From patchwork Wed Nov 11 09:02:42 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Yoann Congal X-Patchwork-Id: 103701 Received: from mail-wm1-f43.google.com (mail-wm1-f43.google.com [209.85.128.43]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.5584.1794387813625743494 for ; Wed, 11 Nov 2026 01:03:33 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@smile.fr header.s=google2 header.b=Oq23Ys6O; spf=pass (domain: smile.fr, ip: 209.85.128.43, mailfrom: yoann.congal@smile.fr) Received: by mail-wm1-f43.google.com with SMTP id 5b1f17b1804b1-4a4d7ae1ae9so26923405e9.1 for ; Wed, 11 Nov 2026 01:03:33 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=smile.fr; s=google2; t=1794387812; x=1794992612; darn=lists.openembedded.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:from:to:cc:subject:date:message-id :reply-to:content-type; bh=LBu0TR1KHx/CnTCDLb0WcZswaEplaUMLMGOPOpct+Ds=; b=Oq23Ys6O061vC6h+N515YjNrwk29FYIpPIk39O1I4ynTI14Zl9yC6/wVSbSLpOiKPM zdc8ZomcmoMILr1EkbQjrBR4JEy1itwEl5E3SpRttNqdBCvhXGpjpM+5Gfd4rH6Kd6Fc ouZOrlu0ojOMUC8eNH8aHLPOTPuR6Ro7Rk9vhzAyunzhhM2ue/GtZn47JqJgKJOk09nt Ht8nR8dK5HfWbg+C8mLQGS7f7pr5+MFpog1rv2f3D2K5IiUmbOEi21dJPAWkVLOU9wOX Lov1KxyDKu6oxVOfvjzmaQvnysauAg23Qpt8RCbOXArUZGYUF04l0UwggwrI56OXc7WY mJGw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20260707; t=1794387812; x=1794992612; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:to:from:x-gm-gg:x-gm-message-state:from:to :cc:subject:date:message-id:reply-to:content-type; bh=LBu0TR1KHx/CnTCDLb0WcZswaEplaUMLMGOPOpct+Ds=; b=RrjV62Txw2NXU11iOfZLzbuCFQ2bZRSHlfHsR8HnutQ8FyF5uwuir4oOrkISwj3xKe FuOTc7xz0mXX6MgTwUQtC1ZF0ZvFX88YYMyMjC5y4ERPkEsLKB4BSUhfBc4VV4vmanA3 LWbJto5590eYOoVhmCg5UrKHSnUqg3IR7Nr5cADzppv5f78Z2WSgJmPDGPnCwX1PxWvc 1CAp51D2AWBrYcGFit85k18+hWad/Jq+cUlEn4MFcGMXN5l7awxQU3n/9n1FFFFf/kqY PbNnJoopmpsDMVTXaChjGSbrkRlJWMKrA4IxXyc0b9tNDGbzdVfh5n0CsfVMUsRh44p2 FyNQ== X-Gm-Message-State: APuU4Z8tsfuR85AJaYuJnchoA4aqDdGA06SyG1CXYYCF518qr1YaP3zI cSc73nJGcYXFLKhdubz4i8xMNGkvkv9M/JM9gRNuKfbVcLBFP9ZfJmgTGd7Z8p5qSrjDc4rqsZU gxzcaRcA= X-Gm-Gg: AYBFou0pS5+08lyrbRA0UqvKjXoFh6c8Ovaim375HmPmTc7HyqfggFVnQZZiz2xZ9wa QOBzvueJaMHjaqsii9/V6/EBuMscqz7TBZhVr8HXXrBMSArWhQ/hxPCUc5bCFAaFxF5SfelrhtG 5H3ObzL1++jXNWT+WX3A2dG4GOeQE+48BZfEdDOlJZi7Ncwz0mqUQE6GCRIkrKG5c/W1QBceM9R xiEnoQaTYehnCv3t/JiqaTvMDfXPWt3vtb1lNg/HhUH/LDhW2p+97/UEP5EPrwHS4pTBGx0eiy6 yepMckydSOHKoaUy+xoohtrChRn/WJk7U7gpmBQJ5GVzvRhKM921qJiSgyZbjUL0ajIikchjIhY RO38+WoGvNmTcGxPl3zJVqObPT3n8o4+DHjJRA2UDCBVkLb/y6FvewkI2GpNrzSsMLxaF4flX0J K/ZgGTjShtRN4+D9oPgicOftDtI4MzEkZFIMrT+1IKIpU3URwu1wiigKO8gmkj5Cr/JQU56BY8U +rgiaN0knvMNCcVJQCOEftbgICqxnzVXLduO+2zCypllKDpa7qJBMJyJ7GhHalHnFSdW2hMAEd7 pf4lWN3pnfwDbWtTtNYuP6cunZk62F5Diz8T8f3Ji7ikzsop7ZnoOF+MR714XJkwgsMY9EL1qBn ZNunzifZ8YtzJ4/S45sy1/Hr/iiY1 X-Received: by 2002:a05:600c:5489:b0:4a3:5a98:c279 