~ruther/guix-local

eae83f64ef1d30e8076bbbd71dac54257e8bb992 — Efraim Flashner 2 years ago d020191
gnu: python-pip: Use system SSL certificates.

* gnu/packages/python-build.scm (python-pip)[replacement]: New
field.
(python-pip/fixed): Provide a python-pip with a patched python-certifi
which only offers to use the system's SSL certificates.

Change-Id: Icea0769b881dc8d760562f0405fa8ea8167a4bd4
1 files changed, 37 insertions(+), 1 deletions(-)

M gnu/packages/python-build.scm
M gnu/packages/python-build.scm => gnu/packages/python-build.scm +37 -1
@@ 1,6 1,6 @@
;;; GNU Guix --- Functional package management for GNU
;;; Copyright © 2015 Ricardo Wurmus <rekado@elephly.net>
;;; Copyright © 2015, 2020 Efraim Flashner <efraim@flashner.co.il>
;;; Copyright © 2015, 2020, 2023 Efraim Flashner <efraim@flashner.co.il>
;;; Copyright © 2016 Leo Famulari <leo@famulari.name>
;;; Copyright © 2020, 2023 Marius Bakke <marius@gnu.org>
;;; Copyright © 2020 Tanguy Le Carrour <tanguy@bioneland.org>


@@ 260,6 260,7 @@ Included are implementations of:
  (package
    (name "python-pip")
    (version "23.1")
    (replacement python-pip/fixed)
    (source
     (origin
       (method url-fetch)


@@ 277,6 278,41 @@ Included are implementations of:
Python Package Index (PyPI).")
    (license license:expat)))

(define python-pip/fixed
  (package
    (inherit python-pip)
    (source (origin
              (inherit (package-source python-pip))
              (snippet
               #~(begin
                   (delete-file "src/pip/_vendor/certifi/cacert.pem")
                   (delete-file "src/pip/_vendor/certifi/core.py")
                   (with-output-to-file "src/pip/_vendor/certifi/core.py"
                     (lambda _
                       (display "\"\"\"
certifi.py
~~~~~~~~~~
This file is a Guix-specific version of core.py.

This module returns the installation location of SSL_CERT_FILE or
/etc/ssl/certs/ca-certificates.crt, or its contents.
\"\"\"
import os

_CA_CERTS = None

try:
    _CA_CERTS = os.environ [\"SSL_CERT_FILE\"]
except:
    _CA_CERTS = os.path.join(\"/etc\", \"ssl\", \"certs\", \"ca-certificates.crt\")

def where() -> str:
    return _CA_CERTS

def contents() -> str:
    with open(where(), \"r\", encoding=\"ascii\") as data:
        return data.read()")))))))))

(define-public python-setuptools
  (package
    (name "python-setuptools")