Package zeroinstall :: Package injector :: Module iface_cache :: Class PendingFeed
[frames] | no frames]

Class PendingFeed

source code

object --+
         |
        PendingFeed

A feed that has been downloaded but not yet added to the interface cache. Feeds remain in this state until the user confirms that they trust at least one of the signatures.


Since: 0.25

Instance Methods
 
__init__(self, url, signed_data)
Downloaded data is a GPG-signed message.
source code
[zeroinstall.support.tasks.Blocker]
download_keys(self, fetcher, feed_hint=None, key_mirror=None)
Download any required GPG keys not already on our keyring.
source code
 
recheck(self)
Set new_xml and sigs by reading signed_data.
source code

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Instance Variables
str new_xml
the payload of the signed_data, or the whole thing if XML
stream signed_data
the untrusted data
[gpg.Signature] sigs
signatures extracted from signed_data
str url
URL for the feed
Properties

Inherited from object: __class__

Method Details

__init__(self, url, signed_data)
(Constructor)

source code 

Downloaded data is a GPG-signed message.

Parameters:
  • url (str) - the URL of the downloaded feed
  • signed_data (stream) - the downloaded data (not yet trusted)
Raises:
  • SafeException - if the data is not signed, and logs the actual data
Overrides: object.__init__

download_keys(self, fetcher, feed_hint=None, key_mirror=None)

source code 

Download any required GPG keys not already on our keyring. When all downloads are done (successful or otherwise), add any new keys to the keyring, recheck.

Parameters:
  • fetcher (fetch.Fetcher) - fetcher to manage the download (was Handler before version 1.5)
  • key_mirror (str) - URL of directory containing keys, or None to use feed's directory
Returns: [zeroinstall.support.tasks.Blocker]

recheck(self)

source code 

Set new_xml and sigs by reading signed_data. You need to call this when previously-missing keys are added to the GPG keyring.