You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
80 lines
2.4 KiB
80 lines
2.4 KiB
{ lib
|
|
, stdenv
|
|
, buildPythonPackage
|
|
, fetchPypi
|
|
, openssl
|
|
, cryptography
|
|
, pytestCheckHook
|
|
, pretend
|
|
, flaky
|
|
}:
|
|
|
|
buildPythonPackage rec {
|
|
pname = "pyopenssl";
|
|
version = "22.0.0";
|
|
|
|
src = fetchPypi {
|
|
pname = "pyOpenSSL";
|
|
inherit version;
|
|
sha256 = "sha256-ZgsbFCWqxKG+odlBaKhdmfCzFEyGndQ5DSdinQCH8b8=";
|
|
};
|
|
|
|
outputs = [ "out" "dev" ];
|
|
|
|
# Seems to fail unpredictably on Darwin. See https://hydra.nixos.org/build/49877419/nixlog/1
|
|
# for one example, but I've also seen ContextTests.test_set_verify_callback_exception fail.
|
|
doCheck = !stdenv.isDarwin;
|
|
|
|
nativeBuildInputs = [ openssl ];
|
|
propagatedBuildInputs = [ cryptography ];
|
|
|
|
checkInputs = [ pytestCheckHook pretend flaky ];
|
|
|
|
preCheck = ''
|
|
export LANG="en_US.UTF-8"
|
|
'';
|
|
|
|
disabledTests = [
|
|
# https://github.com/pyca/pyopenssl/issues/692
|
|
# These tests, we disable always.
|
|
"test_set_default_verify_paths"
|
|
"test_fallback_default_verify_paths"
|
|
# https://github.com/pyca/pyopenssl/issues/768
|
|
"test_wantWriteError"
|
|
# https://github.com/pyca/pyopenssl/issues/1043
|
|
"test_alpn_call_failure"
|
|
] ++ lib.optionals (lib.hasPrefix "libressl" openssl.meta.name) [
|
|
# https://github.com/pyca/pyopenssl/issues/791
|
|
# These tests, we disable in the case that libressl is passed in as openssl.
|
|
"test_op_no_compression"
|
|
"test_npn_advertise_error"
|
|
"test_npn_select_error"
|
|
"test_npn_client_fail"
|
|
"test_npn_success"
|
|
"test_use_certificate_chain_file_unicode"
|
|
"test_use_certificate_chain_file_bytes"
|
|
"test_add_extra_chain_cert"
|
|
"test_set_session_id_fail"
|
|
"test_verify_with_revoked"
|
|
"test_set_notAfter"
|
|
"test_set_notBefore"
|
|
] ++ lib.optionals (lib.versionAtLeast (lib.getVersion openssl.name) "1.1") [
|
|
# these tests are extremely tightly wed to the exact output of the openssl cli tool, including exact punctuation.
|
|
"test_dump_certificate"
|
|
"test_dump_privatekey_text"
|
|
"test_dump_certificate_request"
|
|
"test_export_text"
|
|
] ++ lib.optionals stdenv.is32bit [
|
|
# https://github.com/pyca/pyopenssl/issues/974
|
|
"test_verify_with_time"
|
|
];
|
|
|
|
meta = with lib; {
|
|
description = "Python wrapper around the OpenSSL library";
|
|
homepage = "https://github.com/pyca/pyopenssl";
|
|
license = licenses.asl20;
|
|
maintainers = with maintainers; [ SuperSandro2000 ];
|
|
# https://github.com/pyca/pyopenssl/issues/873
|
|
broken = stdenv.isDarwin && stdenv.isAarch64;
|
|
};
|
|
}
|
|
|