aboutsummaryrefslogtreecommitdiff
path: root/debian/patches/01_do-not-use-python-certifi.patch
blob: fecaf25ef4ca8e3792a67c7b9e61e94bb1b2a867 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
Description: To verify SSL certificates for HTTPS requests, use the bundle
 provided by ca-certificates instead of python-certifi.
Author: Daniele Tricoli <eriol@mornie.org>
Forwarded: not-needed
Last-Update: 2012-03-16

--- a/requests/models.py
+++ b/requests/models.py
@@ -497,9 +497,9 @@
             if not cert_loc and self.config.get('trust_env'):
                 cert_loc = os.environ.get('CURL_CA_BUNDLE')

-            # Use the awesome certifi list.
+            # On Debian use the bundle provided by ca-certificates.
             if not cert_loc:
-                cert_loc = __import__('certifi').where()
+                cert_loc = '/etc/ssl/certs/ca-certificates.crt'

             conn.cert_reqs = 'CERT_REQUIRED'
             conn.ca_certs = cert_loc
--- a/setup.py
+++ b/setup.py
@@ -21,7 +21,7 @@
     os.system('python test_requests.py')
     sys.exit()

-required = ['certifi>=0.0.7',]
+required = []
 packages = [
     'requests',
     'requests.packages',