aboutsummaryrefslogtreecommitdiffstats
path: root/t_install_iso/016_check_pubkey.t
blob: edf20cb8d28bab26f0787767d6fedf2209091e84 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
# This file is part of the Mageia project                                                                                                                   
#   Copyright (C) 2011 Damien Lallement <dams@mageia.org>                                                                                                   
#             (C) 2011 Romain D'Alverny <rda@mageia.org>                                                                                                    
#                                                                                                                                                           
#   This library is free software; you can redistribute it and/or
#   modify it under the terms of the GNU Library General Public
#   License as published by the Free Software Foundation; either
#   version 2 of the License, or (at your option) any later version.
#
#   This library is distributed in the hope that it will be useful,
#   but WITHOUT ANY WARRANTY; without even the implied warranty of
#   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
#   Library General Public License for more details.
#
#   You should have received a copy of the GNU Library General Public License
#   along with this library; see the file COPYING.LIB.  If not, write to
#   the Free Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
#   Boston, MA 02110-1301, USA.
#
#
# TODO check pubkeys FIXME this looks like a mess.
# This function get the path of the pubkeys
#
use MDK::Common;
use Test::Most;
use File::Basename;
use Tools;

my ($image_path) = @ARGV;
my $name         = basename($image_path);
my %info         = Tools::parse_mageia_iso_name($name);

bail_on_fail;

my $url;
my $path;
my $pubkey = 1;
my $media;

system "ls /media/iso_check/i586/media/ > temp_media_on_iso.log" if -r "/media/iso_check/i586/media/";
system "ls /media/iso_check/x86_64/media/ >> temp_media_on_iso.log" if -r "/media/iso_check/x86_64/media/";

ok(-r "temp_media_on_iso.log", "Got a log for media contents");

foreach (cat_("temp_media_on_iso.log")) {
    chomp;
    if ($info{arch} ne "dual" && $_ ne 'media_info') {
        $path    = "/media/iso_check/" . $info{arch} . "/media/$_/media_info/pubkey";
        $url     = "pubkey/" . $info{arch} . "-$_-pubkey";
        #$url    .= "-cooker" if !$finale;
        $pubkey &= check_key($path, $url, $_, $info{arch}) if -r $path && -r $url;
    }
    elsif ($_ ne 'media_info') {
        foreach my $arch ("i586", "x86_64") {
            $path = "/media/iso_check/$arch/media/$_/media_info/pubkey";
            $url  = "pubkey/$arch-$_-pubkey";
            #$url .= "-cooker" if !$finale;
            -r $path and -r $url and $pubkey &= check_key($path, $url, $_, $arch);
        }
    }
}
-r "temp_media_on_iso.log" and system "rm temp_media_on_iso.log";


#This function get the gpg -a key of the pubkey to compare it
sub get_gpg {
    my ($pubkey) = @_;
    my $key;
    my $file;
    system "gpg -a $pubkey > get_gpg_key.log";
    open($file, "get_gpg_key.log");
    while (my $a = <$file>) {
        if (substr($a, 0, 11) eq "pub  1024D/") {
            $key = substr($a, 11, 8);
        }
    }
    system "rm get_gpg_key.log";

    return $key;
}


#Verification of the pubkey with the original pubkey
sub check_key { # sed "s/pub\w1024D/\(.*\) /\1/"
    my ($iso_file, $ref_file, $media, $arch) = @_;
    my $unvalid;
    my $valid = 1;
    my $file  = get_gpg($iso_file);
    my $sign  = `cat $ref_file`;
    chomp($sign);
    if ($file eq $sign) {
        if (member($media, qw(core nonfree))) {
            note "$arch-$media pubkey is valid.\t\tOK\n" if $arch eq 'i586';
            note "$arch-$media pubkey is valid.\t\tOK\n" if $arch eq 'x86_64' && member($media, qw(core nonfree));
            note "$arch-$media pubkey is valid.\tOK\n"   if $arch eq 'x86_64' && $media eq 'non-free';
        } else {
            note "$arch-$media pubkey is valid.\tOK\n";
        }
        note "$arch-$media pubkey is valid.\n";
        return $valid;
    } else {
        if (member($media, qw(core))) {
            note "$arch-$media pubkey isn't valid.\t\tNOK\n";
        } else {
            note "$arch-$media pubkey isn't valid.\tNOK\n";
        }
        note "$arch-$media pubkey isn't valid.\n";
        return $unvalid;
    }
    return $unvalid;
}

done_testing();