Node / ReticulumProjects / MeshChatX.git / files / scripts / sign-plugin.py

Displaying Raw • Download

T8b949e#!/usr/bin/env python3

T8b949e# SPDX-License-Identifier: 0BSD

Tff7b72from T7ee787__future__ Tff7b72import Te6edf3annotations

Tff7b72import T7ee787argparse

Tff7b72import T7ee787os

Tff7b72import T7ee787subprocess

Tff7b72import T7ee787sys

Tff7b72import T7ee787tempfile

Te6edf3_ROOT Tff7b72= Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffabspathTb4b4b4(Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffjoinTb4b4b4(Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffdirnameTb4b4b4(Tff7b72__file__Tb4b4b4)Tb4b4b4, Ta5d6ff"Ta5d6ff..Ta5d6ff"Tb4b4b4)Tb4b4b4)

Tff7b72if Te6edf3_ROOT Tff7b72not Tff7b72in Te6edf3sysTff7b72.Td2a8ffpathTb4b4b4:

Te6edf3sysTff7b72.Td2a8ffpathTff7b72.Td2a8ffinsertTb4b4b4(T79c0ff0Tb4b4b4, Te6edf3_ROOTTb4b4b4)

Tff7b72from T7ee787meshchatxT7ee787.T7ee787srcT7ee787.T7ee787backendT7ee787.T7ee787plugin_signature Tff7b72import Tb4b4b4( T8b949e# noqa: E402

Te6edf3SignatureInfoTb4b4b4,

Te6edf3canonical_dir_payloadTb4b4b4,

Te6edf3verify_dir_signatureTb4b4b4,

Te6edf3verify_wasm_signatureTb4b4b4,

Te6edf3verify_zip_signatureTb4b4b4,

Te6edf3write_dir_signatureTb4b4b4,

Tb4b4b4)

Tff7b72from T7ee787meshchatxT7ee787.T7ee787srcT7ee787.T7ee787backendT7ee787.T7ee787plugin_wasm_bundle Tff7b72import Tb4b4b4( T8b949e# noqa: E402

Te6edf3append_wasm_signatureTb4b4b4,

Te6edf3wasm_payload_without_signatureTb4b4b4,

Tb4b4b4)

Tff7b72def Td2a8ff_sign_payloadTb4b4b4(Te6edf3identityTb4b4b4: Tffa657strTb4b4b4, Te6edf3payloadTb4b4b4: Tffa657bytesTb4b4b4) Tff7b72-Tff7b72> Tffa657bytesTb4b4b4:

Tff7b72with Te6edf3tempfileTff7b72.Td2a8ffNamedTemporaryFileTb4b4b4(Te6edf3deleteTff7b72=Tff7b72FalseTb4b4b4) Tff7b72as Te6edf3tmpTb4b4b4:

Te6edf3tmpTff7b72.Td2a8ffwriteTb4b4b4(Te6edf3payloadTb4b4b4)

Te6edf3tmp_path Tff7b72= Te6edf3tmpTff7b72.Td2a8ffname

Te6edf3rsg_path Tff7b72= Te6edf3tmp_path Tff7b72+ Ta5d6ff"Ta5d6ff.rsgTa5d6ff"

Tff7b72tryTb4b4b4:

Te6edf3rnid Tff7b72= Te6edf3osTff7b72.Td2a8ffenvironTff7b72.Td2a8ffgetTb4b4b4(Ta5d6ff"Ta5d6ffRNIDTa5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ffrnidTa5d6ff"Tb4b4b4)

Te6edf3subprocessTff7b72.Td2a8ffrunTb4b4b4(

Tb4b4b4[Te6edf3rnidTb4b4b4, Ta5d6ff"Ta5d6ff-iTa5d6ff"Tb4b4b4, Te6edf3identityTb4b4b4, Ta5d6ff"Ta5d6ff-sTa5d6ff"Tb4b4b4, Te6edf3tmp_pathTb4b4b4]Tb4b4b4,

Te6edf3checkTff7b72=Tff7b72TrueTb4b4b4,

Tb4b4b4)

Tff7b72with Tffa657openTb4b4b4(Te6edf3rsg_pathTb4b4b4, Ta5d6ff"Ta5d6ffrbTa5d6ff"Tb4b4b4) Tff7b72as Te6edf3handleTb4b4b4:

Tff7b72return Te6edf3handleTff7b72.Td2a8ffreadTb4b4b4(Tb4b4b4)

