Slixmpp versions before 1.8.3 would not validate a certificate hostname due to a very relaxed SSL context, that did not validate certificates at all. Fixes: CVE-2022-45197
63 lines
1.1 KiB
Nix
63 lines
1.1 KiB
Nix
{ lib
|
|
, buildPythonPackage
|
|
, aiodns
|
|
, aiohttp
|
|
, fetchPypi
|
|
, gnupg
|
|
, pyasn1
|
|
, pyasn1-modules
|
|
, pytestCheckHook
|
|
, substituteAll
|
|
, pythonOlder
|
|
}:
|
|
|
|
buildPythonPackage rec {
|
|
pname = "slixmpp";
|
|
version = "1.8.3";
|
|
format = "setuptools";
|
|
|
|
disabled = pythonOlder "3.7";
|
|
|
|
src = fetchPypi {
|
|
inherit pname version;
|
|
hash = "sha256-rJtZqq7tZ/VFk4fMpDZYyTQRa1Pokmn2aw6LA+FBGXw=";
|
|
};
|
|
|
|
propagatedBuildInputs = [
|
|
aiodns
|
|
aiohttp
|
|
pyasn1
|
|
pyasn1-modules
|
|
];
|
|
|
|
checkInputs = [
|
|
pytestCheckHook
|
|
];
|
|
|
|
patches = [
|
|
(substituteAll {
|
|
src = ./hardcode-gnupg-path.patch;
|
|
inherit gnupg;
|
|
})
|
|
# Upstream MR: https://lab.louiz.org/poezio/slixmpp/-/merge_requests/198
|
|
./0001-xep_0030-allow-extra-args-in-get_info_from_domain.patch
|
|
];
|
|
|
|
disabledTestPaths = [
|
|
# Exclude live tests
|
|
"tests/live_test.py"
|
|
"tests/test_xep_0454.py"
|
|
];
|
|
|
|
pythonImportsCheck = [
|
|
"slixmpp"
|
|
];
|
|
|
|
meta = with lib; {
|
|
description = "Python library for XMPP";
|
|
homepage = "https://slixmpp.readthedocs.io/";
|
|
license = licenses.mit;
|
|
maintainers = with maintainers; [ fab ];
|
|
};
|
|
}
|