{ stdenv , buildPythonPackage , fetchPypi , openssl , cryptography_vectors , darwin , asn1crypto , packaging , six , pythonOlder , enum34 , ipaddress , isPyPy , cffi , pytest , pretend , iso8601 , pytz , hypothesis }: buildPythonPackage rec { pname = "cryptography"; version = "2.6.1"; # Also update the hash in vectors.nix src = fetchPypi { inherit pname version; sha256 = "19iwz5avym5zl6jrrrkym1rdaa9h61j20ph4cswsqgv8xg5j3j16"; }; outputs = [ "out" "dev" ]; buildInputs = [ openssl cryptography_vectors ] ++ stdenv.lib.optional stdenv.isDarwin darwin.apple_sdk.frameworks.Security; propagatedBuildInputs = [ asn1crypto packaging six ] ++ stdenv.lib.optional (pythonOlder "3.4") enum34 ++ stdenv.lib.optional (pythonOlder "3.3") ipaddress ++ stdenv.lib.optional (!isPyPy) cffi; checkInputs = [ pytest pretend iso8601 pytz hypothesis ]; checkPhase = '' py.test --disable-pytest-warnings tests ''; # The test assumes that if we're on Sierra or higher, that we use `getentropy`, but for binary # compatibility with pre-Sierra for binary caches, we hide that symbol so the library doesn't # use it. This boils down to them checking compatibility with `getentropy` in two different places, # so let's neuter the second test. postPatch = '' substituteInPlace ./tests/hazmat/backends/test_openssl.py --replace '"16.0"' '"99.0"' ''; # IOKit's dependencies are inconsistent between OSX versions, so this is the best we # can do until nix 1.11's release __impureHostDeps = [ "/usr/lib" ]; meta = with stdenv.lib; { description = "A package which provides cryptographic recipes and primitives"; longDescription = '' Cryptography includes both high level recipes and low level interfaces to common cryptographic algorithms such as symmetric ciphers, message digests, and key derivation functions. Our goal is for it to be your "cryptographic standard library". It supports Python 2.7, Python 3.4+, and PyPy 5.3+. ''; homepage = https://github.com/pyca/cryptography; license = with licenses; [ asl20 bsd3 psfl ]; maintainers = with maintainers; [ primeos ]; }; }