File: //.vs/lib/python3/dist-packages/apt/__pycache__/auth.cpython-39.pyc
a
?��`g) � @ s, d Z ddlmZ ddlZddlZddlZddlZddlZddlZddl Z ddl
Z
ddl
m Z ddl
mZmZmZ G dd� de�ZG dd � d e�ZG d
d � d e�Zd d
� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd� Z dd� Z d d � Z d d � Z e d k�r(d!d"� d#d"� e
�!� e � D ]Z"e#e"� �qdS )$z4Handle GnuPG keys used to trust signed repositories.� )�print_functionN)�gettext)�List�Optional�Tuplec @ s e Zd ZdS )� AptKeyErrorN)�__name__�
__module__� __qualname__� r r �*/usr/lib/python3/dist-packages/apt/auth.pyr + s r c @ s e Zd ZdZdS )�AptKeyIDTooShortErrorz!Internal class do not rely on it.N)r r r
�__doc__r r r r r
/ s r
c @ s e Zd ZdZdd� Zdd� ZdS )�
TrustedKeyzRepresents a trusted key.c C s || _ t|�| _|| _|| _d S )N)Zraw_name�_�name�keyid�date)�selfr r r r r r �__init__7 s
zTrustedKey.__init__c C s d| j | j| jf S )Nz%s
%s %s)r r r )r r r r �__str__? s zTrustedKey.__str__N)r r r
r r r r r r r r 3 s r c O s d}t j�dd�g}|�| � tj�� }d|d< d|d< z�t j�d�d kr�tj d
d d �}|�
t j� � � d
�� |�
� |j|d< tj||dtjtjtjd�}|�dd�}|�|�\}}|jr�td|jd�|�||f ��n|r�tj�
|� |�� W |du�r|�� S n|du�r|�� 0 dS )z0Run the apt-key script with the given arguments.NzDir::Bin::Apt-Keyz/usr/bin/apt-key�CZLANG�1Z$APT_KEY_DONT_WARN_ON_DANGEROUS_USAGEZDir�/zapt-keyz.conf)�prefix�suffixzUTF-8Z
APT_CONFIGT)�env�universal_newlines�stdin�stdout�stderrr zGThe apt-key script failed with return code %s:
%s
stdout: %s
stderr: %s� )�apt_pkgZconfigZ find_file�extend�os�environ�copyZfind_dir�tempfileZNamedTemporaryFile�write�dump�encode�flushr �
subprocess�Popen�PIPE�get� communicate�
returncoder �join�sysr �strip�close) �args�kwargsZconf�cmdr �procr �outputr r r r �_call_apt_key_scriptD sL
�
� ���
� �
r; c C s@ t j�| �std| ��t �| t j�s2td| ��td| � dS )z�Import a GnuPG key file to trust repositores signed by it.
Keyword arguments:
filename -- the absolute path to the public GnuPG key file
z An absolute path is required: %sz Key file cannot be accessed: %s�addN)r$ �path�abspathr �access�R_OKr; )�filenamer r r �add_key_from_fileq s
rB c
C sf t �� }z@zt| ||� W n ty. � Y n0 W dd� }tj||d� ndd� }tj||d� 0 dS )z�Import a GnuPG key file to trust repositores signed by it.
Keyword arguments:
keyid -- the long keyid (fingerprint) of the key, e.g.
A1BD8E9D78F7FE5C3E65D8AF8B48AD6246925553
keyserver -- the URL or hostname of the key server
c S s( t |d t�r"|d jtjkr"d S � d S )N� )�
isinstance�OSError�errnoZENOENT)�funcr= �exc_infor r r �onerror� s
�z'add_key_from_keyserver.<locals>.onerror)rI N)r' Zmkdtemp�_add_key_from_keyserver� Exception�shutilZrmtree)r � keyserver�tmp_keyring_dirrI r r r �add_key_from_keyserver s
�rO c C sN t | �dd��dd��dk r$td��tj�|d�}tj�|d�}dd d
d |g}t�|d |d
|d|d| g �}|dkr�td|| f ��tj�|d�}t�|d
|d|d| g �}|dkr�td| ��tj |d
|ddddg tj
dd�� � d }d } |� � D ]"}
|
�
d �r�|
�d �d } �qq�| �dd��� } | | k�rBtd|| f ��t|� d S ) Nr! � Z0xg D@z,Only fingerprints (v4, 160bit) are supportedz secring.gpgz pubring.gpgZgpgz--no-default-keyringz --no-optionsz --homedirz--secret-keyringz --keyringz --keyserverz--recvr z recv from '%s' failed for '%s'zexport-keyring.gpgz--outputz--exportzexport of '%s' failedz
--fingerprint�--batch�--fixed-list-mode�
--with-colonsT)r r zfpr:�:� )�len�replacer
r$ r= r2 r, Zcallr r- r. r0 �
splitlines�
startswith�split�upperrB ) r rM rN Ztmp_secret_keyringZ tmp_keyringZgpg_default_options�resZtmp_export_keyringr: Zgot_fingerprint�lineZsigning_key_fingerprintr r r rJ � sl ����
�
�� �
��rJ c C s t ddddd| d� dS )z�Import a GnuPG key to trust repositores signed by it.
Keyword arguments:
content -- the content of the GnuPG public key
�advz--quietrQ z--import�-)r N�r; )Zcontentr r r �add_key� s �ra c C s t d| � dS )z�Remove a GnuPG key to no longer trust repositores signed by it.
Keyword arguments:
fingerprint -- the fingerprint identifying the key
ZrmNr` �Z fingerprintr r r �
remove_key� s rc c C s
t d| �S )zxReturn the GnuPG key in text format.
Keyword arguments:
fingerprint -- the fingerprint identifying the key
Zexportr` rb r r r �
export_key� s rd c C s t d�S )a Update the local keyring with the archive keyring and remove from
the local keyring the archive keys which are no longer valid. The
archive keyring is shipped in the archive-keyring package of your
distribution, e.g. the debian-archive-keyring package in Debian.
�updater` r r r r re s re c C s t d�S )ay Work similar to the update command above, but get the archive
keyring from an URI instead and validate it against a master key.
This requires an installed wget(1) and an APT build configured to
have a server to fetch from and a master keyring to validate. APT
in Debian does not support this command and relies on update
instead, but Ubuntu's APT does.
z
net-updater` r r r r �
net_update s rf c C sx t ddddd�} g }| �d�D ]T}|�d�}|d d kr@|d
}|d d kr |d }|d
}t|||�}|�|� q |S )zaReturns a list of TrustedKey instances for each key which is
used to trust repositories.
r^ rS rQ rR z --list-keys�
rT r Zpub� �uidrU � )r; rZ r �append)r: r\ r] �fieldsr ri Z
creation_date�keyr r r � list_keys s �
rn �__main__c C s t d�S )Nz;Ubuntu Archive Automatic Signing Key <ftpmaster@ubuntu.com>�r r r r r �<lambda>0 � rq c C s t d�S )Nz:Ubuntu CD Image Automatic Signing Key <cdimage@ubuntu.com>rp r r r r rq 1 rr )$r Z
__future__r rF r$ �os.pathrL r, r3 r' r" r r �typingr r r rK r r
�objectr r; rB rO rJ ra rc rd re rf rn r ZinitZ trusted_key�printr r r r �<module> s< -H