summaryrefslogtreecommitdiff
path: root/app-misc/ca-certificates/files/ca-certificates-no-cryptography.patch
diff options
context:
space:
mode:
Diffstat (limited to 'app-misc/ca-certificates/files/ca-certificates-no-cryptography.patch')
-rw-r--r--app-misc/ca-certificates/files/ca-certificates-no-cryptography.patch24
1 files changed, 24 insertions, 0 deletions
diff --git a/app-misc/ca-certificates/files/ca-certificates-no-cryptography.patch b/app-misc/ca-certificates/files/ca-certificates-no-cryptography.patch
new file mode 100644
index 0000000..83cfb92
--- /dev/null
+++ b/app-misc/ca-certificates/files/ca-certificates-no-cryptography.patch
@@ -0,0 +1,24 @@
+--- a/mozilla/certdata2pem.py
++++ b/mozilla/certdata2pem.py
+@@ -28,8 +28,6 @@
+ import textwrap
+ import io
+
+-from cryptography import x509
+-
+
+ objects = []
+
+@@ -122,12 +120,6 @@
+ if not obj['CKA_LABEL'] in trust or not trust[obj['CKA_LABEL']]:
+ continue
+
+- cert = x509.load_der_x509_certificate(obj['CKA_VALUE'])
+- if cert.not_valid_after < datetime.datetime.now():
+- print('!'*74)
+- print('Trusted but expired certificate found: %s' % obj['CKA_LABEL'])
+- print('!'*74)
+-
+ bname = obj['CKA_LABEL'][1:-1].replace('/', '_')\
+ .replace(' ', '_')\
+ .replace('(', '=')\