Files
nixpkgs/pkgs/development/python-modules/certvalidator/default.nix
Dark Steveneq 646b892680
Some checks failed
Periodic Merges (6h) / master → staging-nixos (push) Failing after 12m50s
Periodic Merges (6h) / master → staging-next (push) Failing after 12m54s
Periodic Merges (24h) / merge-base(master,staging) → haskell-updates (push) Failing after 11m54s
Periodic Merges (6h) / staging-next → staging (push) Failing after 12m13s
Periodic Merges (24h) / staging-next-25.05 → staging-25.05 (push) Failing after 13m24s
Periodic Merges (24h) / release-25.05 → staging-next-25.05 (push) Failing after 14m28s
push sheeet
2025-10-09 14:15:47 +02:00

43 lines
1.1 KiB
Nix

{
lib,
buildPythonPackage,
fetchFromGitHub,
asn1crypto,
oscrypto,
cacert,
}:
buildPythonPackage rec {
pname = "certvalidator";
version = "0.11.1";
format = "setuptools";
src = fetchFromGitHub {
owner = "wbond";
repo = "certvalidator";
rev = version;
hash = "sha256-yVF7t4FuU3C9fDg67JeM7LWZZh/mv5F4EKmjlO4AuBY=";
};
propagatedBuildInputs = [
asn1crypto
oscrypto
];
nativeCheckInputs = [ cacert ];
checkPhase = ''
# Tests are run with a custom executor/loader
# The regex to skip specific tests relies on negative lookahead of regular expressions
# We're skipping the few tests that rely on the network, fetching CRLs, OCSP or remote certificates
python -c 'import dev.tests; dev.tests.run("^(?!.*test_(basic_certificate_validator_tls|fetch|revocation|build_path)).*$")'
'';
pythonImportsCheck = [ "certvalidator" ];
meta = with lib; {
homepage = "https://github.com/wbond/certvalidator";
description = "Validates X.509 certificates and paths";
license = licenses.mit;
maintainers = with maintainers; [ baloo ];
};
}