�
�f � �z � d Z ddlZddlZddlmZ ej
e� Zg d�Zd� Z d� Z
d d�Z d d�Z d � Z
d
d
�Zy)z0gpg.py - Collection of gpg key related functions� N)�subp)�gpgz--with-fingerprintz--no-default-keyringz --list-keysz --keyringc � � t j ddd| gd�� \ }}|S # t j $ r$}t j d| |� d}Y d}~|S d}~ww xY w)z*Export gpg key, armoured key gets returnedr z--exportz--armourT��capture�&Failed to export armoured key "%s": %sN)r �ProcessExecutionError�LOG�debug)�key�armour�_�errors �//usr/lib/python3/dist-packages/cloudinit/gpg.py�
export_armourr sa � ���i�i�
�J�
�C� 0�$�
� ��� �M�� � %� %� � � � �:�C��G��� �M�� �s � " �A�A�Ac �J � t j ddg| d�� j S )z~Dearmor gpg key, dearmored key gets returned
note: man gpg(1) makes no mention of an --armour spelling, only --armor
r z --dearmorF)�data�decode)r �stdout)r s r �dearmorr ' s" � �
�9�9�e�[�)��E� B� I� I�I� c �� � g }|j t � |s|j d� |j | � t j |d�� \ }}|rt j d| |� |S )z�List keys from a keyring with fingerprints. Default to a stable machine
parseable format.
@param key_file: a string containing a filepath to a key
@param human_output: return output intended for human parsing
z
--with-colonsTr r )�extend�GPG_LIST�appendr r
�warning)�key_file� human_output�cmdr �stderrs r �listr! / s^ � �
�C��J�J�x�� � �
�
�?�#��J�J�x���y�y��d�3��V�V�
� � � �<�h��O� �Mr c �� � t j d| |� ddd|z d| g}|�g }d}d}t |� } |d z
} t j |d�
� t j d | ||� y# t j $ r }|}Y d}~nd}~ww xY w t |� }t j d |j |� t j |� n$# t $ r}t d
| |||fz � |�d}~ww xY w��)a� Receive gpg key from the specified keyserver.
Retries are done by default because keyservers can be unreliable.
Additionally, there is no way to determine the difference between
a non-existent key and a failure. In both cases gpg (at least 2.2.4)
exits with status 2 and stderr: "keyserver receive failed: No data"
It is assumed that a key provided to cloud-init exists on the keyserver
so re-trying makes better sense than failing.
@param key: a string key fingerprint (as passed to gpg --recv-keys).
@param keyserver: the keyserver to request keys from.
@param retries: an iterable of sleep lengths for retries.
Use None to indicate no retries.z&Importing key '%s' from keyserver '%s'r z--no-ttyz--keyserver=%sz --recv-keysNr T� r z/Imported key '%s' from keyserver '%s' on try %dz6Import failed with exit code %d, will try again in %ssz@Failed to import key '%s' from keyserver '%s' after %d tries: %s) r
r �iterr r �next� exit_code�time�sleep�
StopIteration�
ValueError) r � keyserver�retriesr �trynumr �sleeps�e�naplens r �recv_keyr1 B s � � �I�I�6��Y�G� �*� .�� :�M�3�
O�C�����
�F� �E�
�'�]�F�
��!� ��
� �I�I�c�4� (� �I�I�A����
�
���)�)� ��E�� �� ��&�\�F� �I�I�H�����
�
�J�J�v� �� � � �%�(+�Y���'F�G�� �
�� ��+ s0 �/A, �,B �?B�B �AC � C2�C-�-C2c � � t j dddd| gd�� y# t j $ r!}t j d| |� Y d}~yd}~ww xY w) z0Delete the specified key from the local gpg ringr z--batchz--yesz
--delete-keysTr zFailed delete key "%s": %sN)r r r
r )r r s r �
delete_keyr3 s sO � �>� � � �
�I�w��� =�t�
�� � %� %� >� � � �0�#�u�=�=��>�s � �A�A�Ac �� � t | � }|s' t | |�� t | � } t | � |S |S # t $ r t j d| � � w xY w# t | � w xY w)z get gpg keyid from keyserver)r+ zFailed to obtain gpg key %s)r r1 r* r
� exceptionr3 )�keyidr+ r
s r �
getkeybyidr7 } si � �
�5�
!�F� � � �U�i� 0�"�5�)�F�
�u� � �M�6�M�� � � �M�M�7�� ?� � ��
�u� �s �7 �!A�A �
A()F))r# r# )zkeyserver.ubuntu.com)�__doc__�loggingr' � cloudinitr � getLogger�__name__r
r r r r! r1 r3 r7 � r r �<module>r> sL �� 7� � � ��g����!�� ��
�J��&.�b>�r |