1{ lib
2, buildPythonPackage
3, pythonOlder
4, fetchFromGitHub
5, asn1crypto
6, certvalidator
7, oscrypto
8, pyasn1
9, pyasn1-modules
10, pytestCheckHook
11}:
12
13buildPythonPackage rec {
14 pname = "signify";
15 version = "0.4.0";
16 disabled = pythonOlder "3.6";
17 format = "setuptools";
18
19 src = fetchFromGitHub {
20 owner = "ralphje";
21 repo = pname;
22 rev = "v${version}";
23 sha256 = "sha256-YJc9RIqkEL7dd1ahE4IbxyyZgsZWBDqbXZAvI/nK24M=";
24 };
25
26 propagatedBuildInputs = [
27 asn1crypto
28 certvalidator
29 oscrypto
30 pyasn1
31 pyasn1-modules
32 ];
33
34 pythonImportsCheck = [
35 "signify"
36 ];
37
38 checkInputs = [
39 pytestCheckHook
40 ];
41
42 disabledTests = [
43 # chain doesn't validate because end-entitys certificate expired
44 # https://github.com/ralphje/signify/issues/27
45 "test_revoked_certificate"
46 ];
47
48 meta = with lib; {
49 homepage = "https://github.com/ralphje/signify";
50 description = "library that verifies PE Authenticode-signed binaries";
51 license = licenses.mit;
52 maintainers = with maintainers; [ baloo ];
53 };
54}