The OpenSSL version has been changed to 3.4.2. (#493)

Author: tpavlovi

common-npm-packages/azure-arm-rest/azure-arm-common.ts

@@ -720,12 +720,24 @@ export class ApplicationTokenCredentials {
         return deferred.promise;
     }
 
+    private _getOpenSSLPath() {
+        if (tl.osType().match(/^Win/)) {
+            if (tl.getPipelineFeature("UseOpenSSLv3.4.2InAzureArmRest")) {
+                return tl.which(path.join(__dirname, 'openssl3.4.2', 'openssl'));
+            } else {
+                return tl.which(path.join(__dirname, 'openssl3.4.0', 'openssl'));
+            }
+        } else {
+            return tl.which('openssl');
+        }
+    }
+
     /**
      * @deprecated ADAL related methods are deprecated and will be removed.
      * Use Use `getMSALToken(force?: boolean)` instead.
      */
     private _getSPNCertificateAuthorizationToken(): string {
-        var openSSLPath = tl.osType().match(/^Win/) ? tl.which(path.join(__dirname, 'openssl', 'openssl')) : tl.which('openssl');
+        var openSSLPath = this._getOpenSSLPath();
         var openSSLArgsArray = [
             "x509",
             "-sha1",
@@ -734,7 +746,7 @@ export class ApplicationTokenCredentials {
             this.certFilePath,
             "-fingerprint"
         ];
-
+        tl.debug(`The OpenSSL version is ${tl.execSync(openSSLPath, 'version')}`);
         var pemExecutionResult = tl.execSync(openSSLPath, openSSLArgsArray);
         var additionalHeaders = {
             "alg": "RS256",

common-npm-packages/azure-arm-rest/make.js

@@ -1,8 +1,24 @@
+import * as tl from 'azure-pipelines-task-lib/task';
 var path = require('path');
 var util = require('../build-scripts/util');
-
+var fs = require('fs');
 var buildPath = './_build'
 
+var opensslLatestVersion = tl.getPipelineFeature('UseOpenSSLv3.4.2InAzureArmRest');
+var opensslDir;
+var opensslUrl;
+if (opensslLatestVersion) {
+	opensslDir = 'openssl3.4.2';
+	opensslUrl = 'https://vstsagenttools.blob.core.windows.net/tools/openssl/3.4.2/M262/openssl.zip';
+} 
+else {
+	opensslDir = 'openssl3.4.0';
+	opensslUrl = 'https://vstsagenttools.blob.core.windows.net/tools/openssl/3.4.0/M252/openssl.zip';
+}
+
+if (!fs.existsSync(path.join(__dirname, opensslDir))) {
+	util.run(`node ../build-scripts/downloadArchive.js ${opensslUrl} ${opensslDir}`);
+}
 util.rm('-rf', buildPath)
 util.run(path.join(__dirname, 'node_modules/.bin/tsc') + ' --outDir ' + buildPath);
 
@@ -11,6 +27,6 @@ util.cp(path.join(__dirname, 'package-lock.json'), buildPath);
 util.cp(path.join(__dirname, 'module.json'), buildPath);
 util.cp(path.join('./Tests', 'package.json'), path.join(buildPath, 'Tests'));
 util.cp(path.join('./Tests', 'package-lock.json'), path.join(buildPath, 'Tests'));
-util.cp('-r', 'openssl', buildPath);
+util.cp('-r', opensslDir, buildPath);
 util.cp('-r', 'Strings', buildPath);
 util.cp('-r', 'node_modules', buildPath);

common-npm-packages/azure-arm-rest/package-lock.json

@@ -1,6 +1,6 @@
 {
     "name": "azure-pipelines-tasks-azure-arm-rest",
-    "version": "3.262.1",
+    "version": "3.263.0",
     "description": "Common Lib for Azure ARM REST apis",
     "repository": {
         "type": "git",
@@ -38,6 +38,6 @@
         "typescript": "^4.9.5"
     },
     "scripts": {
-        "build": "node ../build-scripts/downloadArchive.js https://vstsagenttools.blob.core.windows.net/tools/openssl/3.4.0/M252/openssl.zip ./openssl && node make.js"
+        "build": "node make.js"
     }
 }