diff options
Diffstat (limited to 'app-misc/ca-certificates/files/ca-certificates-20230311.3.89-no-cryptography.patch')
| -rw-r--r-- | app-misc/ca-certificates/files/ca-certificates-20230311.3.89-no-cryptography.patch | 25 |
1 files changed, 25 insertions, 0 deletions
diff --git a/app-misc/ca-certificates/files/ca-certificates-20230311.3.89-no-cryptography.patch b/app-misc/ca-certificates/files/ca-certificates-20230311.3.89-no-cryptography.patch new file mode 100644 index 000000000000..1f27603e8f3c --- /dev/null +++ b/app-misc/ca-certificates/files/ca-certificates-20230311.3.89-no-cryptography.patch @@ -0,0 +1,25 @@ +Remove the dependency on non-portable dev-python/cryptography. +https://bugs.gentoo.org/821706#c4 by Alex Xu +--- a/mozilla/certdata2pem.py ++++ b/mozilla/certdata2pem.py +@@ -28,7 +28,6 @@ import sys + import textwrap + import io + +-from cryptography import x509 + + + objects = [] +@@ -122,12 +121,6 @@ for obj in objects: + if not obj['CKA_LABEL'] in trust or not trust[obj['CKA_LABEL']]: + continue + +- cert = x509.load_der_x509_certificate(bytes(obj['CKA_VALUE'])) +- if cert.not_valid_after < datetime.datetime.utcnow(): +- print('!'*74) +- print('Trusted but expired certificate found: %s' % obj['CKA_LABEL']) +- print('!'*74) +- + bname = obj['CKA_LABEL'][1:-1].replace('/', '_')\ + .replace(' ', '_')\ + .replace('(', '=')\ |