nixpkgs-suyu/pkgs/development/python-modules/requests/default.nix
Keshav Kini 11f7c3310f
python3Packages.requests: patch in CA bundles
The requests library defaults to using the certificates from the
certifi library when not otherwise specified.  If I understand the
discussion at #8247 correctly, we should instead patch it so that it
follows the following priority order:

1. the path pointed to by the environment variable $NIX_SSL_CERT_FILE

2. /etc/ssl/certs/ca-certificates.crt

3. whatever it was doing before (in this case, using certifi)

This commit implements that.
2021-06-21 16:48:40 -07:00

70 lines
1.4 KiB
Nix

{ lib
, buildPythonPackage
, certifi
, chardet
, fetchPypi
, idna
, pytest-mock
, pytest-xdist
, pytestCheckHook
, urllib3
, isPy27
}:
buildPythonPackage rec {
pname = "requests";
version = "2.25.1";
src = fetchPypi {
inherit pname version;
sha256 = "sha256-J5c91KkEpPE7JjoZyGbBO5KjntHJZGVfAl8/jT11uAQ=";
};
patches = [ ./0001-Prefer-NixOS-Nix-default-CA-bundles-over-certifi.patch ];
postPatch = ''
# Use latest idna
substituteInPlace setup.py --replace ",<3" ""
'';
propagatedBuildInputs = [
certifi
chardet
idna
urllib3
];
checkInputs = [
pytest-mock
pytest-xdist
pytestCheckHook
];
# AttributeError: 'KeywordMapping' object has no attribute 'get'
doCheck = !isPy27;
disabledTests = [
# Disable tests that require network access and use httpbin
"requests.api.request"
"requests.models.PreparedRequest"
"requests.sessions.Session"
"requests"
"test_redirecting_to_bad_url"
"test_requests_are_updated_each_time"
"test_should_bypass_proxies_pass_only_hostname"
"test_urllib3_pool_connection_closed"
"test_urllib3_retries"
"test_use_proxy_from_environment"
"TestRequests"
"TestTimeout"
];
pythonImportsCheck = [ "requests" ];
meta = with lib; {
description = "Simple HTTP library for Python";
homepage = "http://docs.python-requests.org/en/latest/";
license = licenses.asl20;
maintainers = with maintainers; [ fab ];
};
}