pyc
U &��c�* � @ s� d Z ddlmZ zddlmZ W n ek r4 Y nX ddlZddlZddlZddl Z ddl Z ddl Z ddl Z ddl Z ddl mZ e jjdkr�eZz$ddlmZmZmZ e e e W n ek r� Y nX G dd � d e�ZG d d � d e�ZG d d � d e�Zdd� Z dd� Z dd� Z dd� Z dd� Z dd� Z!dd� Z"d d � Z#d d � Z$d d!� Z%e&d"k�r�d#d$� d%d$� e �'� e%� D ]Z(e)e(� �qtdS )&z4Handle GnuPG keys used to trust signed repositories.� )�print_function)�OptionalN)�gettext� )�List�Tuple�Unionc @ s e Zd ZdS )� AptKeyErrorN)�__name__� __module__� __qualname__� r r �*/usr/lib/python3/dist-packages/apt/auth.pyr : s r c @ s e Zd ZdZdS )�AptKeyIDTooShortErrorz!Internal class do not rely on it.N)r r r �__doc__r r r r r > s r c @ s e Zd ZdZdd� Zdd� ZdS )� TrustedKeyzRepresents a trusted key.c C s || _ t|�| _|| _|| _d S )N)Zraw_name�_�name�keyid�date)�selfr r r r r r �__init__F s zTrustedKey.__init__c C s d| j | j| jf S )Nz%s %s %s)r r r )r r r r �__str__N s zTrustedKey.__str__N)r r r r r r r r r r r B s r c O s0 d}t j�dd�g}|�| � tj�� }d|d< d|d< z�t j�d�d kr�t j d d d �}|� t j� � � d �� |�� |j|d< tj||dtjtjtjd�}|�dd�}tjjdk r�t|t�r�|� d�}|�|�\}}|jr�td|jd� |�||f ��n|�r tj � |� |� � W �S |dk �r*|�� X dS )z0Run the apt-key script with the given arguments.NzDir::Bin::Apt-Keyz/usr/bin/apt-key�CZLANG�1Z$APT_KEY_DONT_WARN_ON_DANGEROUS_USAGEZDir�/zapt-keyz.conf)�prefix�suffixzUTF-8Z APT_CONFIGT)�env�universal_newlines�stdin�stdout�stderrr � zutf-8zGThe apt-key script failed with return code %s: %s stdout: %s stderr: %s� ) �apt_pkgZconfigZ find_file�extend�os�environ�copy�closeZfind_dir�tempfileZNamedTemporaryFile�write�dump�encode�flushr � subprocess�Popen�PIPE�get�sys� version_info�major� isinstance�unicode� communicate� returncoder �joinr" �strip) �args�kwargsZconf�cmdr �procr �outputr" r r r �_call_apt_key_scriptS sN � � ��� rB c C s@ t j�| �std| ��t �| t j�s2td| ��td| � dS )z�Import a GnuPG key file to trust repositores signed by it. Keyword arguments: filename -- the absolute path to the public GnuPG key file z An absolute path is required: %sz Key file cannot be accessed: %s�addN)r' �path�abspathr �access�R_OKrB )�filenamer r r �add_key_from_file� s rI c C sR t �� }z,zt| ||� W n tk r0 � Y nX W 5 dd� }tj||d� X dS )z�Import a GnuPG key file to trust repositores signed by it. Keyword arguments: keyid -- the long keyid (fingerprint) of the key, e.g. A1BD8E9D78F7FE5C3E65D8AF8B48AD6246925553 keyserver -- the URL or hostname of the key server c S s( t |d t�r"|d jtjkr"d S � d S )N� )r7 �OSError�errnoZENOENT)�funcrD �exc_infor r r �onerror� s �z'add_key_from_keyserver.<locals>.onerror)rO N)r+ Zmkdtemp�shutilZrmtree�_add_key_from_keyserver� Exception)r � keyserver�tmp_keyring_dirrO r r r �add_key_from_keyserver� s rU c C sN t | �dd��dd��dk r$td��tj�|d�}tj�|d�}dd d d |g}t�|d |d |d|d| g �}|dkr�td|| f ��tj�|d�}t�|d |d|d| g �}|dkr�td| ��tj |d |ddddg tj dd�� � d }d } |� � D ]"} | � d �r�| �d �d } �qq�| �dd��� } | | k�rBtd|| f ��t|� d S ) Nr$ � Z0xg D@z,Only fingerprints (v4, 160bit) are supportedz secring.gpgz pubring.gpgZgpgz--no-default-keyringz --no-optionsz --homedirz--secret-keyringz --keyringz --keyserverz--recvr z recv from '%s' failed for '%s'zexport-keyring.gpgz--outputz--exportzexport of '%s' failedz --fingerprint�--batch�--fixed-list-mode� --with-colonsT)r! r zfpr:�:� )�len�replacer r' rD r; r0 Zcallr r1 r2 r9 � splitlines� startswith�split�upperrI ) r rS rT Ztmp_secret_keyringZ tmp_keyringZgpg_default_options�resZtmp_export_keyringrA Zgot_fingerprint�lineZsigning_key_fingerprintr r r rQ � s� � � � � � �� � ��rQ c C s t ddddd| d� dS )z�Import a GnuPG key to trust repositores signed by it. Keyword arguments: content -- the content of the GnuPG public key �advz--quietrW z--import�-)r N�rB )Zcontentr r r �add_key� s �rg c C s t d| � dS )z�Remove a GnuPG key to no longer trust repositores signed by it. Keyword arguments: fingerprint -- the fingerprint identifying the key ZrmNrf �Z fingerprintr r r � remove_key� s ri c C s t d| �S )zxReturn the GnuPG key in text format. Keyword arguments: fingerprint -- the fingerprint identifying the key Zexportrf rh r r r � export_key s rj c C s t d�S )a Update the local keyring with the archive keyring and remove from the local keyring the archive keys which are no longer valid. The archive keyring is shipped in the archive-keyring package of your distribution, e.g. the debian-archive-keyring package in Debian. �updaterf r r r r rk s rk c C s t d�S )ay Work similar to the update command above, but get the archive keyring from an URI instead and validate it against a master key. This requires an installed wget(1) and an APT build configured to have a server to fetch from and a master keyring to validate. APT in Debian does not support this command and relies on update instead, but Ubuntu's APT does. z net-updaterf r r r r � net_update s rl c C sx t ddddd�} g }| �d�D ]T}|�d�}|d d kr@|d }|d d kr |d }|d }t|||�}|�|� q |S )zaReturns a list of TrustedKey instances for each key which is used to trust repositories. rd rY rW rX z --list-keys� rZ r Zpub� �uidr[ � )rB r` r �append)rA rb rc Zfieldsr ro Z creation_date�keyr r r � list_keys) s � rs �__main__c C s t d�S )Nz;Ubuntu Archive Automatic Signing Key <ftpmaster@ubuntu.com>�r r r r r �<lambda>B � rv c C s t d�S )Nz:Ubuntu CD Image Automatic Signing Key <cdimage@ubuntu.com>ru r r r r rv C rw )*r Z __future__r �typingr � ImportErrorrL r' �os.pathrP r0 r4 r+ r% r r r5 r6 �strr8 r r r rR r r �objectr rB rI rU rQ rg ri rj rk rl rs r ZinitZ trusted_key�printr r r r �<module> sT 0H