Upstream version 10.39.225.0

[platform/framework/web/crosswalk.git] / src / tools / swarming_client / utils / tools.py

diff --git a/src/tools/swarming_client/utils/tools.py b/src/tools/swarming_client/utils/tools.py
index 4626290..6c63389 100644 (file)
--- a/src/tools/swarming_client/utils/tools.py
+++ b/src/tools/swarming_client/utils/tools.py
@@ -12,8 +12,18 @@ import optparse
 import os
 import re
 import sys
+import threading
 import time
 
+import utils
+from utils import zip_package
+
+
+# Path to (possibly extracted from zip) cacert.pem bundle file.
+# See get_cacerts_bundle().
+_ca_certs = None
+_ca_certs_lock = threading.Lock()
+
 
 class OptionParserWithLogging(optparse.OptionParser):
   """Adds --verbose option."""
@@ -179,3 +189,19 @@ def is_headless():
     'SWARMING_HEADLESS',
   )
   return any(get_bool_env_var(key) for key in headless_env_keys)
+
+
+def get_cacerts_bundle():
+  """Returns path to a file with CA root certificates bundle.
+
+  Python's ssl module needs a real file on disk, so if code is running from
+  a zip archive, we need to extract the file first.
+  """
+  global _ca_certs
+  with _ca_certs_lock:
+    if _ca_certs is not None and os.path.exists(_ca_certs):
+      return _ca_certs
+    # Some rogue process clears /tmp and causes cacert.pem to disappear. Extract
+    # to current directory instead. We use our own bundled copy of cacert.pem.
+    _ca_certs = zip_package.extract_resource(utils, 'cacert.pem', temp_dir='.')
+    return _ca_certs