Skip to content

Commit ba3d408

Browse files
committed
Use the original OpenSSL.xcprivacy file, rather than including one with Python itself.
1 parent 18f55ce commit ba3d408

File tree

2 files changed

+9
-32
lines changed

2 files changed

+9
-32
lines changed

Apple/__main__.py

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -316,7 +316,7 @@ def unpack_deps(
316316
for name_ver in [
317317
"BZip2-1.0.8-2",
318318
"libFFI-3.4.7-2",
319-
"OpenSSL-3.0.16-2",
319+
"OpenSSL-3.0.17-1",
320320
"XZ-5.6.4-2",
321321
"mpdecimal-4.0.0-2",
322322
"zstd-1.5.7-1",
@@ -648,19 +648,19 @@ def create_xcframework(platform: str) -> str:
648648
slice_framework / f"Headers/pyconfig-{arch}.h",
649649
)
650650

651-
# Apple identifies certain libraries as "security risks"; OpenSSL is
652-
# one of those libraries. Since we have statically linked OpenSSL into
653-
# dynamic libraries that will be converted into frameworks when an
654-
# application is built, we are also responsible for providing
655-
# .xcprivacy files for those frameworks.
651+
# Apple identifies certain libraries as "security risks"; if you
652+
# statically link those libraries into a Framework, you become
653+
# responsible for providing a privacy manifest for that framework.
654+
xcprivacy_file = {
655+
"OpenSSL": subdir(host_triple) / "prefix/share/OpenSSL.xcprivacy"
656+
}
656657
print(f" - {multiarch} xcprivacy files")
657-
for module, privacy in [
658+
for module, lib in [
658659
("_hashlib", "OpenSSL"),
659660
("_ssl", "OpenSSL"),
660661
]:
661662
shutil.copy(
662-
PYTHON_DIR
663-
/ f"Apple/{platform}/Resources/{privacy}.xcprivacy",
663+
xcprivacy_file[lib],
664664
slice_path
665665
/ f"lib-{arch}/python{version_tag}/lib-dynload/{module}.xcprivacy",
666666
)

Apple/iOS/Resources/OpenSSL.xcprivacy

Lines changed: 0 additions & 23 deletions
This file was deleted.

0 commit comments

Comments
 (0)