3
0
Fork 0
forked from mirrors/nixpkgs

nixos/tests/acme: Patch certifi with cacert

Since 67651d80bc the requests package now
depends on certifi, which in turn provides the CA root certificates that
we need to replace.

It might also be a good idea to actually patch certifi with our version
of cacert by default so that if we want to override and/or add something
we only need to do it once.

Signed-off-by: aszlig <aszlig@redmoonstudios.org>
Cc: @fpletz, @k0ral, @FRidh
This commit is contained in:
aszlig 2017-09-13 23:06:39 +02:00
parent bda38317eb
commit 01fffd94e5
No known key found for this signature in database
GPG key ID: 1DE8E48E57DB5436

View file

@ -14,10 +14,10 @@ let
pythonPackages = (super.python.override {
packageOverrides = lib.const (pysuper: {
requests = pysuper.requests.overrideDerivation (drv: {
certifi = pysuper.certifi.overrideDerivation (drv: {
postPatch = (drv.postPatch or "") + ''
cat "${self.cacert}/etc/ssl/certs/ca-bundle.crt" \
> requests/cacert.pem
> certifi/cacert.pem
'';
});
});