mirror of
https://github.com/ansible-collections/community.crypto.git
synced 2026-03-27 22:03:22 +00:00
aec1826c34
I had to undo the u string prefix removals to not drop Python 2 compatibility. That's why black isn't enabled in antsibull-nox.toml yet.
87 lines
2.3 KiB
Python
87 lines
2.3 KiB
Python
# -*- coding: utf-8 -*-
|
|
# Copyright (c) 2023, Felix Fontein <felix@fontein.de>
|
|
# GNU General Public License v3.0+ (see LICENSES/GPL-3.0-or-later.txt or https://www.gnu.org/licenses/gpl-3.0.txt)
|
|
# SPDX-License-Identifier: GPL-3.0-or-later
|
|
|
|
from __future__ import absolute_import, division, print_function
|
|
|
|
|
|
__metaclass__ = type
|
|
|
|
import abc
|
|
import os
|
|
|
|
from ansible.module_utils import six
|
|
|
|
|
|
class GPGError(Exception):
|
|
pass
|
|
|
|
|
|
@six.add_metaclass(abc.ABCMeta)
|
|
class GPGRunner(object):
|
|
@abc.abstractmethod
|
|
def run_command(self, command, check_rc=True, data=None):
|
|
"""
|
|
Run ``[gpg] + command`` and return ``(rc, stdout, stderr)``.
|
|
|
|
If ``data`` is not ``None``, it will be provided as stdin.
|
|
The code assumes it is a bytes string.
|
|
|
|
Returned stdout and stderr are native Python strings.
|
|
Pass ``check_rc=False`` to allow return codes != 0.
|
|
|
|
Raises a ``GPGError`` in case of errors.
|
|
"""
|
|
pass
|
|
|
|
|
|
def get_fingerprint_from_stdout(stdout):
|
|
lines = stdout.splitlines(False)
|
|
for line in lines:
|
|
if line.startswith("fpr:"):
|
|
parts = line.split(":")
|
|
if len(parts) <= 9 or not parts[9]:
|
|
raise GPGError(
|
|
'Result line "{line}" does not have fingerprint as 10th component'.format(
|
|
line=line
|
|
)
|
|
)
|
|
return parts[9]
|
|
raise GPGError(
|
|
'Cannot extract fingerprint from stdout "{stdout}"'.format(stdout=stdout)
|
|
)
|
|
|
|
|
|
def get_fingerprint_from_file(gpg_runner, path):
|
|
if not os.path.exists(path):
|
|
raise GPGError("{path} does not exist".format(path=path))
|
|
stdout = gpg_runner.run_command(
|
|
[
|
|
"--no-keyring",
|
|
"--with-colons",
|
|
"--import-options",
|
|
"show-only",
|
|
"--import",
|
|
path,
|
|
],
|
|
check_rc=True,
|
|
)[1]
|
|
return get_fingerprint_from_stdout(stdout)
|
|
|
|
|
|
def get_fingerprint_from_bytes(gpg_runner, content):
|
|
stdout = gpg_runner.run_command(
|
|
[
|
|
"--no-keyring",
|
|
"--with-colons",
|
|
"--import-options",
|
|
"show-only",
|
|
"--import",
|
|
"/dev/stdin",
|
|
],
|
|
data=content,
|
|
check_rc=True,
|
|
)[1]
|
|
return get_fingerprint_from_stdout(stdout)
|