openssl : added logic to version computation. The package now warns user if he depends on an old version of the library
This commit is contained in:
parent
9eb037bc87
commit
587d356d6e
@ -1,3 +1,6 @@
|
||||
import urllib
|
||||
import llnl.util.tty as tty
|
||||
|
||||
from spack import *
|
||||
|
||||
class Openssl(Package):
|
||||
@ -10,6 +13,7 @@ class Openssl(Package):
|
||||
url = "http://www.openssl.org/source/openssl-1.0.1h.tar.gz"
|
||||
|
||||
version('1.0.1h', '8d6d684a9430d5cc98a62a5d8fbda8cf')
|
||||
version('1.0.1r', '1abd905e079542ccae948af37e393d28')
|
||||
version('1.0.2d', '38dd619b2e77cbac69b99f52a053d25a')
|
||||
version('1.0.2e', '5262bfa25b60ed9de9f28d5d52d77fc5')
|
||||
version('1.0.2f', 'b3bf73f507172be9292ea2a8c28b659d')
|
||||
@ -17,6 +21,42 @@ class Openssl(Package):
|
||||
depends_on("zlib")
|
||||
parallel = False
|
||||
|
||||
def url_for_version(self, version):
|
||||
# This URL is computed pinging the place where the latest version is stored. To avoid slowdown
|
||||
# due to repeated pinging, we store the URL in a private class attribute to do the job only once per version
|
||||
openssl_urls = getattr(Openssl, '_openssl_url', {})
|
||||
openssl_url = openssl_urls.get(version, None)
|
||||
# Same idea, but just to avoid issuing the same message multiple times
|
||||
warnings_given_to_user = getattr(Openssl, '_warnings_given', {})
|
||||
if openssl_url is None:
|
||||
latest = 'http://www.openssl.org/source/openssl-{version}.tar.gz'
|
||||
older = 'http://www.openssl.org/source/old/{version_number}/openssl-{version_full}.tar.gz'
|
||||
# Try to use the url where the latest tarballs are stored. If the url does not exist (404), then
|
||||
# return the url for older format
|
||||
version_number = '.'.join([str(x) for x in version[:-1]])
|
||||
older_url = older.format(version_number=version_number, version_full=version)
|
||||
latest_url = latest.format(version=version)
|
||||
response = urllib.urlopen(latest.format(version=version))
|
||||
if response.getcode() == 404:
|
||||
openssl_url = older_url
|
||||
# Checks if we already warned the user for this particular version of OpenSSL.
|
||||
# If not we display a warning message and mark this version
|
||||
if not warnings_given_to_user.get(version, False):
|
||||
tty.warn('This installation depends on an old version of OpenSSL, which may have known security issues. ')
|
||||
tty.warn('Consider updating to the latest version of this package.')
|
||||
tty.warn('More details at {homepage}'.format(homepage=Openssl.homepage))
|
||||
warnings_given_to_user[version] = True
|
||||
else:
|
||||
openssl_url = latest_url
|
||||
# Store the computed URL
|
||||
openssl_urls[version] = openssl_url
|
||||
# Store the updated dictionary of URLS
|
||||
Openssl._openssl_url = openssl_urls
|
||||
# Store the updated dictionary of warnings
|
||||
Openssl._warnings_given = warnings_given_to_user
|
||||
|
||||
return openssl_url
|
||||
|
||||
def install(self, spec, prefix):
|
||||
# OpenSSL uses a variable APPS in its Makefile. If it happens to be set
|
||||
# in the environment, then this will override what is set in the
|
||||
|
Loading…
Reference in New Issue
Block a user