Tff7b72finallyTb4b4b4:

Tff7b72for Te6edf3path Tff7b72in Tb4b4b4(Te6edf3tmp_pathTb4b4b4, Te6edf3rsg_pathTb4b4b4)Tb4b4b4:

Tff7b72tryTb4b4b4:

Te6edf3osTff7b72.Td2a8ffremoveTb4b4b4(Te6edf3pathTb4b4b4)

Tff7b72except Tf85149OSErrorTb4b4b4:

Tff7b72pass

Tff7b72def Td2a8ff_print_signatureTb4b4b4(Te6edf3infoTb4b4b4: Te6edf3SignatureInfoTb4b4b4) Tff7b72-Tff7b72> Tffa657intTb4b4b4:

Tff7b72if Tff7b72not Te6edf3infoTff7b72.Td2a8ffpresentTb4b4b4:

Tffa657printTb4b4b4(Ta5d6ff"Ta5d6ffunsignedTa5d6ff"Tb4b4b4)

Tff7b72return T79c0ff0

Tff7b72if Tff7b72not Te6edf3infoTff7b72.Td2a8ffvalidTb4b4b4:

Tff7b72if Te6edf3infoTff7b72.Td2a8fferrorTb4b4b4:

Tffa657printTb4b4b4(Ta5d6fffTa5d6ff"Ta5d6ffinvalid signature: Tffd700{Te6edf3infoTff7b72.Td2a8fferrorTffd700}Ta5d6ff"Tb4b4b4, Te6edf3fileTff7b72=Te6edf3sysTff7b72.Td2a8ffstderrTb4b4b4)

Tff7b72elseTb4b4b4:

Tffa657printTb4b4b4(Ta5d6ff"Ta5d6ffinvalid signatureTa5d6ff"Tb4b4b4, Te6edf3fileTff7b72=Te6edf3sysTff7b72.Td2a8ffstderrTb4b4b4)

Tff7b72return T79c0ff1

Tff7b72if Te6edf3infoTff7b72.Td2a8fftrusted Tff7b72and Te6edf3infoTff7b72.Td2a8ffsigner_nameTb4b4b4:

Tffa657printTb4b4b4(Ta5d6fffTa5d6ff"Ta5d6ffvalid signer=Tffd700{Te6edf3infoTff7b72.Td2a8ffsignerTffd700}Ta5d6ff name=Tffd700{Te6edf3infoTff7b72.Td2a8ffsigner_nameTffd700}Ta5d6ff trusted=yesTa5d6ff"Tb4b4b4)

Tff7b72elseTb4b4b4:

Tffa657printTb4b4b4(Ta5d6fffTa5d6ff"Ta5d6ffvalid signer=Tffd700{Te6edf3infoTff7b72.Td2a8ffsignerTffd700}Ta5d6ff trusted=noTa5d6ff"Tb4b4b4)

Tff7b72return T79c0ff0

Tff7b72def Td2a8ffcmd_signTb4b4b4(Te6edf3argsTb4b4b4: Te6edf3argparseTff7b72.Td2a8ffNamespaceTb4b4b4) Tff7b72-Tff7b72> Tffa657intTb4b4b4:

Tff7b72if Tff7b72not Te6edf3argsTff7b72.Td2a8ffidentityTb4b4b4:

Tff7b72raise Tf85149SystemExitTb4b4b4(Ta5d6ff"Ta5d6ff-identity is requiredTa5d6ff"Tb4b4b4)

Tff7b72if Te6edf3argsTff7b72.Td2a8ffdirTb4b4b4:

Te6edf3payload Tff7b72= Te6edf3canonical_dir_payloadTb4b4b4(Te6edf3argsTff7b72.Td2a8ffdirTb4b4b4)

Te6edf3rsg Tff7b72= Te6edf3_sign_payloadTb4b4b4(Te6edf3argsTff7b72.Td2a8ffidentityTb4b4b4, Te6edf3payloadTb4b4b4)

Te6edf3write_dir_signatureTb4b4b4(Te6edf3argsTff7b72.Td2a8ffdirTb4b4b4, Te6edf3rsgTb4b4b4)

Tff7b72return T79c0ff0

Tff7b72if Te6edf3argsTff7b72.Td2a8ffzipTb4b4b4:

