Accepting request 503305 from home:dimstar:Factory

- Add python-pyOpenSSL=replace-expired-cert.patch: the root cert
  expired, mking the test suite fail. Replace the certificate with
  a new one, valid for 20 years (gh#pyca/pyopenssl#637).

  * Automatically set ``SSL_CTX_set_ecdh_auto()`` on

OBS-URL: https://build.opensuse.org/request/show/503305
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-pyOpenSSL?expand=0&rev=40

python-pyOpenSSL.spec

@@ -31,13 +31,15 @@ Source:         https://files.pythonhosted.org/packages/source/p/pyOpenSSL/pyOpe
 Patch0:         bug-lp-1265482.diff
 Patch1:         skip-networked-test.patch
 Patch2:         rsa128-i586.patch
+# PATCH-FIX-UPSTREAM python-pyOpenSSL=replace-expired-cert.patch gh#pyca/pyopenssl#637 dimstar@opensuse.org -- the root cert expired
+Patch3:         python-pyOpenSSL=replace-expired-cert.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
-BuildRequires:  openssl-devel
-BuildRequires:  fdupes
-BuildRequires:  python-rpm-macros
+BuildRequires:  %{python_module cryptography >= 1.3.4}
 BuildRequires:  %{python_module devel}
 BuildRequires:  %{python_module setuptools}
-BuildRequires:  %{python_module cryptography >= 1.3.4}
+BuildRequires:  fdupes
+BuildRequires:  openssl-devel
+BuildRequires:  python-rpm-macros
 BuildRequires:  python3-Sphinx
 %if %{with tests}
 BuildRequires:  %{python_module pytest}
@@ -72,6 +74,7 @@ Provides documentation for %{name}.
 %patch0 -p1
 %patch1 -p1
 %patch2 -p1
+%patch3 -p1
 
 %build
 %python_build