59 lines
1.3 KiB
Nix
59 lines
1.3 KiB
Nix
{ lib
|
|
, stdenv
|
|
, buildPythonPackage
|
|
, fetchPypi
|
|
, isPy3k
|
|
, cryptography
|
|
, futures ? null
|
|
, pyopenssl
|
|
, service-identity
|
|
, pytestCheckHook
|
|
, idna
|
|
}:
|
|
|
|
buildPythonPackage rec {
|
|
pname = "trustme";
|
|
version = "0.9.0";
|
|
|
|
src = fetchPypi {
|
|
inherit pname version;
|
|
sha256 = "sha256-XgeyPXDO7WTzuzauS5q8UjVMFsmNRasDe+4rX7/+WGw=";
|
|
};
|
|
|
|
checkInputs = [
|
|
service-identity
|
|
pytestCheckHook
|
|
] ++ lib.optionals (!stdenv.isDarwin || !stdenv.isAarch64) [
|
|
pyopenssl
|
|
];
|
|
|
|
propagatedBuildInputs = [
|
|
cryptography
|
|
idna
|
|
] ++ lib.optionals (!isPy3k) [
|
|
futures
|
|
];
|
|
|
|
# aarch64-darwin forbids W+X memory, but this tests depends on it:
|
|
# * https://github.com/pyca/pyopenssl/issues/873
|
|
disabledTests = lib.optionals (stdenv.isDarwin && stdenv.isAarch64) [
|
|
"test_pyopenssl_end_to_end"
|
|
];
|
|
|
|
postPatch = lib.optionalString (stdenv.isDarwin && stdenv.isAarch64) ''
|
|
substituteInPlace "tests/test_trustme.py" \
|
|
--replace "import OpenSSL.SSL" ""
|
|
'';
|
|
|
|
# Some of the tests use localhost networking.
|
|
__darwinAllowLocalNetworking = true;
|
|
|
|
pythonImportsCheck = [ "trustme" ];
|
|
|
|
meta = with lib; {
|
|
description = "High quality TLS certs while you wait, for the discerning tester";
|
|
homepage = "https://github.com/python-trio/trustme";
|
|
license = with licenses; [ mit asl20 ];
|
|
maintainers = with maintainers; [ catern ];
|
|
};
|
|
}
|