Admin

name	type	size	perms	modified	actions
[parent directory]
__pycache__/	dir	-	0755	2026-08-18 11:43:15
cli/	dir	-	0755	2026-08-18 11:43:15
conf/	dir	-	0755	2026-08-18 11:43:15
db/	dir	-	0755	2026-08-18 11:43:15
module/	dir	-	0755	2026-08-18 11:43:15
rpm/	dir	-	0755	2026-08-18 11:43:15
yum/	dir	-	0755	2026-08-18 11:43:15
__init__.py	file	1,389 B	0644	2024-04-24 11:16:32	edit
base.py	file	121,932 B	0644	2026-05-19 00:00:00	edit
callback.py	file	3,724 B	0644	2024-04-24 11:16:32	edit
comps.py	file	25,019 B	0644	2024-04-24 11:16:32	edit
const.py	file	2,444 B	0644	2026-05-19 00:00:00	edit
crypto.py	file	5,705 B	0644	2024-04-24 11:16:32	edit
dnssec.py	file	12,524 B	0644	2024-04-24 11:16:32	edit
drpm.py	file	6,352 B	0644	2024-04-24 11:16:32	edit
exceptions.py	file	6,035 B	0644	2024-04-24 11:16:32	edit
goal.py	file	1,101 B	0644	2024-04-24 11:16:32	edit
history.py	file	1,150 B	0644	2024-04-24 11:16:32	edit
i18n.py	file	12,321 B	0644	2024-04-24 11:16:32	edit
lock.py	file	5,322 B	0644	2024-04-24 11:16:32	edit
logging.py	file	10,354 B	0644	2024-04-24 11:16:32	edit
match_counter.py	file	3,924 B	0644	2024-04-24 11:16:32	edit
package.py	file	11,302 B	0644	2026-05-19 00:00:00	edit
persistor.py	file	4,694 B	0644	2024-04-24 11:16:32	edit
plugin.py	file	9,593 B	0644	2024-04-24 11:16:32	edit
pycomp.py	file	3,604 B	0644	2024-04-24 11:16:32	edit
query.py	file	1,661 B	0644	2024-04-24 11:16:32	edit
repo.py	file	20,804 B	0644	2024-04-24 11:16:32	edit
repodict.py	file	5,158 B	0644	2024-04-24 11:16:32	edit
sack.py	file	3,043 B	0644	2024-04-24 11:16:32	edit
selector.py	file	1,125 B	0644	2024-04-24 11:16:32	edit
subject.py	file	1,150 B	0644	2024-04-24 11:16:32	edit
transaction.py	file	4,397 B	0644	2024-04-24 11:16:32	edit
transaction_sr.py	file	26,209 B	0644	2024-04-24 11:16:32	edit
util.py	file	25,153 B	0644	2026-05-19 00:00:00	edit

editing: crypto.py

# crypto.py
# Keys and signatures.
#
# Copyright (C) 2014  Red Hat, Inc.
#
# This copyrighted material is made available to anyone wishing to use,
# modify, copy, or redistribute it subject to the terms and conditions of
# the GNU General Public License v.2, or (at your option) any later version.
# This program is distributed in the hope that it will be useful, but WITHOUT
# ANY WARRANTY expressed or implied, including the implied warranties of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General
# Public License for more details.  You should have received a copy of the
# GNU General Public License along with this program; if not, write to the
# Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
# 02110-1301, USA.  Any Red Hat trademarks that are incorporated in the
# source code or documentation are not subject to the GNU General Public
# License and may only be used or replicated with the express permission of
# Red Hat, Inc.
#

from __future__ import print_function
from __future__ import absolute_import
from __future__ import unicode_literals
from dnf.i18n import _
import libdnf.repo
import contextlib
import dnf.pycomp
import dnf.util
import dnf.yum.misc
import logging
import os
import warnings