Tff7b72import T7ee787zipfile

Tff7b72from T7ee787meshchatxT7ee787.T7ee787srcT7ee787.T7ee787backendT7ee787.T7ee787plugin_signature Tff7b72import Te6edf3canonical_zip_payload

Tff7b72with Te6edf3zipfileTff7b72.Td2a8ffZipFileTb4b4b4(Te6edf3argsTff7b72.Td2a8ffzipTb4b4b4) Tff7b72as Te6edf3archiveTb4b4b4:

Te6edf3payload Tff7b72= Te6edf3canonical_zip_payloadTb4b4b4(Te6edf3archiveTff7b72.Td2a8ffinfolistTb4b4b4(Tb4b4b4)Tb4b4b4, Te6edf3archiveTb4b4b4)

Te6edf3rsg Tff7b72= Te6edf3_sign_payloadTb4b4b4(Te6edf3argsTff7b72.Td2a8ffidentityTb4b4b4, Te6edf3payloadTb4b4b4)

Te6edf3tmp_path Tff7b72= Te6edf3argsTff7b72.Td2a8ffzip Tff7b72+ Ta5d6ff"Ta5d6ff.signedTa5d6ff"

Tff7b72with Tb4b4b4(

Te6edf3zipfileTff7b72.Td2a8ffZipFileTb4b4b4(Te6edf3argsTff7b72.Td2a8ffzipTb4b4b4) Tff7b72as Te6edf3readerTb4b4b4,

Te6edf3zipfileTff7b72.Td2a8ffZipFileTb4b4b4(Te6edf3tmp_pathTb4b4b4, Ta5d6ff"Ta5d6ffwTa5d6ff"Tb4b4b4) Tff7b72as Te6edf3writerTb4b4b4,

Tb4b4b4)Tb4b4b4:

Tff7b72for Te6edf3info Tff7b72in Te6edf3readerTff7b72.Td2a8ffinfolistTb4b4b4(Tb4b4b4)Tb4b4b4:

Te6edf3clean Tff7b72= Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffnormpathTb4b4b4(Te6edf3infoTff7b72.Td2a8fffilenameTb4b4b4)Tff7b72.Td2a8ffreplaceTb4b4b4(Ta5d6ff"Tffea00\\Ta5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ff/Ta5d6ff"Tb4b4b4)

Tff7b72if Te6edf3osTff7b72.Td2a8ffpathTff7b72.Td2a8ffbasenameTb4b4b4(Te6edf3cleanTb4b4b4) Tff7b72== Ta5d6ff"Ta5d6ffmeshchatx.plugin.rsgTa5d6ff"Tb4b4b4:

Tff7b72continue

Te6edf3writerTff7b72.Td2a8ffwritestrTb4b4b4(Te6edf3infoTb4b4b4, Te6edf3readerTff7b72.Td2a8ffreadTb4b4b4(Te6edf3infoTff7b72.Td2a8fffilenameTb4b4b4)Tb4b4b4)

Te6edf3writerTff7b72.Td2a8ffwritestrTb4b4b4(Ta5d6ff"Ta5d6ffmeshchatx.plugin.rsgTa5d6ff"Tb4b4b4, Te6edf3rsgTb4b4b4)

Te6edf3osTff7b72.Td2a8ffreplaceTb4b4b4(Te6edf3tmp_pathTb4b4b4, Te6edf3argsTff7b72.Td2a8ffzipTb4b4b4)

Tff7b72return T79c0ff0

Tff7b72if Te6edf3argsTff7b72.Td2a8ffwasmTb4b4b4:

Tff7b72with Tffa657openTb4b4b4(Te6edf3argsTff7b72.Td2a8ffwasmTb4b4b4, Ta5d6ff"Ta5d6ffrbTa5d6ff"Tb4b4b4) Tff7b72as Te6edf3handleTb4b4b4:

Te6edf3wasm Tff7b72= Te6edf3handleTff7b72.Td2a8ffreadTb4b4b4(Tb4b4b4)

Te6edf3payload Tff7b72= Te6edf3wasm_payload_without_signatureTb4b4b4(Te6edf3wasmTb4b4b4)

Te6edf3rsg Tff7b72= Te6edf3_sign_payloadTb4b4b4(Te6edf3argsTff7b72.Td2a8ffidentityTb4b4b4, Te6edf3payloadTb4b4b4)

Te6edf3signed Tff7b72= Te6edf3append_wasm_signatureTb4b4b4(Te6edf3wasmTb4b4b4, Te6edf3rsgTb4b4b4)

