tjh.dev
1{ lib, buildPythonPackage, fetchFromGitHub, pythonOlder, pytestCheckHook
2, certvalidator, pyasn1, pyasn1-modules
3}:
4
5buildPythonPackage rec {
6 pname = "signify";
7 version = "0.3.0";
8 disabled = pythonOlder "3.5";
9
10 src = fetchFromGitHub {
11 owner = "ralphje";
12 repo = pname;
13 rev = "v${version}";
14 sha256 = "sha256-JxQECpwHhPm8TCVW/bCnEpu5I/WETyZVBx29SQE4NmE=";
15 };
16 patches = [
17 # Upstream patch is available here:
18 # https://github.com/ralphje/signify/commit/8c345be954e898a317825bb450bed5ba0304b2b5.patch
19 # But update a couple other things and dont apply cleanly. This is an extract of the part
20 # we care about and breaks the tests after 2021-03-01
21 ./certificate-expiration-date.patch
22 ];
23
24 propagatedBuildInputs = [ certvalidator pyasn1 pyasn1-modules ];
25
26 checkInputs = [ pytestCheckHook ];
27 pytestFlagsArray = [ "-v" ];
28 pythonImportsCheck = [ "signify" ];
29
30 meta = with lib; {
31 homepage = "https://github.com/ralphje/signify";
32 description = "library that verifies PE Authenticode-signed binaries";
33 license = licenses.mit;
34 maintainers = with maintainers; [ baloo ];
35 };
36}