Clone of https://github.com/NixOS/nixpkgs.git (to stress-test knotserver)

python.pkgs.cryptography: fix/ignore broken tests

Broken tests by openssl 1.1.1d, added patch and skipped one test

Issue for skipped test: https://github.com/pyca/cryptography/issues/4998

(cherry picked from commit 8b34d843c6f24168787cad90912e0fa20d11d6d5)

authored by

Robin Gloster and committed by
Vladimír Čunát
7841371e 321b25d4

+10 -1
+10 -1
pkgs/development/python-modules/cryptography/default.nix
··· 1 1 { stdenv 2 2 , buildPythonPackage 3 3 , fetchPypi 4 + , fetchpatch 4 5 , openssl 5 6 , cryptography_vectors 6 7 , darwin ··· 49 50 hypothesis 50 51 ]; 51 52 53 + # remove when https://github.com/pyca/cryptography/issues/4998 is fixed 52 54 checkPhase = '' 53 - py.test --disable-pytest-warnings tests 55 + py.test --disable-pytest-warnings tests -k 'not load_ecdsa_no_named_curve' 54 56 ''; 55 57 56 58 # The test assumes that if we're on Sierra or higher, that we use `getentropy`, but for binary ··· 60 62 postPatch = '' 61 63 substituteInPlace ./tests/hazmat/backends/test_openssl.py --replace '"16.0"' '"99.0"' 62 64 ''; 65 + 66 + patches = [ 67 + (fetchpatch { 68 + url = "https://github.com/pyca/cryptography/commit/e575e3d482f976c4a1f3203d63ea0f5007a49a2a.patch"; 69 + sha256 = "0vg9prqsizd6gzh5j7lscsfxzxlhz7pacvzhgqmj1vhdhjwbblcp"; 70 + }) 71 + ]; 63 72 64 73 # IOKit's dependencies are inconsistent between OSX versions, so this is the best we 65 74 # can do until nix 1.11's release