diff options
Diffstat (limited to 'app-misc/ca-certificates/files/ca-certificates-no-cryptography.patch')
-rw-r--r-- | app-misc/ca-certificates/files/ca-certificates-no-cryptography.patch | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/app-misc/ca-certificates/files/ca-certificates-no-cryptography.patch b/app-misc/ca-certificates/files/ca-certificates-no-cryptography.patch new file mode 100644 index 0000000..83cfb92 --- /dev/null +++ b/app-misc/ca-certificates/files/ca-certificates-no-cryptography.patch @@ -0,0 +1,24 @@ +--- a/mozilla/certdata2pem.py ++++ b/mozilla/certdata2pem.py +@@ -28,8 +28,6 @@ + import textwrap + import io + +-from cryptography import x509 +- + + objects = [] + +@@ -122,12 +120,6 @@ + if not obj['CKA_LABEL'] in trust or not trust[obj['CKA_LABEL']]: + continue + +- cert = x509.load_der_x509_certificate(obj['CKA_VALUE']) +- if cert.not_valid_after < datetime.datetime.now(): +- print('!'*74) +- print('Trusted but expired certificate found: %s' % obj['CKA_LABEL']) +- print('!'*74) +- + bname = obj['CKA_LABEL'][1:-1].replace('/', '_')\ + .replace(' ', '_')\ + .replace('(', '=')\ |