From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 5FEDC138334 for ; Wed, 14 Aug 2019 23:04:57 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 31DBEE0815; Wed, 14 Aug 2019 23:04:56 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 02132E0815 for ; Wed, 14 Aug 2019 23:04:55 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 6725B349B85 for ; Wed, 14 Aug 2019 23:04:54 +0000 (UTC) Received: from localhost.localdomain (localhost [IPv6:::1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 7A175763 for ; Wed, 14 Aug 2019 23:04:52 +0000 (UTC) From: "Michał Górny" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Michał Górny" Message-ID: <1565823889.bb1dbfea18380e02c8c460c144f4deeb30f18429.mgorny@gentoo> Subject: [gentoo-commits] repo/gentoo:master commit in: dev-python/certifi/, dev-python/certifi/files/ X-VCS-Repository: repo/gentoo X-VCS-Files: dev-python/certifi/Manifest dev-python/certifi/certifi-2019.6.16.ebuild dev-python/certifi/files/certifi-2018.4.16-use-system-cacerts.patch X-VCS-Directories: dev-python/certifi/files/ dev-python/certifi/ X-VCS-Committer: mgorny X-VCS-Committer-Name: Michał Górny X-VCS-Revision: bb1dbfea18380e02c8c460c144f4deeb30f18429 X-VCS-Branch: master Date: Wed, 14 Aug 2019 23:04:52 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply X-Archives-Salt: e2cc7e46-a7df-4d7a-b975-5ab549670990 X-Archives-Hash: bb6933a7bbfc513a77f5687b18d816c4 commit: bb1dbfea18380e02c8c460c144f4deeb30f18429 Author: Michał Górny gentoo org> AuthorDate: Wed Aug 14 22:00:57 2019 +0000 Commit: Michał Górny gentoo org> CommitDate: Wed Aug 14 23:04:49 2019 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=bb1dbfea dev-python/certifi: Bump to 2019.6.16 Signed-off-by: Michał Górny gentoo.org> dev-python/certifi/Manifest | 1 + dev-python/certifi/certifi-2019.6.16.ebuild | 43 ++++++++++++++++++++++ .../certifi-2018.4.16-use-system-cacerts.patch | 7 +--- 3 files changed, 45 insertions(+), 6 deletions(-) diff --git a/dev-python/certifi/Manifest b/dev-python/certifi/Manifest index e1534648066..859e4a81c03 100644 --- a/dev-python/certifi/Manifest +++ b/dev-python/certifi/Manifest @@ -2,3 +2,4 @@ DIST certifi-2018.10.15.tar.gz 145887 BLAKE2B 695b4236d67022f12639850fdcd1695703 DIST certifi-2018.11.29.tar.gz 153772 BLAKE2B fb146409560beb85731b136541012f3f114a8e35c1b0ae9a9bac31d10642dc4ff3cad6a7e722e14e1d5092f9d4e3d7f5c4acb231edd2602d3452a6c9cebd323c SHA512 6a6bf1ff98caefcdbf78a8c83e11e155368bacdd806f0ae0c6afa8f513667df6598e594b3584de61acdca3d6049f4a776937f2aa8672b602bd6db7b737f6074e DIST certifi-2018.4.16.tar.gz 149967 BLAKE2B 4a69ec495266d54032dfabc9c17d0b1e78ad1467214f9f981feb4fae279c1f4b5f0bc3f7a643c2229b17d19e32c1ea894dc16d73b036a0b32f17faa9ac55615c SHA512 96369b318df9592ed4ff48d79ae695f89d27d85e8f5de72548fccb19ac15b83a33fb8bc096a3092d7a7f5b201af08805576888418c7927cf48b892df56464682 DIST certifi-2018.8.24.tar.gz 146866 BLAKE2B 92a609bffd777a624d18e612e2fa504b1cd4f0764f979d22bf6785158fb928d30984fba16b839f6b4066395dadcca485e6215c6f0b6b550d891673a79ea77c08 SHA512 bb0af24570dd4806bc80cd438cae42db82f820de815a6148b184f58c19cd91a03f9275815559817a84220dcbd7c87a4a7d12e35cf4a95a1dbad286a1dfecf907 +DIST certifi-2019.6.16.tar.gz 156721 BLAKE2B 3990a9c122dbaf554f4482ad97192efa66f1cf54e83bd4ee67248bbea8797dc4da38ab537230a8263a491a2a2115528138965480ef4da6d6cba9ac2af5bff830 SHA512 4641626bc5073cd0b3a520855ddef1007dcb42933baa7a3469856f936e725581042bcbd5b67e984ba9748e7faa62b9125cba7dc160dcc5db2eafe46461a29f5e diff --git a/dev-python/certifi/certifi-2019.6.16.ebuild b/dev-python/certifi/certifi-2019.6.16.ebuild new file mode 100644 index 00000000000..50b26cdf12c --- /dev/null +++ b/dev-python/certifi/certifi-2019.6.16.ebuild @@ -0,0 +1,43 @@ +# Copyright 1999-2019 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=7 + +PYTHON_COMPAT=( python2_7 python3_{5,6,7} pypy{,3} ) + +inherit distutils-r1 prefix readme.gentoo-r1 + +DESCRIPTION="Python package for providing Mozilla's CA Bundle" +HOMEPAGE="http://certifi.io/ https://pypi.org/project/certifi" +SRC_URI="mirror://pypi/${PN:0:1}/${PN}/${P}.tar.gz" + +LICENSE="MPL-2.0" +SLOT="0" +KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~ppc-aix ~x64-cygwin ~amd64-fbsd ~x86-fbsd ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos ~m68k-mint ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris" +IUSE="" + +RDEPEND="app-misc/ca-certificates" +DEPEND="dev-python/setuptools[${PYTHON_USEDEP}]" + +# Do not drop this patch -- this will affect system's security +PATCHES=( "${FILESDIR}"/certifi-2018.4.16-use-system-cacerts.patch ) + +python_prepare_all() { + distutils-r1_python_prepare_all + + eprefixify certifi/core.py +} + +python_install_all() { + distutils-r1_python_install_all + + local DOC_CONTENTS=" + In Gentoo, we don't use certifi's bundled CA certificates. + Instead we remove bundled cacert.pem and patch certifi + to return system's CA certificates. + " + readme.gentoo_create_doc + + # Precaution -- nothing should use bundled CA certificates + find "${D}" -name 'cacert.pem' -delete || die "Failed to delete bundled CA certificates" +} diff --git a/dev-python/certifi/files/certifi-2018.4.16-use-system-cacerts.patch b/dev-python/certifi/files/certifi-2018.4.16-use-system-cacerts.patch index 009f21168c1..1c21a2ae1e0 100644 --- a/dev-python/certifi/files/certifi-2018.4.16-use-system-cacerts.patch +++ b/dev-python/certifi/files/certifi-2018.4.16-use-system-cacerts.patch @@ -2,14 +2,9 @@ Use system's CA certificate store --- a/certifi/core.py +++ b/certifi/core.py -@@ -19,9 +19,7 @@ class DeprecatedBundleWarning(DeprecationWarning): - - +@@ -21,4 +21,2 @@ class DeprecatedBundleWarning(DeprecationWarning): def where(): - f = os.path.dirname(__file__) - - return os.path.join(f, 'cacert.pem') + return "@GENTOO_PORTAGE_EPREFIX@/etc/ssl/certs/ca-certificates.crt" - - - def old_where():