with SMTP id 5b1f17b1804b1-4ba093582abmr29579805e9.8.1794387811538; Wed, 11 Nov 2026 01:03:31 -0800 (PST) Return-Path: Received: from FRSMI25-LASER.home (2a01cb001331aa00a2e4fb7b0d887544.ipv6.abo.wanadoo.fr. [2a01:cb00:1331:aa00:a2e4:fb7b:d88:7544]) by smtp.gmail.com with ESMTPSA id 5b1f17b1804b1-4ba01fe9357sm147623675e9.9.2026.11.11.01.03.30 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 11 Nov 2026 01:03:30 -0800 (PST) From: Yoann Congal To: openembedded-core@lists.openembedded.org Subject: [OE-core][wrynose 16/35] python3-pip: patch the vendored python3-certifi Date: Wed, 11 Nov 2026 10:02:42 +0100 Message-ID: X-Mailer: git-send-email 2.55.0 In-Reply-To: References: MIME-Version: 1.0 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by lin-tor-korg-lkml-alma10-1 with HTTPS for ; Wed, 11 Nov 2026 09:03:36 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/249988 From: Jeroen Hofstee Like python3-certifi: remove emSign CAs. See https://emudhra.we-have-a-problem.com. Signed-off-by: Jeroen Hofstee Signed-off-by: Yoann Congal --- .../python3-pip/0001-Remove-emsign-437.patch | 142 ++++++++++++++++++ ...tore-unaffected-emSign-roots-439-440.patch | 108 +++++++++++++ .../python/python3-pip_26.0.1.bb | 2 + 3 files changed, 252 insertions(+) create mode 100644 meta/recipes-devtools/python/python3-pip/0001-Remove-emsign-437.patch create mode 100644 meta/recipes-devtools/python/python3-pip/0002-Restore-unaffected-emSign-roots-439-440.patch diff --git a/meta/recipes-devtools/python/python3-pip/0001-Remove-emsign-437.patch b/meta/recipes-devtools/python/python3-pip/0001-Remove-emsign-437.patch new file mode 100644 index 00000000000..31baa73511d --- /dev/null +++ b/meta/recipes-devtools/python/python3-pip/0001-Remove-emsign-437.patch @@ -0,0 +1,142 @@ +From 0802dcc6194b35b0eeb86e52248ace5eadc300cd Mon Sep 17 00:00:00 2001 +From: Alex Gaynor +Date: Sun, 18 Oct 2026 12:19:26 -0400 +Subject: [PATCH 1/2] Remove emsign (#437) + +* Remove emSign CAs + +Co-Authored-By: Claude Opus 5.5 + +* 2026.10.18 + +Co-Authored-By: Claude Opus 5.5 +Signed-off-by: Jeroen Hofstee + +--------- + +Co-authored-by: Claude Opus 5.5 +(cherry picked from commit 5cb238caeeb6c30ec1a7309ad3e16a5aa7b10ce8) + +Upstream-Status: Backport [https://github.com/certifi/python-certifi/commit/5cb238caeeb6c30ec1a7309ad3e16a5aa7b10ce8] +--- + certifi/cacert.pem | 104 --------------------------------------------- + 1 file changed, 104 deletions(-) + +diff --git a/certifi/cacert.pem b/certifi/cacert.pem +index fac3c31..d4e81a7 100644 +--- a/certifi/cacert.pem ++++ b/certifi/cacert.pem +@@ -2954,110 +2954,6 @@ jWZSaX5LaAzHHjcng6WMxwLkFM1JAbBzs/3GkDpv0mztO+7skb6iQ12LAEpmJURw + 3kAP+HwV96LOPNdeE4yBFxgX0b3xdxA61GU5wSesVywlVP+i2k+KYTlerj1KjL0= + -----END CERTIFICATE----- + +-# Issuer: CN=emSign Root CA - G1 