Bug 1411586

Summary: python-certifi: Please build to epel7
Product: [Fedora] Fedora EPEL Reporter: William Moreno <williamjmorenor>
Component: python-certifiAssignee: William Moreno <williamjmorenor>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: epel7CC: bperkins, carl, cplummer+bz, truthset, williamjmorenor
Target Milestone: ---Keywords: Reopened
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: python-certifi-2016.9.26-6.el7 python-certifi-2018.10.15-1.el7 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-11-12 04:19:57 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1410127, 1647605    

Description William Moreno 2017-01-10 02:39:44 UTC
Please include this library in the epel7 branch

Comment 1 Jeff Waller 2017-01-10 03:14:39 UTC
An update of qemu-system-x86 is needed as this is too old (apparently) to support the needed -smbios type=2 flag.  The error that is thrown when this is attempted is the following

qemu-system-x86_64: -smbios type=2: Don't know how to build fields for SMBIOS type 2

This appears to be a catch-all for any smbios that is not known. Here's a potentially relevant patch discussion:

https://lists.gnu.org/archive/html/qemu-devel/2014-03/msg01548.html

qemu-system-x86_64 2.3 has been supported by Fedora versions no later than Fedora 22.  The latest Fedora (25) supports qemu 2.7 and rawhide support qemu-system 2.8.

Comment 2 Jeff Waller 2017-01-10 04:32:38 UTC
erroneously added this comment.  created a new bug report/feature request instead.

Comment 3 Carl George 2017-10-09 21:05:56 UTC
*** Bug 1441561 has been marked as a duplicate of this bug. ***

Comment 4 Carl George 2017-10-12 02:52:08 UTC
Here are the changes needed to make the spec file EPEL compatible.

https://src.fedoraproject.org/rpms/python-certifi/pull-request/1

Comment 5 Fedora Update System 2017-10-22 00:27:17 UTC
python-certifi-2016.9.26-6.el7 has been submitted as an update to Fedora EPEL 7. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a59d8920c8

Comment 6 Fedora Update System 2017-10-23 23:16:59 UTC
python-certifi-2016.9.26-6.el7 has been pushed to the Fedora EPEL 7 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a59d8920c8

Comment 7 Fedora Update System 2017-11-16 15:48:35 UTC
python-certifi-2016.9.26-6.el7 has been pushed to the Fedora EPEL 7 stable repository. If problems still persist, please make note of it in this bug report.

Comment 8 Carl George 2018-02-16 05:42:12 UTC
For some reason the koji build for this was deleted, and the package is no longer available, despite showing as stable in bodhi.

https://koji.fedoraproject.org/koji/buildinfo?buildID=987346
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2017-a59d8920c8

Can you build it again an do another bodhi update?

Comment 9 William Moreno 2018-06-12 14:04:54 UTC
https://pagure.io/fedora-infrastructure/issue/7035

Comment 10 Christina Plummer 2018-10-23 18:17:05 UTC
Is there any update? I have been watching this bug for awhile, due to challenges I have faced with managing Windows machines via Kerberos and HTTPS (using company-issued certificates) with Ansible on RHEL7.  Some of the Python2 modules required for Ansible have a dependency on certifi, but the one that gets downloaded with pip is hard-coded to use its own certificate bundle, and cannot be pointed to the system's certificate store.

The Fedora python-certifi package (I have python2-certifi-2016.9.26-2.el7.noarch - previously downloaded from rhel-7-server-ose-3.6-rpms) used to meet my needs perfectly, but I now need a newer version due to Python module dependencies.   It would be great to be able to get this from the regular Red Hat or EPEL repos.

Comment 11 William Moreno 2018-10-23 19:59:51 UTC
I will update the package to certifi 2018.10.15.

Just to be clear you need the bumped version avaiable in EPEL7 repos or the certificates provided upstream? this package point to the system certificates in:

/etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem

As you can see in this patch:

https://src.fedoraproject.org/rpms/python-certifi/blob/master/f/certifi-2016.9.26-remove-bundle-cert.patch

Do you have any issued with this?

Comment 12 Fedora Update System 2018-10-23 20:26:50 UTC
python-certifi-2018.10.15-1.el7 has been submitted as an update to Fedora EPEL 7. https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b5318fecf8

Comment 13 Fedora Update System 2018-10-25 23:10:42 UTC
python-certifi-2018.10.15-1.el7 has been pushed to the Fedora EPEL 7 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2018-b5318fecf8

Comment 14 Fedora Update System 2018-11-12 04:19:57 UTC
python-certifi-2018.10.15-1.el7 has been pushed to the Fedora EPEL 7 stable repository. If problems still persist, please make note of it in this bug report.