create_sig Namespace Reference

Functions
def	get_file_hash (file_path)
def	get_string_hash (inp_string)
def	get_sig_string (dcp_hash, my_hash, current_cl_cert, new_pr_hash, rpt_hash, debugging_flow=None)
def	main (new_bin_file_name, pr_verify_rpt_file_name)

Function Documentation

get_file_hash()

def create_sig.get_file_hash

(

file_path

)

Definition at line 52 of file create_sig.py.

def get_file_hash(file_path):
    # check right version
    assert __THIS_FILE_ALGORITHM_VERSION == 'hc1'
    sha256_hash = hashlib.sha256()
    with open(file_path, 'rb') as f:
        # Read and update hash string value in blocks of 4K
        for byte_block in iter(lambda: f.read(4096), b""):
            sha256_hash.update(byte_block)
    return sha256_hash.hexdigest()
 
 

Here is the caller graph for this function:

get_sig_string()

def create_sig.get_sig_string	(		dcp_hash,
			my_hash,
			current_cl_cert,
			new_pr_hash,
			rpt_hash,
			debugging_flow = None
	)

Definition at line 70 of file create_sig.py.

def get_sig_string(dcp_hash, my_hash, current_cl_cert, new_pr_hash, rpt_hash, debugging_flow=None):
    # check right version
    assert __THIS_FILE_ALGORITHM_VERSION == 'hc1'
    new_cert_string = str(dcp_hash) + str(my_hash) + str(current_cl_cert) + str(new_pr_hash) + str(rpt_hash)
    cert = hashlib.sha384(new_cert_string.encode('utf-8')).hexdigest()
    if debugging_flow is not None:
        print("\tnew_cert_string: {}".format(new_cert_string))
    return cert
 
 

Here is the caller graph for this function:

get_string_hash()

def create_sig.get_string_hash

(

inp_string

)

Definition at line 63 of file create_sig.py.

def get_string_hash(inp_string):
    # check right version
    assert __THIS_FILE_ALGORITHM_VERSION == 'hc1'
    sha256_hash = hashlib.sha256(inp_string.encode('utf-8'))
    return sha256_hash.hexdigest()
 
 

Here is the caller graph for this function:

main()

def create_sig.main	(		new_bin_file_name,
			pr_verify_rpt_file_name
	)

Definition at line 80 of file create_sig.py.

def main(new_bin_file_name, pr_verify_rpt_file_name):
    # we print only on error
    me_abs_dir = os.path.dirname(os.path.realpath(__file__))
    me_abs_file = os.path.abspath(os.path.realpath(__file__))
    cfp_json_file = me_abs_dir + __cfp_json_path__
    debugging_flow = os.environ.get('CFP_DEBUGGING')
    if debugging_flow is not None:
        cfp_json_file = me_abs_dir + debugging_flow + '/cFp.json'
    with open(cfp_json_file, 'r') as json_file:
        cFp_data = json.load(json_file)
 
    # 1. check folders and file names
    root_abs = os.path.realpath(me_abs_dir+"/../")
    if debugging_flow is not None:
        root_abs = os.path.realpath(me_abs_dir + debugging_flow + "/env/" + "/../")
    cFp_data['abs_path'] = root_abs
    dcps_folder = root_abs + __dcps_folder_name__
    # folder should exist...
    dcp_file_name = "3_top{}_STATIC.dcp".format(cFp_data[__mod_type_key__])
    target_file_name = os.path.abspath(dcps_folder + "/" + dcp_file_name)
    meta_file_name = "3_top{}_STATIC.json".format(cFp_data[__mod_type_key__])
    target_meta_name = os.path.abspath(dcps_folder + "/" + meta_file_name)
    # check preconditions and stop if necessary
    if not os.path.isfile(target_file_name) or not os.path.isfile(target_meta_name):
        print("[cFBuild] WARNING: {} or {} does not exist, so no signature can be created. Stop.".format(dcp_file_name, meta_file_name))
        # return so that the tcl can continue
        return 0
 
    new_bin_file_path = os.path.abspath(dcps_folder + '/' + new_bin_file_name)
    if not os.path.isfile(new_bin_file_path):
        print("[cFBuild] ERROR: {} is not a file. STOP.".format(new_bin_file_path))
        exit(1)
    ignore_pr_verify = False
    if pr_verify_rpt_file_name == __ignore_key__:
        ignore_pr_verify = True
    if not ignore_pr_verify:
        pr_verify_rpt_file_path = os.path.abspath(dcps_folder + '/' + pr_verify_rpt_file_name)
        if not os.path.isfile(pr_verify_rpt_file_path):
            print("[cFBuild] ERROR: {} is not a file. STOP.".format(pr_verify_rpt_file_path))
            exit(1)
        rpt_file_lines = []
        with open(pr_verify_rpt_file_path) as rpt_in:
            for line in rpt_in:
                rpt_file_lines.append(line.rstrip())
        pr_verify_str = ''.join(rpt_file_lines)
 
    sig_file_path = os.path.abspath(new_bin_file_path + '.' + __sig_file_ending__)
    new_sig = {'build_id': __THIS_FILE_VERSION_NUMBER__, 'algorithm': __THIS_FILE_ALGORITHM_VERSION,
               'file': new_bin_file_name}
 
    with open(target_meta_name, 'r') as meta_file:
        cur_meta = json.load(meta_file)
    current_cl_cert = cur_meta['cert']
    pl_id = cur_meta['id']
    # for Mantles
    if 'pl_id' in cur_meta:
        pl_id = cur_meta['pl_id']
    new_sig['pl_id'] = pl_id
 
    # crete new cert
    dcp_hash = get_file_hash(target_file_name)
    my_hash = get_file_hash(me_abs_file)
    new_pr_hash = get_file_hash(new_bin_file_path)
    if not ignore_pr_verify:
        # rpt_hash = get_file_hash(pr_verify_rpt_file_path) # not file!
        rpt_hash = get_string_hash(pr_verify_str)
    else:
        rpt_hash = __ignore_hash__
 
    if debugging_flow is not None:
        print("\tdcp hash: {}".format(dcp_hash))
        print("\trpt hash: {}".format(rpt_hash))
        print("\tmy hash: {}".format(my_hash))
        print("\tsig_file_path: {}".format(sig_file_path))
 
    new_sig['sig'] = get_sig_string(dcp_hash, my_hash, current_cl_cert, new_pr_hash, rpt_hash,
                                    debugging_flow=debugging_flow)
    new_sig['hash'] = new_pr_hash  # to check for transport errors first?
 
    if not ignore_pr_verify:
        rpt_sum_line = rpt_file_lines[-1]
        new_sig['verify_rpt'] = rpt_sum_line
        if dcp_file_name in rpt_sum_line:
            new_sig['verify'] = 'OK'
        else:
            new_sig['verify'] = 'NOK'
    else:
        new_sig['verify_rpt'] = __ignore_key__
        new_sig['verify'] = 'OK'
 
    with open(sig_file_path, 'w') as outfile:
        json.dump(new_sig, outfile)
 
    # save current pr_verify
    if not ignore_pr_verify:
        verify_report_name = os.path.abspath(dcps_folder + '/5_' + new_bin_file_name[2:-4] + '.' + __rpt_file_ending__)
        os.system("cp -f {} {}".format(pr_verify_rpt_file_path, verify_report_name))
 
    return 0
 
 

Here is the call graph for this function: