blob: ca2c1318837ef68a4ef3e1c3a74639ee17078d3c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
|
#!/usr/bin/perl -w
use strict;
use Parallel::ForkManager;
use File::Glob ':glob';
use File::Basename;
#rpm --checksig -v ~/pieces/2010.1/i586/media/main/release/basesystem-2010.0-2mdv2010.1.i586.rpm
# Header V3 DSA signature: OK, key ID 26752624
# Header SHA1 digest: OK (fdeb18c37115229582c4b42dba7d834c7b82bc8c)
# MD5 digest: OK (74cee8f749ae4443cb6dae3b65cc5a6e)
# V3 DSA signature: OK, key ID 26752624
#gpg -a pubkey_main
#pub 1024D/26752624 2003-12-10 MandrakeCooker <cooker@linux-mandrake.com>
#sub 1024g/E5CC3CAA 2003-12-10
my $NB_FORK=15;
my $path = $ARGV[0];
#my $key = $ARGV[1];
$ARGV[0] or die "First arg must be a path to rpm\n";
#$ARGV[1] or die "Second arg must be a the key (ie: 26752624)\n";
my $B;
my $convert = $path;
$convert =~ tr|\/|_|;
my $log = "log_check_sign_$convert.log";
system("cp /dev/null -f $log");
my $pm = new Parallel::ForkManager($NB_FORK);
my @list_pkg = glob("$path/*.rpm");
my $count = @list_pkg;
my $key = `gpg -a $path/media_info/pubkey | grep pub | cut -d "/" -f 2 | cut -d " " -f 1`;
print "$count transactions to do ... be patient !!!!\n";
my $status = "0";
open $B, ">>$log";
foreach my $pkg (@list_pkg) {
$pkg or next;
my $basename_pkg = basename($pkg);
$status++;
my $pid = $pm->start and next;
print("$basename_pkg ($status/$count)\n");
#my @command = `LC_ALL=C rpm --rcfile=$rpmrc --checksig -v $pkg | grep "key ID"`;
my @command = `LC_ALL=C rpm --checksig -v $pkg | grep "key ID"`;
foreach (@command) {
if ($_ =~ /$key/) {
# dont print if it is OK
# print "$pkg signature OK\n";
last;
} else {
print "$pkg signature NOK\n";
print $B "$pkg NOK\n";
last;
}
next;
}
$pm->finish;
}
#print "Waiting for the end of some check...\n";
$pm->wait_all_children;
close $B;
#print "all check are done...\n";
|
