File: //kunden/lib/python3/dist-packages/breezy/__pycache__/gpg.cpython-39.pyc
a
�*�^MF � @ s4 d Z ddlmZ ddlZddlmZ ee� d� ddlmZ ddl m
Z
dZ dZ d Z
d
Zd ZdZdZd ZG d d
� d
ej�ZG dd� dej�ZG dd� dej�Zd0dd�ZG dd� de�ZG dd� de�Zdd� Z G dd� de�Z d d � Z d d � Z d d!� Z d"d#� Z!d$d%� Z"d&d'� Z#d(d)� Z$d*d+� Z%d,d-� Z&d.d/� Z'dS )1z GPG signing and checking logic.� )�absolute_importN)� lazy_importzv
from breezy import (
config,
trace,
ui,
)
from breezy.i18n import (
gettext,
ngettext,
)
� )�errors)� text_type� � � c @ s e Zd ZdZdd� ZdS )�GpgNotInstalledzSpython-gpg is not installed, it is needed to create or verify signatures. %(error)sc C s t j�| d|� d S )N�gpg)r �DependencyNotPresent�__init__��self�error� r �,/usr/lib/python3/dist-packages/breezy/gpg.pyr
= s zGpgNotInstalled.__init__N��__name__�
__module__� __qualname__Z_fmtr
r r r r r
8 s r
c @ s e Zd ZdZdd� ZdS )�
SigningFailedz$Failed to GPG sign data: "%(error)s"c C s t jj| |d� d S �N)r �r �BzrErrorr
r r r r r
E s zSigningFailed.__init__Nr r r r r r A s r c @ s e Zd ZdZdd� ZdS )�SignatureVerificationFailedz:Failed to verify GPG signature data with error "%(error)s"c C s t jj| |d� d S r r r r r r r
M s z$SignatureVerificationFailed.__init__Nr r r r r r I s r c
C s� t dtdtdtdtdi}g }d}t|�}tj�� �x}t | �
||��D ]V\} \}
} } |� d| |� |� |
| | g� || d7 < | t kr�d}|durD|� qDW d � n1 s�0 Y |||fS )a� Do verifications on a set of revisions
:param repository: repository object
:param revids: list of revision ids to verify
:param strategy: GPG strategy to use
:param process_events_callback: method to call for GUI frontends that
want to keep their UI refreshed
:return: count dictionary of results of each type,
result list for each revision,
boolean True if all results are verified successfully
r Tzverifying signaturesr FN)
�SIGNATURE_VALID�SIGNATURE_KEY_MISSING�SIGNATURE_NOT_VALID�SIGNATURE_NOT_SIGNED�SIGNATURE_EXPIRED�lenZuiZ
ui_factoryZnested_progress_bar� enumerateZverify_revision_signatures�update�append)
Z
repositoryZrevidsZstrategyZprocess_events_callback�count�resultZall_verifiable�totalZpb�i�rev_idZverification_result�uidr r r �bulk_verify_signaturesQ s. � ��&r+ c @ s> e Zd ZdZedd� �Zdd� Zdd� Zd
d d
�Zd d � Z dS )�DisabledGPGStrategyz*A GPG Strategy that makes everything fail.c C s dS �NTr r r r r �verify_signatures_availablex s z/DisabledGPGStrategy.verify_signatures_availablec C s dS �z%Real strategies take a configuration.Nr �r Zignoredr r r r
| s z DisabledGPGStrategy.__init__c C s t d��d S )NzSigning is disabled.)r �r �content�moder r r �sign s zDisabledGPGStrategy.signNc C s t d��d S )Nz#Signature verification is disabled.)r )r � signed_data� signaturer r r �verify� s zDisabledGPGStrategy.verifyc C s d S )Nr )r �command_line_inputr r r �set_acceptable_keys� s z'DisabledGPGStrategy.set_acceptable_keys)N�
r r r �__doc__� staticmethodr. r
r4 r7 r9 r r r r r, u s
r, c @ s> e Zd ZdZedd� �Zdd� Zdd� Zd
d d
�Zd d � Z dS )�LoopbackGPGStrategyzZA GPG Strategy that acts like 'cat' - data is just passed through.
