mirror of
https://git.yoctoproject.org/poky
synced 2026-02-05 16:28:43 +01:00
fbe56e677b
Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. References: https://nvd.nist.gov/vuln/detail/CVE-2023-37920 https://github.com/certifi/python-certifi/security/advisories/GHSA-xqr8-7jwr-rhp7 (From OE-Core rev: 98abbe3394638c6ce795b34247a9e49120e4ffba) Signed-off-by: Narpat Mali <narpat.mali@windriver.com> Signed-off-by: Steve Sakoman <steve@sakoman.com>
19 lines
729 B
BlitzBasic
19 lines
729 B
BlitzBasic
SUMMARY = "Python package for providing Mozilla's CA Bundle."
|
|
DESCRIPTION = "This installable Python package contains a CA Bundle that you can reference in your \
|
|
Python code. This is useful for verifying HTTP requests, for example. This is the same CA Bundle \
|
|
which ships with the Requests codebase, and is derived from Mozilla Firefox's canonical set."
|
|
HOMEPAGE = " http://certifi.io/"
|
|
|
|
LICENSE = "ISC"
|
|
LIC_FILES_CHKSUM = "file://LICENSE;md5=67da0714c3f9471067b729eca6c9fbe8"
|
|
|
|
SRC_URI += "file://CVE-2022-23491.patch \
|
|
file://CVE-2023-37920.patch \
|
|
"
|
|
|
|
SRC_URI[sha256sum] = "78884e7c1d4b00ce3cea67b44566851c4343c120abd683433ce934a68ea58872"
|
|
|
|
inherit pypi setuptools3
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|