summaryrefslogtreecommitdiff
path: root/app-misc/ca-certificates/files
diff options
context:
space:
mode:
authorV3n3RiX <venerix@koprulu.sector>2023-03-24 06:46:57 +0000
committerV3n3RiX <venerix@koprulu.sector>2023-03-24 06:46:57 +0000
commite8932755452c72a02ecae0b3f37395d1f607bbef (patch)
tree176877e3d181c45c4af1f0fc785749f36112a840 /app-misc/ca-certificates/files
parentdd52d0e37fe2f9a207f98abaf21108a6af8d5d3b (diff)
gentoo auto-resync : 24:03:2023 - 06:46:57
Diffstat (limited to 'app-misc/ca-certificates/files')
-rw-r--r--app-misc/ca-certificates/files/ca-certificates-20230311.3.89-no-cryptography.patch25
1 files changed, 25 insertions, 0 deletions
diff --git a/app-misc/ca-certificates/files/ca-certificates-20230311.3.89-no-cryptography.patch b/app-misc/ca-certificates/files/ca-certificates-20230311.3.89-no-cryptography.patch
new file mode 100644
index 000000000000..1f27603e8f3c
--- /dev/null
+++ b/app-misc/ca-certificates/files/ca-certificates-20230311.3.89-no-cryptography.patch
@@ -0,0 +1,25 @@
+Remove the dependency on non-portable dev-python/cryptography.
+https://bugs.gentoo.org/821706#c4 by Alex Xu
+--- a/mozilla/certdata2pem.py
++++ b/mozilla/certdata2pem.py
+@@ -28,7 +28,6 @@ import sys
+ import textwrap
+ import io
+
+-from cryptography import x509
+
+
+ objects = []
+@@ -122,12 +121,6 @@ for obj in objects:
+ if not obj['CKA_LABEL'] in trust or not trust[obj['CKA_LABEL']]:
+ continue
+
+- cert = x509.load_der_x509_certificate(bytes(obj['CKA_VALUE']))
+- if cert.not_valid_after < datetime.datetime.utcnow():
+- print('!'*74)
+- print('Trusted but expired certificate found: %s' % obj['CKA_LABEL'])
+- print('!'*74)
+-
+ bname = obj['CKA_LABEL'][1:-1].replace('/', '_')\
+ .replace(' ', '_')\
+ .replace('(', '=')\