1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
|
# Deb-o-Matic
#
# Copyright (C) 2007-2009 Luca Falavigna
#
# Author: Luca Falavigna <dktrkranz@debian.org>
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; version 3 of the License.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301, USA.
import os
from re import findall, DOTALL
from subprocess import Popen, PIPE
from Debomatic import Options
from Debomatic import acceptedqueue
def check_changes_signature(package):
if Options.getint('gpg', 'gpg'):
if not Options.has_option('gpg', 'keyring') or not os.path.exists(Options.get('gpg', 'keyring')):
raise RuntimeError(_('Keyring not found'))
if not package in acceptedqueue:
gpgresult = Popen(['gpg', '--no-default-keyring', '--keyring', Options.get('gpg', 'keyring'), '--verify', package], stderr=PIPE).communicate()[1]
ID = findall('Good signature from "(.*) <(.*)>"', gpgresult)
if not len(ID):
raise RuntimeError(_('No valid signatures found'))
fd = os.open(package, os.O_RDONLY)
data = os.read(fd, os.fstat(fd).st_size)
os.close(fd)
fd = os.open(package, os.O_WRONLY | os.O_TRUNC)
os.write(fd, findall('Hash: \S+\n\n(.*)\n\n\-\-\-\-\-BEGIN PGP SIGNATURE\-\-\-\-\-', data, DOTALL)[0])
os.close(fd)
if not package in acceptedqueue:
acceptedqueue.append(package)
def check_commands_signature(commands):
if Options.getint('gpg', 'gpg'):
if not Options.has_option('gpg', 'keyring') or not os.path.exists(Options.get('gpg', 'keyring')):
raise RuntimeError(_('Keyring not found'))
gpgresult = Popen(['gpg', '--no-default-keyring', '--keyring', Options.get('gpg', 'keyring'), '--verify', commands], stderr=PIPE).communicate()[1]
ID = findall('Good signature from "(.*) <(.*)>"', gpgresult)
if not len(ID):
raise RuntimeError(_('No valid signatures found'))
fd = os.open(commands, os.O_RDONLY)
data = os.read(fd, os.fstat(fd).st_size)
os.close(fd)
fd = os.open(commands, os.O_WRONLY | os.O_TRUNC)
os.write(fd, findall('Hash: \S+\n\n(.*)\n\n\-\-\-\-\-BEGIN PGP SIGNATURE\-\-\-\-\-', data, DOTALL)[0])
os.close(fd)
|
