Name	Size	Mode	Actions
connection.cpython-39.opt-1.pyc	840	0644	editdlrm
connection.cpython-39.pyc	840	0644	editdlrm
error.cpython-39.opt-1.pyc	308	0644	editdlrm
error.cpython-39.pyc	308	0644	editdlrm
miscutils.cpython-39.opt-1.pyc	2579	0644	editdlrm
miscutils.cpython-39.pyc	2579	0644	editdlrm
transaction.cpython-39.opt-1.pyc	4139	0644	editdlrm
transaction.cpython-39.pyc	4139	0644	editdlrm
__init__.cpython-39.opt-1.pyc	4166	0644	editdlrm
__init__.cpython-39.pyc	4166	0644	editdlrm

a �!cB�@svdd
lm
Z
mZmZ
ddlZddlZddlZddlmZ
ddl m Z
e�d�
Zda dd�Zdd �Zd d�Zdd �ZdS)�)�print_function�absolute_import�unicode_literalsN)
�which)
�
_ZdnfcCs$tdur t
d
�
at�td�
t�
tS)N�rpmkeysz3Using rpmkeys executable at %s to verify signatures)�_rpmkeys_binaryr�_logger�debugr�rr�5/usr/lib/python3.9/site-packages/dnf/rpm/miscutils.py�_find_rpmkeys_binarys


�r c
Cs�t|�
d
ks |ddks |dr$dSd\}
}}}|dd�D]R}d|vrN
dS|�
d �
r^d }q<|�
d�
rnd }q<|�
d�
r~d }q<|�
d �
s<
dSq<|r�d
S|r�dS|r�dSdS)N�r
s-:������)FFFF�
s: BADs: NOKEYTs: NOTTRUSTEDs : NOTFOUNDs: OK�)�len�endswith)�dataZseen_sigZmissing_keyZnot_trustedZ not_signed�
irrr�_process_rpm_output$s*


















rc Cs�t�}|dust
j�|�
s,t�td
�
�

dSddd|
dddd f}tt
j�
}d |d<t j |||t jd|d ��}|��d}Wd�
n1s�0


Y
|j }t|�
tu
r�td�
�
|dks�|dkr�dSt|�d�
�
}|r�|S|r�dSdS)Nz4Cannot find rpmkeys executable to verify signatures.rrz --checksigz--rootz --verbosez#--define=_pkgverify_level signaturez--define=_pkgverify_flags 0x0�
-�
C�LC_ALL�
/)�args� executable�env�stdout�cwd�stdinr
z Popen set return code to non-int�
)r �os�path�isfiler Zcriticalr�dict�environ� subprocess�Popen�PIPEZcommunicate� returncode�type�int�AssertionErrorr�split) �packageZinstallrootZrpmkeys_binaryrr�
prr+�retrrr�_verifyPackageUsingRpmkeys?s:





�







�
*







r3c CsHt�
|
tjtjBtjB�}zt||jj�}Wt�|�

nt�|�

0|S)
a
Takes a transaction set and a package, check it's sigs, return 0 if they are all fine return 1 if the gpg key can't be found return 2 if the header is in someway damaged return 3 if the key is not trusted return 4 if the pkg is not gpg or pgp signed) r#�open�O_RDONLY�O_NOCTTY� O_CLOEXECr3�tsZrootDir�close)r8r0Zfdno�valuerrr�checkSig`s 


r;)Z __future__rrrr#r(Zlogging�shutilrZdnf.i18nrZ getLoggerr rr rr3r;rrrr�s



!