Te6edf3out_path Tff7b72= Te6edf3argsTff7b72.Td2a8ffoutput Tff7b72or Te6edf3argsTff7b72.Td2a8ffwasm

Tff7b72with Tffa657openTb4b4b4(Te6edf3out_pathTb4b4b4, Ta5d6ff"Ta5d6ffwbTa5d6ff"Tb4b4b4) Tff7b72as Te6edf3handleTb4b4b4:

Te6edf3handleTff7b72.Td2a8ffwriteTb4b4b4(Te6edf3signedTb4b4b4)

Tff7b72return T79c0ff0

Tff7b72if Te6edf3argsTff7b72.Td2a8ffpyTb4b4b4:

Tff7b72with Tffa657openTb4b4b4(Te6edf3argsTff7b72.Td2a8ffpyTb4b4b4, Ta5d6ff"Ta5d6ffrbTa5d6ff"Tb4b4b4) Tff7b72as Te6edf3handleTb4b4b4:

Te6edf3payload Tff7b72= Te6edf3handleTff7b72.Td2a8ffreadTb4b4b4(Tb4b4b4)

Te6edf3rsg Tff7b72= Te6edf3_sign_payloadTb4b4b4(Te6edf3argsTff7b72.Td2a8ffidentityTb4b4b4, Te6edf3payloadTb4b4b4)

Tff7b72with Tffa657openTb4b4b4(Te6edf3argsTff7b72.Td2a8ffpy Tff7b72+ Ta5d6ff"Ta5d6ff.rsgTa5d6ff"Tb4b4b4, Ta5d6ff"Ta5d6ffwbTa5d6ff"Tb4b4b4) Tff7b72as Te6edf3handleTb4b4b4:

Te6edf3handleTff7b72.Td2a8ffwriteTb4b4b4(Te6edf3rsgTb4b4b4)

Tff7b72return T79c0ff0

Tff7b72raise Tf85149SystemExitTb4b4b4(Ta5d6ff"Ta5d6ffone of -dir, -zip, -wasm, or -py is requiredTa5d6ff"Tb4b4b4)

Tff7b72def Td2a8ffcmd_verifyTb4b4b4(Te6edf3argsTb4b4b4: Te6edf3argparseTff7b72.Td2a8ffNamespaceTb4b4b4) Tff7b72-Tff7b72> Tffa657intTb4b4b4:

Tff7b72if Te6edf3argsTff7b72.Td2a8ffdirTb4b4b4:

Tff7b72return Te6edf3_print_signatureTb4b4b4(Te6edf3verify_dir_signatureTb4b4b4(Te6edf3argsTff7b72.Td2a8ffdirTb4b4b4)Tb4b4b4)

Tff7b72if Te6edf3argsTff7b72.Td2a8ffzipTb4b4b4:

Tff7b72return Te6edf3_print_signatureTb4b4b4(Te6edf3verify_zip_signatureTb4b4b4(Te6edf3argsTff7b72.Td2a8ffzipTb4b4b4)Tb4b4b4)

Tff7b72if Te6edf3argsTff7b72.Td2a8ffwasmTb4b4b4:

Tff7b72with Tffa657openTb4b4b4(Te6edf3argsTff7b72.Td2a8ffwasmTb4b4b4, Ta5d6ff"Ta5d6ffrbTa5d6ff"Tb4b4b4) Tff7b72as Te6edf3handleTb4b4b4:

Te6edf3data Tff7b72= Te6edf3handleTff7b72.Td2a8ffreadTb4b4b4(Tb4b4b4)

Tff7b72return Te6edf3_print_signatureTb4b4b4(Te6edf3verify_wasm_signatureTb4b4b4(Te6edf3dataTb4b4b4)Tb4b4b4)

Tff7b72if Te6edf3argsTff7b72.Td2a8ffpyTb4b4b4:

Tff7b72from T7ee787meshchatxT7ee787.T7ee787srcT7ee787.T7ee787backendT7ee787.T7ee787plugin_signature Tff7b72import Te6edf3verify_py_signature

Tff7b72return Te6edf3_print_signatureTb4b4b4(Te6edf3verify_py_signatureTb4b4b4(Te6edf3argsTff7b72.Td2a8ffpyTb4b4b4)Tb4b4b4)

