mirror of
https://github.com/NixOS/nixpkgs.git
synced 2025-06-27 19:46:40 +03:00
e11e503865
This reverts commit 5b4e909b93.
At this time breaks a bunch of packages that are not ready for the
breaking changes in the X.509 and ASN.1 parsers.
103 lines
2.6 KiB
Nix
103 lines
2.6 KiB
Nix
{ lib, stdenv
|
|
, buildPythonPackage
|
|
, fetchPypi
|
|
, fetchpatch
|
|
, rustPlatform
|
|
, setuptools-rust
|
|
, openssl
|
|
, cryptography_vectors
|
|
, darwin
|
|
, packaging
|
|
, six
|
|
, pythonOlder
|
|
, isPyPy
|
|
, cffi
|
|
, pytest
|
|
, pytest-subtests
|
|
, pretend
|
|
, libiconv
|
|
, iso8601
|
|
, pytz
|
|
, hypothesis
|
|
}:
|
|
|
|
buildPythonPackage rec {
|
|
pname = "cryptography";
|
|
version = "3.4.8"; # Also update the hash in vectors.nix
|
|
|
|
src = fetchPypi {
|
|
inherit pname version;
|
|
sha256 = "072awar70cwfd2hnx0pvp1dkc7gw45mbm3wcyddvxz5frva5xk4l";
|
|
};
|
|
|
|
cargoDeps = rustPlatform.fetchCargoTarball {
|
|
inherit src;
|
|
sourceRoot = "${pname}-${version}/${cargoRoot}";
|
|
name = "${pname}-${version}";
|
|
sha256 = "01h511h6l4qvjxbaw662m1l84pb4wrhwxmnb3qj6ik13mx2m477m";
|
|
};
|
|
|
|
cargoRoot = "src/rust";
|
|
|
|
outputs = [ "out" "dev" ];
|
|
|
|
nativeBuildInputs = lib.optionals (!isPyPy) [
|
|
cffi
|
|
] ++ [
|
|
rustPlatform.cargoSetupHook
|
|
setuptools-rust
|
|
] ++ (with rustPlatform; [ rust.cargo rust.rustc ]);
|
|
|
|
buildInputs = [ openssl ]
|
|
++ lib.optionals stdenv.isDarwin [ darwin.apple_sdk.frameworks.Security libiconv ];
|
|
propagatedBuildInputs = [
|
|
packaging
|
|
six
|
|
] ++ lib.optionals (!isPyPy) [
|
|
cffi
|
|
];
|
|
|
|
checkInputs = [
|
|
cryptography_vectors
|
|
hypothesis
|
|
iso8601
|
|
pretend
|
|
pytest
|
|
pytest-subtests
|
|
pytz
|
|
];
|
|
|
|
pytestFlags = lib.concatStringsSep " " ([
|
|
"--disable-pytest-warnings"
|
|
] ++
|
|
lib.optionals (stdenv.isDarwin && stdenv.isAarch64) [
|
|
# aarch64-darwin forbids W+X memory, but this tests depends on it:
|
|
# * https://cffi.readthedocs.io/en/latest/using.html#callbacks
|
|
"--ignore=tests/hazmat/backends/test_openssl_memleak.py"
|
|
]
|
|
);
|
|
|
|
checkPhase = ''
|
|
py.test ${pytestFlags} tests
|
|
'';
|
|
|
|
# IOKit's dependencies are inconsistent between OSX versions, so this is the best we
|
|
# can do until nix 1.11's release
|
|
__impureHostDeps = [ "/usr/lib" ];
|
|
|
|
meta = with lib; {
|
|
description = "A package which provides cryptographic recipes and primitives";
|
|
longDescription = ''
|
|
Cryptography includes both high level recipes and low level interfaces to
|
|
common cryptographic algorithms such as symmetric ciphers, message
|
|
digests, and key derivation functions.
|
|
Our goal is for it to be your "cryptographic standard library". It
|
|
supports Python 2.7, Python 3.5+, and PyPy 5.4+.
|
|
'';
|
|
homepage = "https://github.com/pyca/cryptography";
|
|
changelog = "https://cryptography.io/en/latest/changelog/#v"
|
|
+ replaceStrings [ "." ] [ "-" ] version;
|
|
license = with licenses; [ asl20 bsd3 psfl ];
|
|
maintainers = with maintainers; [ primeos ];
|
|
};
|
|
}
|