mirror of
https://github.com/signalapp/libsignal.git
synced 2026-04-26 01:35:22 +02:00
d95b4b5a57
And update mac_setup.sh to include mypy and flake8 and the new flake8 plugins. Co-authored-by: Max Moiseev <moiseev@signal.org>
87 lines
2.9 KiB
Python
Executable File
87 lines
2.9 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
|
|
#
|
|
# Copyright 2023 Signal Messenger, LLC
|
|
# SPDX-License-Identifier: AGPL-3.0-only
|
|
#
|
|
|
|
# This script is based on RingRTC's fetch-artifact.py,
|
|
# but simplified for using only as a helper for LibSignalClient.podspec.
|
|
|
|
import argparse
|
|
import hashlib
|
|
import os
|
|
import ssl
|
|
import sys
|
|
import urllib.request
|
|
from typing import BinaryIO
|
|
|
|
UNVERIFIED_DOWNLOAD_NAME = 'unverified.tmp'
|
|
|
|
|
|
def build_argument_parser() -> argparse.ArgumentParser:
|
|
parser = argparse.ArgumentParser(
|
|
description='Download and verify a build artifact archive.')
|
|
parser.add_argument('-u', '--url',
|
|
required=True,
|
|
help='URL of an artifact archive')
|
|
parser.add_argument('-c', '--checksum',
|
|
required=True,
|
|
help='sha256sum of the unexpanded artifact archive')
|
|
parser.add_argument('-o', '--output-dir',
|
|
required=True,
|
|
help='Directory to store the archives in')
|
|
return parser
|
|
|
|
|
|
def download_if_needed(archive_file: str, url: str, checksum: str) -> BinaryIO:
|
|
try:
|
|
fr = open(archive_file, 'rb')
|
|
digest = hashlib.sha256()
|
|
chunk = fr.read1()
|
|
while chunk:
|
|
digest.update(chunk)
|
|
chunk = fr.read1()
|
|
if digest.hexdigest() == checksum.lower():
|
|
return fr
|
|
print("existing file '{}' has non-matching checksum {}; re-downloading...".format(archive_file, digest.hexdigest()), file=sys.stderr)
|
|
except FileNotFoundError:
|
|
pass
|
|
|
|
print('downloading {}...'.format(archive_file), file=sys.stderr)
|
|
try:
|
|
with urllib.request.urlopen(url) as response:
|
|
digest = hashlib.sha256()
|
|
fw = open(UNVERIFIED_DOWNLOAD_NAME, 'w+b')
|
|
chunk = response.read1()
|
|
while chunk:
|
|
digest.update(chunk)
|
|
fw.write(chunk)
|
|
chunk = response.read1()
|
|
assert digest.hexdigest() == checksum.lower(), 'expected {}, actual {}'.format(checksum.lower(), digest.hexdigest())
|
|
os.replace(UNVERIFIED_DOWNLOAD_NAME, archive_file)
|
|
return fw
|
|
except (urllib.error.HTTPError, urllib.error.URLError) as e:
|
|
if isinstance(e.reason, ssl.SSLCertVerificationError):
|
|
# See:
|
|
#
|
|
# - https://stackoverflow.com/questions/27835619/urllib-and-ssl-certificate-verify-failed-error
|
|
# - https://stackoverflow.com/a/77491061
|
|
print('Failed to verify SSL certificate. Do you need to `pip install pip-system-certs`?', file=sys.stderr)
|
|
else:
|
|
print(e, e.filename, file=sys.stderr)
|
|
sys.exit(1)
|
|
|
|
|
|
def main() -> None:
|
|
parser = build_argument_parser()
|
|
args = parser.parse_args()
|
|
os.makedirs(os.path.abspath(args.output_dir), exist_ok=True)
|
|
os.chdir(args.output_dir)
|
|
|
|
archive_file = os.path.basename(args.url)
|
|
download_if_needed(archive_file, args.url, args.checksum)
|
|
|
|
|
|
main()
|