From 60197780b7940cfc1e484fde59cda9ca2f390e383ffe68f33f978f55114038f6 Mon Sep 17 00:00:00 2001 From: Denisart Benjamin Date: Tue, 29 Dec 2015 13:50:34 +0000 Subject: [PATCH] Accepting request 349384 from home:rjschwei:branches:devel:languages:python - Modify no-default-cacert + The call to set_default_verify_paths() is not necessary. The openSUSE and SLES Python has been patched to always use the system certs. Additionally this call breaks the use of python-requests on older systems, openSUSE_13.2 and original release of SLES 12 which fall back to the built in implementation of ssl which doe not implement this method OBS-URL: https://build.opensuse.org/request/show/349384 OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-requests?expand=0&rev=83 --- no-default-cacert.patch | 11 ----------- python-requests.changes | 11 +++++++++++ 2 files changed, 11 insertions(+), 11 deletions(-) diff --git a/no-default-cacert.patch b/no-default-cacert.patch index f0a4219..64d9891 100644 --- a/no-default-cacert.patch +++ b/no-default-cacert.patch @@ -29,14 +29,3 @@ if __name__ == '__main__': print(where()) ---- a/requests/packages/urllib3/util/ssl_.py -+++ b/requests/packages/urllib3/util/ssl_.py -@@ -278,6 +278,8 @@ def ssl_wrap_socket(sock, keyfile=None, - if e.errno == errno.ENOENT: - raise SSLError(e) - raise -+ elif cert_reqs != CERT_NONE: -+ context.set_default_verify_paths() - - if certfile: - context.load_cert_chain(certfile, keyfile) diff --git a/python-requests.changes b/python-requests.changes index fb88a5e..2163bce 100644 --- a/python-requests.changes +++ b/python-requests.changes @@ -1,3 +1,14 @@ +------------------------------------------------------------------- +Thu Dec 17 13:45:59 UTC 2015 - rjschwei@suse.com + +- Modify no-default-cacert + + The call to set_default_verify_paths() is not necessary. The openSUSE + and SLES Python has been patched to always use the system certs. + Additionally this call breaks the use of python-requests on older systems, + openSUSE_13.2 and original release of SLES 12 which fall back to + the built in implementation of ssl which doe not implement + this method + ------------------------------------------------------------------- Wed Oct 21 21:08:29 UTC 2015 - dmueller@suse.com