Tff7b72raise Tf85149SystemExitTb4b4b4(Ta5d6ff"Ta5d6ffone of -dir, -zip, -wasm, or -py is requiredTa5d6ff"Tb4b4b4)

Tff7b72def Td2a8ffmainTb4b4b4(Te6edf3argvTb4b4b4: Tffa657listTb4b4b4[Tffa657strTb4b4b4] Tff7b72| Tff7b72None Tff7b72= Tff7b72NoneTb4b4b4) Tff7b72-Tff7b72> Tffa657intTb4b4b4:

Te6edf3parser Tff7b72= Te6edf3argparseTff7b72.Td2a8ffArgumentParserTb4b4b4(Te6edf3descriptionTff7b72=Ta5d6ff"Ta5d6ffSign or verify MeshChatX pluginsTa5d6ff"Tb4b4b4)

Te6edf3sub Tff7b72= Te6edf3parserTff7b72.Td2a8ffadd_subparsersTb4b4b4(Te6edf3destTff7b72=Ta5d6ff"Ta5d6ffcommandTa5d6ff"Tb4b4b4, Te6edf3requiredTff7b72=Tff7b72TrueTb4b4b4)

Te6edf3sign Tff7b72= Te6edf3subTff7b72.Td2a8ffadd_parserTb4b4b4(Ta5d6ff"Ta5d6ffsignTa5d6ff"Tb4b4b4)

Te6edf3signTff7b72.Td2a8ffadd_argumentTb4b4b4(Ta5d6ff"Ta5d6ff-identityTa5d6ff"Tb4b4b4, Te6edf3requiredTff7b72=Tff7b72FalseTb4b4b4)

Te6edf3signTff7b72.Td2a8ffadd_argumentTb4b4b4(Ta5d6ff"Ta5d6ff-dirTa5d6ff"Tb4b4b4)

Te6edf3signTff7b72.Td2a8ffadd_argumentTb4b4b4(Ta5d6ff"Ta5d6ff-zipTa5d6ff"Tb4b4b4)

Te6edf3signTff7b72.Td2a8ffadd_argumentTb4b4b4(Ta5d6ff"Ta5d6ff-wasmTa5d6ff"Tb4b4b4)

Te6edf3signTff7b72.Td2a8ffadd_argumentTb4b4b4(Ta5d6ff"Ta5d6ff-pyTa5d6ff"Tb4b4b4)

Te6edf3signTff7b72.Td2a8ffadd_argumentTb4b4b4(Ta5d6ff"Ta5d6ff-outputTa5d6ff"Tb4b4b4)

Te6edf3signTff7b72.Td2a8ffset_defaultsTb4b4b4(Te6edf3funcTff7b72=Te6edf3cmd_signTb4b4b4)

Te6edf3verify Tff7b72= Te6edf3subTff7b72.Td2a8ffadd_parserTb4b4b4(Ta5d6ff"Ta5d6ffverifyTa5d6ff"Tb4b4b4)

Te6edf3verifyTff7b72.Td2a8ffadd_argumentTb4b4b4(Ta5d6ff"Ta5d6ff-dirTa5d6ff"Tb4b4b4)

Te6edf3verifyTff7b72.Td2a8ffadd_argumentTb4b4b4(Ta5d6ff"Ta5d6ff-zipTa5d6ff"Tb4b4b4)

Te6edf3verifyTff7b72.Td2a8ffadd_argumentTb4b4b4(Ta5d6ff"Ta5d6ff-wasmTa5d6ff"Tb4b4b4)

Te6edf3verifyTff7b72.Td2a8ffadd_argumentTb4b4b4(Ta5d6ff"Ta5d6ff-pyTa5d6ff"Tb4b4b4)

Te6edf3verifyTff7b72.Td2a8ffset_defaultsTb4b4b4(Te6edf3funcTff7b72=Te6edf3cmd_verifyTb4b4b4)

Te6edf3args Tff7b72= Te6edf3parserTff7b72.Td2a8ffparse_argsTb4b4b4(Te6edf3argvTb4b4b4)

Tff7b72return Te6edf3argsTff7b72.Td2a8fffuncTb4b4b4(Te6edf3argsTb4b4b4)

Tff7b72if Tff7b72__name__ Tff7b72== Ta5d6ff"Ta5d6ff__main__Ta5d6ff"Tb4b4b4:

Tff7b72raise Tf85149SystemExitTb4b4b4(Te6edf3mainTb4b4b4(Tb4b4b4)Tb4b4b4)