Used in tests.
c C s dS r- r r r r r r. � s z/LoopbackGPGStrategy.verify_signatures_availablec C s dS r/ r r0 r r r r
� s z LoopbackGPGStrategy.__init__c C s d| d S )N�& -----BEGIN PSEUDO-SIGNED CONTENT-----
�$ -----END PSEUDO-SIGNED CONTENT-----
r r1 r r r r4 � s �zLoopbackGPGStrategy.signNc C s" |� dd�}|� dd�}td |fS )Nr> � r? )�replacer )r r5 r6 �
plain_textr r r r7 � s ��zLoopbackGPGStrategy.verifyc C s< |d ur8|� d�}g | _|D ]}|dkr*q | j�|� q d S )N�,�unknown)�split�acceptable_keysr$ )r r8 �patterns�patternr r r r9 � s
z'LoopbackGPGStrategy.set_acceptable_keys)Nr: r r r r r= � s
r= c C s: t j�d�} | d ur,| t jd< t�d| � n
t�d� d S )NZTTYZGPG_TTYzsetting GPG_TTY=%sz;** Env var TTY empty, cannot set GPG_TTY. Is TTY exported?)�os�environ�get�trace�mutter)Zttyr r r � _set_gpg_tty� s
rN c @ sJ e Zd ZdZdZdd� Zdd� Zedd� �Zd d
� Z dd d �Z
d
d� Z dS )� GPGStrategyz$GPG Signing and checking facilities.Nc C sH || _ z*dd l}|�� | _d| j_| �� | j_W n tyB Y n0 d S )Nr T)�
_config_stackr ZContext�contextZarmor�_get_signing_keys�signers� ImportError)r Z config_stackr r r r r
� s
zGPGStrategy.__init__c C s� dd l }| j�d�}|dkr g S |rLz| j�|�gW S |jjyJ Y n0 |d u rft�| j�d��}|dkrrg S | jj |dd�}z t
|�gW S t y� g Y S 0 d S )Nr Zgpg_signing_key�default�emailT)Zsecret) r rP rK rQ �get_keyr Z KeyNotFoundZconfigZextract_email_address�keylist�next�
StopIteration)r r ZkeynameZ
possible_keysr r r rR � s(
� z GPGStrategy._get_signing_keysc C s( zddl } W dS ty" Y dS 0 dS )z
check if this strategy can verify signatures
:return: boolean if this strategy can verify signatures
r NTF)r rT )r r r r r. � s
z'GPGStrategy.verify_signatures_availablec
C s� z dd l }W n, ty8 } ztd��W Y d }~n
d }~0 0 t|t�rNt�d��|�|�}z@| jj |t
|j j j
jt|j j j
jt|j j j
ji| d�\}}W n4 |jjy� } ztt|���W Y d }~n
d }~0 0 |S )Nr z8Set create_signatures=no to disable creating signatures.r2 )r3 )r rT r
�
isinstancer r ZBzrBadParameterUnicode�DatarQ r4 � MODE_DETACH� constantsZsigr3 ZDETACH�
MODE_CLEARZCLEAR� MODE_NORMALZNORMAL�
GPGMEErrorr �str)r r2 r3 r r rB �outputr& r r r r4 � s, �
���"zGPGStrategy.signc
C s� z ddl }W n, ty8 } ztd��W Y d}~n
d}~0 0 |�|�}|rR|�|�}z| j�||�\}}W �n$ |jj�y^ } z�|jj d j
}|jj d j |j j
@ �r
| j�|jj d j
�jd j}||jj d jkr�t|dd� dfW Y d}~S tddfW Y d}~S |jj d j |j j@ �r@t|dd� dfW Y d}~S tddfW Y d}~S d}~0 |jj�y� } zt|��W Y d}~n
d}~0 0 t|j �dk�r�td|fS |j d j
}| jdu�r�|| jv�r�t|dd� |fS |j d j |j j@ �r\| j�|�} | jd j }
t |
t ��r$|
� d�}
| jd j } t | t ��rF| � d�} t!|
d | d |fS |j d j |j j"@ �r|td|fS |j d j dk�r�| jdu�r�|| jv �r�t!d|fS |j d j dk�r�| jdu �r�td|fS td��dS ) z�Check content has a valid signature.