GPG_HOME_ENV = 'GNUPGHOME'
logger = logging.getLogger('dnf')

def _extract_signing_subkey(key):
    # :deprecated, undocumented
    """ It was used internally and is no longer used. """
    msg = "Function `_extract_signing_subkey` is deprecated. Will be removed after 2023-10-30."
    warnings.warn(msg, DeprecationWarning, stacklevel=2)

return dnf.util.first(subkey for subkey in key.subkeys if subkey.can_sign)

def _printable_fingerprint(fpr_hex):
    segments = (fpr_hex[i:i + 4] for i in range(0, len(fpr_hex), 4))
    return " ".join(segments)

def import_repo_keys(repo):
    # :deprecated, undocumented
    """ Deprecated function. Please do not use.
        It was used internally. In 2018, the code was rewritten into libdnf. This code is no longer used.
        It was broken in 2018 - the `repo._key_import._confirm` method now needs 5 arguments.
        It is now fixed and marked as deprecated. Please do not use. """
    msg = "Function `import_repo_keys` is deprecated. Will be removed after 2023-10-30."
    warnings.warn(msg, DeprecationWarning, stacklevel=2)

gpgdir = repo._pubring_dir
    known_keys = keyids_from_pubring(gpgdir)
    for keyurl in repo.gpgkey:
        for keyinfo in retrieve(keyurl, repo):
            keyid = keyinfo.id_
            if keyid in known_keys:
                logger.debug(_('repo %s: 0x%s already imported'), repo.id, keyid)
                continue
            if not repo._key_import._confirm(
                keyid, keyinfo.userid, keyinfo.fingerprint, keyinfo.url, keyinfo.timestamp):
                continue
            dnf.yum.misc.import_key_to_pubring(
                keyinfo.raw_key, keyinfo.short_id, gpgdir=gpgdir,
                make_ro_copy=False)
            logger.debug(_('repo %s: imported key 0x%s.'), repo.id, keyid)

def keyids_from_pubring(gpgdir):
    # :deprecated, undocumented
    """ It is used internally by deprecated function `import_repo_keys`. """
    msg = "Function `keyids_from_pubring` is deprecated. Will be removed after 2023-10-30."
    warnings.warn(msg, DeprecationWarning, stacklevel=2)

keyids = []
    for keyid in libdnf.repo.keyidsFromPubring(gpgdir):
        keyids.append(keyid)
    return keyids

def log_key_import(keyinfo):
    msg = (_('Importing GPG key 0x%s:\n'
             ' Userid     : "%s"\n'
             ' Fingerprint: %s\n'
             ' From       : %s') %
           (keyinfo.short_id, keyinfo.userid,
            _printable_fingerprint(keyinfo.fingerprint),
            keyinfo.url.replace("file://", "")))
    logger.critical("%s", msg)

def log_dns_key_import(keyinfo, dns_result):
    log_key_import(keyinfo)
    if dns_result == dnf.dnssec.Validity.VALID:
        logger.critical(_('Verified using DNS record with DNSSEC signature.'))
    else:
        logger.critical(_('NOT verified using DNS record.'))

@contextlib.contextmanager
def pubring_dir(pubring_dir):
    # :deprecated, undocumented
    """ It was used internally and is no longer used. """
    msg = "Function `pubring_dir` is deprecated. Will be removed after 2023-10-30."
    warnings.warn(msg, DeprecationWarning, stacklevel=2)

orig = os.environ.get(GPG_HOME_ENV, None)
    os.environ[GPG_HOME_ENV] = pubring_dir
    try:
        yield
    finally:
        if orig is None:
            del os.environ[GPG_HOME_ENV]
        else:
            os.environ[GPG_HOME_ENV] = orig

def rawkey2infos(key_fo):
    keyinfos = []
    keys = libdnf.repo.Key.keysFromFd(key_fo.fileno())
    for key in keys:
        keyinfos.append(Key(key))
    return keyinfos

def retrieve(keyurl, repo=None):
    if keyurl.startswith('http:'):
        logger.warning(_("retrieving repo key for %s unencrypted from %s"), repo.id, keyurl)
    with dnf.util._urlopen(keyurl, repo=repo) as handle:
        keyinfos = rawkey2infos(handle)
    for keyinfo in keyinfos:
        keyinfo.url = keyurl
    return keyinfos

class Key(object):
    def __init__(self, repokey):
        self.id_ = repokey.getId()
        self.fingerprint = repokey.getFingerprint()
        self.raw_key = bytes(repokey.getAsciiArmoredKey(), 'utf-8')
        self.timestamp = repokey.getTimestamp()
        self.url = repokey.getUrl()
        self.userid = repokey.getUserId()

@property
    def short_id(self):
        rj = '0' if dnf.pycomp.PY3 else b'0'
        return self.id_[-8:].rjust(8, rj)

@property
    def rpm_id(self):
        return self.short_id.lower()

cancel