7fdb879308
1. Changes the variant of openssl to `certs=mozilla/system/none` so that users can pick whether they want Spack or system certs, or if they don't want certs at all. 2. Keeps the default behavior of openssl to use certs=systems. 3. Changes the curl configuration to not guess the ca path during config, but rather fall back to whatever the tls provider is configured with. If we don't do this, curl will still pick up system certs if it finds them. As a minor fix, it also adds the build dep `pkgconfig` to curl, since that's being used during the configure phase to get openssl compilation flags.
44 lines
2.4 KiB
Python
44 lines
2.4 KiB
Python
# Copyright 2013-2021 Lawrence Livermore National Security, LLC and other
|
|
# Spack Project Developers. See the top-level COPYRIGHT file for details.
|
|
#
|
|
# SPDX-License-Identifier: (Apache-2.0 OR MIT)
|
|
|
|
from spack import *
|
|
|
|
|
|
class CaCertificatesMozilla(Package):
|
|
"""The Mozilla CA certificate store in PEM format"""
|
|
|
|
homepage = "https://curl.se/docs/caextract.html"
|
|
url = "https://curl.se/ca/cacert-2021-04-13.pem"
|
|
|
|
maintainers = ['haampie']
|
|
|
|
version('2021-07-05', sha256='a3b534269c6974631db35f952e8d7c7dbf3d81ab329a232df575c2661de1214a', expand=False)
|
|
version('2021-05-25', sha256='3a32ad57e7f5556e36ede625b854057ac51f996d59e0952c207040077cbe48a9', expand=False)
|
|
version('2021-04-13', sha256='533610ad2b004c1622a40622f86ced5e89762e1c0e4b3ae08b31b240d863e91f', expand=False)
|
|
version('2021-01-19', sha256='e010c0c071a2c79a76aa3c289dc7e4ac4ed38492bfda06d766a80b707ebd2f29', expand=False)
|
|
version('2020-12-08', sha256='313d562594ebd07846ad6b840dd18993f22e0f8b3f275d9aacfae118f4f00fb7', expand=False)
|
|
version('2020-10-14', sha256='bb28d145ed1a4ee67253d8ddb11268069c9dafe3db25a9eee654974c4e43eee5', expand=False)
|
|
version('2020-07-22', sha256='2782f0f8e89c786f40240fc1916677be660fb8d8e25dede50c9f6f7b0c2c2178', expand=False)
|
|
version('2020-06-24', sha256='726889705b00f736200ed7999f7a50021b8735d53228d679c4e6665aa3b44987', expand=False)
|
|
version('2020-01-01', sha256='adf770dfd574a0d6026bfaa270cb6879b063957177a991d453ff1d302c02081f', expand=False)
|
|
version('2019-11-27', sha256='0d98a1a961aab523c9dc547e315e1d79e887dea575426ff03567e455fc0b66b4', expand=False)
|
|
version('2019-10-16', sha256='5cd8052fcf548ba7e08899d8458a32942bf70450c9af67a0850b4c711804a2e4', expand=False)
|
|
version('2019-08-28', sha256='38b6230aa4bee062cd34ee0ff6da173250899642b1937fc130896290b6bd91e3', expand=False)
|
|
|
|
# Make spack checksum work
|
|
def url_for_version(self, version):
|
|
return "https://curl.se/ca/cacert-{0}.pem".format(version)
|
|
|
|
def setup_dependent_package(self, module, dep_spec):
|
|
"""Returns the absolute path to the bundled certificates"""
|
|
self.spec.pem_path = join_path(self.prefix.share, 'cacert.pem')
|
|
|
|
# Install the the pem file as share/cacert.pem
|
|
def install(self, spec, prefix):
|
|
share = join_path(prefix, 'share')
|
|
mkdir(share)
|
|
install("cacert-{0}.pem".format(spec.version),
|
|
join_path(share, "cacert.pem"))
|