:param signed_data; Signed data
:param signature: optional signature (if detached)
:return: SIGNATURE_VALID or a failed SIGNATURE_ value, key uid if valid, plain text
r Nz<Set check_signatures=ignore to disable verifying signatures.i����zutf-8z <�>z%Unknown GnuPG key verification result)#r rT r
r\ rQ r7 r Z
BadSignaturesr& Z
signatures�fprZsummaryr^ ZSIGSUM_KEY_EXPIREDrW �subkeys�expiresZ timestampr r ZSIGSUM_KEY_MISSINGr ra r r! rF Z SIGSUM_VALIDZuids�namer[ �bytes�decoderV r Z
SIGSUM_RED) r r5 r6 r r Z plain_outputr& � fingerprintrg �keyrh rV r r r r7 sp �
�� �
�
�zGPGStrategy.verifyc C s� d}| j �d�}|dur |}|dur.|�d�}|r�g | _|D ]d}| j�|�}d}|D ]2}d}| j�|jd j� t �
d|jd j � qT|s<t � t d��
|�� q<dS ) z�Set the acceptable keys for verifying with this GPGStrategy.
:param command_line_input: comma separated list of patterns from
command line
:return: nothing
NrF rC FTr zAdded acceptable key: z%No GnuPG key results for pattern: {0})rP rK rE rF rQ rX r$ rf re rL rM Znote�gettext�format)r r8 rG Zacceptable_keys_configrH r& Z found_keyrl r r r r9 [ s*
��z GPGStrategy.set_acceptable_keys)N) r r r r; rF r
rR r< r. r4 r7 r9 r r r r rO � s
UrO c C s t d��| t �S )�%returns message for number of commitsz!{0} commits with valid signatures)rm rn r �r% r r r �valid_commits_messagex s �rq c C s t dd| t ��| t �S )ro z{0} commit with unknown keyz {0} commits with unknown keys)�ngettextr rn rp r r r �unknown_key_message~ s ��rs c C s t dd| t ��| t �S )ro z{0} commit not validz{0} commits not valid)rr r rn rp r r r �commit_not_valid_message� s ��rt c C s t dd| t ��| t �S )ro z{0} commit not signedz{0} commits not signed)rr r rn rp r r r �commit_not_signed_message� s ��ru c C s t dd| t ��| t �S )ro z {0} commit with key now expiredz {0} commits with key now expired)rr r rn rp r r r �expired_commit_message� s ��rv c
C s� i }i }| D ]N\}}}|t kr |�|�}d�|�� �}|�|d� || d7 < |||< q g } |�� D ](\}} | �tdd| ��| || |�� qh| S )z:takes a verify result and returns list of expired key info�, r r z1{0} commit by author {1} with key {2} now expiredz2{0} commits by author {1} with key {2} now expired) r � get_revision�join�get_apparent_authors�
setdefault�itemsr$ rr rn )
r& �reporS Zfingerprint_to_authorsr) �validityrk �revision�authors�numberr r r �verbose_expired_key_message� s(
�
��r� c C sl i }| D ].\}}}|t kr|�|d� || d7 < qg } |�� D ]"\}}| �tdd|��||�� qD| S )z@takes a verify result and returns list of signed commits stringsr r z{0} signed {1} commitz{0} signed {1} commits)r r{ r| r$ rr rn )r& rS r) r~ r* r� r r r �verbose_valid_message� s ��r� c C s� i }| D ]F\}}}|t kr|�|�}d�|�� �}|�|d� || d7 < qg } |�� D ]"\}}| �tdd|��||�� q\| S )z?takes a verify result and returns list of not valid commit inforw r r �{0} commit by author {1}�{0} commits by author {1}) r rx ry rz r{ r| r$ rr rn � r& r} rS r) r~ �emptyr r� r� r r r �verbose_not_valid_message� s
��r� c C s� i }| D ]F\}}}|t kr|�|�}d�|�� �}|�|d� || d7 < qg } |�� D ]"\}}| �tdd|��||�� q\| S )z@takes a verify result and returns list of not signed commit inforw r r r� r� ) r rx ry rz r{ r| r$ rr rn r� r r r �verbose_not_signed_message� s
��r� c C sp i }| D ].\}}}|t kr|�|d� || d7 < qg } t|�� �D ]"\}}| �tdd|��||�� qH| S )z:takes a verify result and returns list of missing key infor r z!Unknown key {0} signed {1} commitz"Unknown key {0} signed {1} commits)r r{ �listr| r$ rr rn )r& rS r) r~ rk r� r r r �verbose_missing_key_message� s ��r� )N)(r; Z
__future__r rI Zbreezy.lazy_importr �globals� r Zsixishr r r r r r r` r] r_ r r
r r r r+ �objectr, r= rN rO rq rs rt ru rv r� r� r� r� r� r r r r �<module> sD �
$"
@