Class OpenSSLAnalyzer

java.lang.Object
org.owasp.dependencycheck.analyzer.AbstractAnalyzer
org.owasp.dependencycheck.analyzer.AbstractFileTypeAnalyzer
org.owasp.dependencycheck.analyzer.OpenSSLAnalyzer
All Implemented Interfaces:
FileFilter, Analyzer, FileTypeAnalyzer
@ThreadSafe public class OpenSSLAnalyzer extends AbstractFileTypeAnalyzer
Used to analyze OpenSSL source code present in the file system.
Author:
Dale Visser

  • Constructor Details

    • OpenSSLAnalyzer

      public OpenSSLAnalyzer()

  • Method Details

    • getOpenSSLVersion

      protected static String getOpenSSLVersion(long openSSLVersionConstant)
      Returns the open SSL version as a string.
      Parameters:
      openSSLVersionConstant - The open SSL version
      Returns:
      the version of openssl

    • getName

      public String getName()
      Returns the name of the Python Package Analyzer.
      Returns:
      the name of the analyzer

    • getAnalysisPhase

      public AnalysisPhase getAnalysisPhase()
      Tell that we are used for information collection.
      Returns:
      INFORMATION_COLLECTION

    • getFileFilter

      protected FileFilter getFileFilter()
      Returns the set of supported file extensions.
      Specified by:
      getFileFilter in class AbstractFileTypeAnalyzer
      Returns:
      the set of supported file extensions

    • getAnalyzerEnabledSettingKey

      protected String getAnalyzerEnabledSettingKey()
      Returns the setting for the analyzer enabled setting key.
      Specified by:
      getAnalyzerEnabledSettingKey in class AbstractAnalyzer
      Returns:
      the setting for the analyzer enabled setting key

    • prepareFileTypeAnalyzer

      protected void prepareFileTypeAnalyzer(Engine engine) throws InitializationException
      No-op initializer implementation.
      Specified by:
      prepareFileTypeAnalyzer in class AbstractFileTypeAnalyzer
      Parameters:
      engine - a reference to the dependency-check engine
      Throws:
      InitializationException - never thrown

    • analyzeDependency

      protected void analyzeDependency(Dependency dependency, Engine engine) throws AnalysisException
      Analyzes python packages and adds evidence to the dependency.
      Specified by:
      analyzeDependency in class AbstractAnalyzer
      Parameters:
      dependency - the dependency being analyzed
      engine - the engine being used to perform the scan
      Throws:
      AnalysisException - thrown if there is an unrecoverable error analyzing the dependency