- fix certificate handling with certifi, add support for SUSE's

CA bundle (setuptools-certpath.patch, fixes boo#993968)
- remove shebang lines, strip executable bit from README, to silence
  the easy rpmlint warnings

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-setuptools?expand=0&rev=100

python-setuptools.spec

@@ -29,6 +29,8 @@ Source2:        zpl.txt
 Patch1:         setuptools-5.4.1-create-sitedir.patch
 # NOTE(toabctl): Fix for SLE11SP3 test failures
 Patch3:         fix-sle11-test-failure.patch
+# PATCH-FIX-UPSTREAM better handling of certificate store in SUSE
+Patch4:         setuptools-certpath.patch
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 BuildRequires:  python-devel
 BuildRequires:  python-xml
@@ -36,6 +38,7 @@ BuildRequires:  python-xml
 Requires:       python
 Requires:       python-six
 Requires:       python-xml
+Recommends:     ca-certificates-mozilla
 Requires(post): update-alternatives
 Requires(postun): update-alternatives
 # NOTE(saschpe): Distribute was merged into 0.7.x, so even though distribute
@@ -58,9 +61,21 @@ especially ones that have dependencies on other packages.
 %patch1 -p1
 %if 0%{?suse_version} && 0%{?suse_version} <= 1220
 %patch3 -p1
+%patch4 -p1
 %endif
 find . -type f -name "*.orig" -delete
 
+# fix rpmlint spurious-executable-perm
+chmod -x README.rst
+
+# strip shebangs to fix rpmlint warnings
+# "explain the sed":
+# 1 = first line only
+# s@...@...@ = same as s/.../.../ except with @ instead of /
+# ^ = start; #!/ = shebang leading characters; .* = rest of line; $ = end
+# replace with nothing
+sed -r -i '1s@^#!/.*$@@' pkg_resources/_vendor/appdirs.py setuptools/command/easy_install.py
+
 %build
 python setup.py build