o

�1Db�@sNdd
lZdd
l
Z
dd
lZddlmZ
ddlmZ
Gdd�de�Zd
dd	�
Zd
S)�N)
�glob)
�getProcessOutputAndValuec
@seZ
dZd
ZdS)�InvalidGPGSignaturez:Raised when the gpg signature for a given file is invalid.N)�__name__�
__module__�__qualname__�__doc__�r	r	�3/usr/lib/python3/dist-packages/landscape/lib/gpg.pyr
s
r�/usr/bin/gpg�/etc/aptc		s��
f
d
d�}�f
dd�}t�
��
ttjdd�ttd�|�
�
td�|�
�
�
D�
��
}d	d
�
ddf|d
|
|f}t�|d�}|�	|�

|�
|�

|S)a�
Verify the GPG signature of a file.

    @param filename: Path to the file to verify the signature against.
    @param signature: Path to signature to use.
    @param gpg: Optionally, path to the GPG binary to use.
    @param apt_dir: Optionally, path to apt trusted keyring.
    @return: a C{Deferred} resulting in C{True} if the signature is
             valid, C{False} otherwise.
        c

st�
��

|S)
N)�shutil�rmtree)
�ignored)
�gpg_homer	r
�remove_gpg_homes


z#gpg_verify.<locals>.remove_gpg_homec
s@|\}
}}|
�d
�
|�d
�
}
}|dkrt
d�|
||f�
�
dS)N�asciir
z)%s failed (out='%s', err='%s', code='%d'))�decoder)�args�out�err�code)
�gpgr	r
�check_gpg_exit_codes





��z'gpg_verify.<locals>.check_gpg_exit_codec
Ssg|]}
d|
f�qS)
z	--keyringr	)�.0�keyringr	r	r
�
<listcomp>'s��zgpg_verify.<locals>.<listcomp>z{}/trusted.gpgz{}/trusted.gpg.d/*.gpgz--no-optionsz	--homedirz--no-default-keyringz--ignore-time-conflictz--verify)
r)�tempfile�mkdtemp�tuple�	itertools�chain�sortedr�formatr�addBoth�addCallback)	�filename�	signaturer�apt_dirrr�keyringsr�resultr	)rrr
�
gpg_verifys*	


��
�
���




r+)rr)	r r
rr�twisted.internet.utilsr�	Exceptionrr+r	r	r	r
�<module>
s