diff --git a/python-requests.spec b/python-requests.spec index 044ccfb..5164d3c 100644 --- a/python-requests.spec +++ b/python-requests.spec @@ -25,7 +25,7 @@ Patch: system-certs.patch # This change is backported also into RHEL 9.4 (via CS) Patch: support_IPv6_CIDR_in_no_proxy.patch -# Fix crash on import if /etc/pki/tls/certs/ca-bundle.crt is missing +# Fix crash on import if /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem is missing # https://bugzilla.redhat.com/show_bug.cgi?id=2297632 # https://github.com/psf/requests/pull/6781 # Note: this can be replaced by https://github.com/psf/requests/pull/6767 diff --git a/system-certs.patch b/system-certs.patch index 96f097e..42b8213 100644 --- a/system-certs.patch +++ b/system-certs.patch @@ -43,14 +43,14 @@ index be422c3..9aee713 100644 environment, you can change the definition of where() to return a separately packaged CA bundle. + -+This Fedora-patched package returns "/etc/pki/tls/certs/ca-bundle.crt" provided ++This Fedora-patched package returns "/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem" provided +by the ca-certificates RPM package. """ -from certifi import where + +def where(): + """Return the absolute path to the system CA bundle.""" -+ return '/etc/pki/tls/certs/ca-bundle.crt' ++ return '/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem' if __name__ == "__main__": print(where())