1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
|
#!/usr/bin/python
import rpm, sys, errno
try:
from rpmUtils.miscutils import getSigInfo
except ImportError:
import locale
def getSigInfo(hdr):
"""checks signature from an hdr hand back signature information and/or
an error code"""
locale.setlocale(locale.LC_ALL, 'C')
string = '%|DSAHEADER?{%{DSAHEADER:pgpsig}}:{%|RSAHEADER?{%{RSAHEADER:pgpsig}}:{%|SIGGPG?{%{SIGGPG:pgpsig}}:{%|SIGPGP?{%{SIGPGP:pgpsig}}:{(none)}|}|}|}|'
siginfo = hdr.sprintf(string)
if siginfo != '(none)':
error = 0
sigtype, sigdate, sigid = siginfo.split(',')
else:
error = 101
sigtype = 'MD5'
sigdate = 'None'
sigid = 'None'
infotuple = (sigtype, sigdate, sigid)
return error, infotuple
from optparse import OptionParser
ts=rpm.TransactionSet()
pubkeys={}
pubkeys['unknown'] = 'Unknown signing key'
def buildKeyList():
keys = ts.dbMatch(rpm.RPMTAG_NAME, 'gpg-pubkey')
for hdr in keys:
pubkeys[hdr[rpm.RPMTAG_VERSION]]=hdr[rpm.RPMTAG_SUMMARY][4:].split('<',1)[0].rstrip()
def getPkgNevra(hdr):
if hdr[rpm.RPMTAG_EPOCH]:
return '%s-%s:%s-%s.%s' % ( hdr[rpm.RPMTAG_NAME], hdr[rpm.RPMTAG_EPOCH],
hdr[rpm.RPMTAG_VERSION], hdr[rpm.RPMTAG_RELEASE],
hdr[rpm.RPMTAG_ARCH])
else:
return '%s-%s-%s.%s' % ( hdr[rpm.RPMTAG_NAME], hdr[rpm.RPMTAG_VERSION],
hdr[rpm.RPMTAG_RELEASE], hdr[rpm.RPMTAG_ARCH] )
def getSig(hdr):
if hdr[rpm.RPMTAG_DSAHEADER]:
keyid = getSigInfo(hdr)[1][2][16:]
try:
return (getPkgNevra(hdr), pubkeys[keyid])
except KeyError:
pubkeys[keyid] = 'Unkown key %s' % keyid
return (getPkgNevra(hdr), pubkeys[keyid])
else:
return (getPkgNevra(hdr), 'unsigned')
def getPkg(name=None):
if name:
mi=ts.dbMatch(rpm.RPMTAG_NAME, name)
else:
mi=ts.dbMatch()
exists = False
for hdr in mi:
exists = True
if hdr[rpm.RPMTAG_NAME] == 'gpg-pubkey': continue
nevra, key = getSig(hdr)
try:
pkgs[key].append(nevra)
except KeyError:
pkgs[key] = []
pkgs[key].append(nevra)
if not exists:
sys.stderr.write('No such package %s\n' % name)
if __name__ == '__main__':
usage = '%prog [options] pkg1 pkg2...'
parser = OptionParser(usage)
parser.add_option('-m', '--machine-readable', action='store_true',
dest='mr', help='Produce machine readable output')
options, args = parser.parse_args()
buildKeyList()
pkgs = {}
for keyname in pubkeys.itervalues():
pkgs[keyname] = []
pkgs['unsigned'] = []
if len(args) != 0:
for pkg in args:
getPkg(pkg)
else:
getPkg()
if options.mr:
for pkg in pkgs.iteritems():
if pkg[1]:
for pkginstance in pkg[1]:
try:
print '%s,%s' % (pkginstance, pkg[0])
except IOError, e:
if e.errno == errno.EPIPE: sys.exit(1)
else: raise
else:
for pkg in pkgs.iteritems():
if pkg[1]:
print pkg[0]
print '-' * len(pkg[0])
for pkginstance in pkg[1]:
try:
print pkginstance
except IOError, e:
if e.errno == errno.EPIPE: sys.exit(1)
else: raise
print
|
