- Change the mechanism to use system-wide CA certificates:

+ on openSUSE, use the (new) upstream ca_certs_locater mechanism
    and don't ship a private copy of Mozilla's CA certs file
  + on SLES, regenerate cacerts.txt from /etc/ssl/certs when
    httplib2 is installed and/or openssl-certs is installed/updated

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-httplib2?expand=0&rev=38

python-httplib2.spec

@@ -25,9 +25,10 @@ License:        MIT and Apache-2.0 and (MPL-1.1 or GPL-2.0+ or LGPL-2.1+)
 Group:          Development/Libraries/Python
 Source:         http://pypi.python.org/packages/source/h/httplib2/httplib2-%{version}.tar.gz
 # PATCH-FIX-OPENSUSE: Don't ship private copy of Mozilla NSS certs, use system certs instead (bnc#761162)
-Patch0:         httplib2-use-system-certs.patch
+Source1:        ca_certs_locater.py
+Source2:        certbundle.run
 # PATCH-FIX-UPSTREAM: speilicke@suse.com -- SSL certificate hostname mismatch is checked only once
-Patch1:         httplib2-bnc-818100.patch
+Patch0:         httplib2-bnc-818100.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 BuildRequires:  python-devel
 # Test requirements (for ssl module):
@@ -50,20 +51,41 @@ left out of other HTTP libraries.
 %prep
 %setup -q -n httplib2-%{version}
 %patch0 -p1
-%patch1 -p1
 
 %build
 python setup.py build
 
 %install
 python setup.py install --prefix=%{_prefix} --root=%{buildroot}
+# NOTE(saschpe): On SLES, there's no /etc/ssl/ca-bundle.pem, thus
+# we have to generate a private copy (and refresh it occasionally)
+%if 0%{?sles_version}
+install -m 0755 %{SOURCE2} %{buildroot}%{python_sitelib}/httplib2/
+%else
+install -m 0644 %{SOURCE1} %{buildroot}%{python_sitelib}/httplib2/
+rm %{buildroot}%{python_sitelib}/httplib2/cacerts.txt
+%endif
 
 #%%check
 #python python2/httplib2test.py
 
+%if 0%{?sles_version}
+%post
+%{python_sitelib}/httplib2/certbundle.run %{python_sitelib}/httplib2/cacerts.txt
+
+%triggerin -- openssl-certs
+%{python_sitelib}/httplib2/certbundle.run %{python_sitelib}/httplib2/cacerts.txt
+%endif
+
 %files
 %defattr(-,root,root)
 %doc README
-%{python_sitelib}/*
+%{python_sitelib}/httplib2-%{version}-py%{py_ver}.egg-info
+%dir %{python_sitelib}/httplib2
+%{python_sitelib}/httplib2/*.py*
+%if 0%{?sles_version}
+%{python_sitelib}/httplib2/certbundle.run
+%ghost %{python_sitelib}/httplib2/cacerts.txt
+%endif
 
 %changelog