O=eMudhra Technologies Limited OU=emSign PKI +-# Subject: CN=emSign Root CA - G1 O=eMudhra Technologies Limited OU=emSign PKI +-# Label: "emSign Root CA - G1" +-# Serial: 235931866688319308814040 +-# MD5 Fingerprint: 9c:42:84:57:dd:cb:0b:a7:2e:95:ad:b6:f3:da:bc:ac +-# SHA1 Fingerprint: 8a:c7:ad:8f:73:ac:4e:c1:b5:75:4d:a5:40:f4:fc:cf:7c:b5:8e:8c +-# SHA256 Fingerprint: 40:f6:af:03:46:a9:9a:a1:cd:1d:55:5a:4e:9c:ce:62:c7:f9:63:46:03:ee:40:66:15:83:3d:c8:c8:d0:03:67 +------BEGIN CERTIFICATE----- +-MIIDlDCCAnygAwIBAgIKMfXkYgxsWO3W2DANBgkqhkiG9w0BAQsFADBnMQswCQYD +-VQQGEwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBU +-ZWNobm9sb2dpZXMgTGltaXRlZDEcMBoGA1UEAxMTZW1TaWduIFJvb3QgQ0EgLSBH +-MTAeFw0xODAyMTgxODMwMDBaFw00MzAyMTgxODMwMDBaMGcxCzAJBgNVBAYTAklO +-MRMwEQYDVQQLEwplbVNpZ24gUEtJMSUwIwYDVQQKExxlTXVkaHJhIFRlY2hub2xv +-Z2llcyBMaW1pdGVkMRwwGgYDVQQDExNlbVNpZ24gUm9vdCBDQSAtIEcxMIIBIjAN +-BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0u76WaK7p1b1TST0Bsew+eeuGQz +-f2N4aLTNLnF115sgxk0pvLZoYIr3IZpWNVrzdr3YzZr/k1ZLpVkGoZM0Kd0WNHVO +-8oG0x5ZOrRkVUkr+PHB1cM2vK6sVmjM8qrOLqs1D/fXqcP/tzxE7lM5OMhbTI0Aq +-d7OvPAEsbO2ZLIvZTmmYsvePQbAyeGHWDV/D+qJAkh1cF+ZwPjXnorfCYuKrpDhM +-tTk1b+oDafo6VGiFbdbyL0NVHpENDtjVaqSW0RM8LHhQ6DqS0hdW5TUaQBw+jSzt +-Od9C4INBdN+jzcKGYEho42kLVACL5HZpIQ15TjQIXhTCzLG3rdd8cIrHhQIDAQAB +-o0IwQDAdBgNVHQ4EFgQU++8Nhp6w492pufEhF38+/PB3KxowDgYDVR0PAQH/BAQD +-AgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAFn/8oz1h31x +-PaOfG1vR2vjTnGs2vZupYeveFix0PZ7mddrXuqe8QhfnPZHr5X3dPpzxz5KsbEjM +-wiI/aTvFthUvozXGaCocV685743QNcMYDHsAVhzNixl03r4PEuDQqqE/AjSxcM6d +-GNYIAwlG7mDgfrbESQRRfXBgvKqy/3lyeqYdPV8q+Mri/Tm3R7nrft8EI6/6nAYH +-6ftjk4BAtcZsCjEozgyfz7MjNYBBjWzEN3uBL4ChQEKF6dk4jeihU80Bv2noWgby +-RQuQ+q7hv53yrlc8pa6yVvSLZUDp/TGBLPQ5Cdjua6e0ph0VpZj3AYHYhX3zUVxx +-iN66zB+Afko= +------END CERTIFICATE----- +- +-# Issuer: CN=emSign ECC Root CA - G3 O=eMudhra Technologies Limited OU=emSign PKI +-# Subject: CN=emSign ECC Root CA - G3 O=eMudhra Technologies Limited OU=emSign PKI +-# Label: "emSign ECC Root CA - G3" +-# Serial: 287880440101571086945156 +-# MD5 Fingerprint: ce:0b:72:d1:9f:88:8e:d0:50:03:e8:e3:b8:8b:67:40 +-# SHA1 Fingerprint: 30:43:fa:4f:f2:57:dc:a0:c3:80:ee:2e:58:ea:78:b2:3f:e6:bb:c1 +-# SHA256 Fingerprint: 86:a1:ec:ba:08:9c:4a:8d:3b:be:27:34:c6:12:ba:34:1d:81:3e:04:3c:f9:e8:a8:62:cd:5c:57:a3:6b:be:6b +------BEGIN CERTIFICATE----- +-MIICTjCCAdOgAwIBAgIKPPYHqWhwDtqLhDAKBggqhkjOPQQDAzBrMQswCQYDVQQG +-EwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNo +-bm9sb2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0g +-RzMwHhcNMTgwMjE4MTgzMDAwWhcNNDMwMjE4MTgzMDAwWjBrMQswCQYDVQQGEwJJ +-TjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBUZWNobm9s +-b2dpZXMgTGltaXRlZDEgMB4GA1UEAxMXZW1TaWduIEVDQyBSb290IENBIC0gRzMw +-djAQBgcqhkjOPQIBBgUrgQQAIgNiAAQjpQy4LRL1KPOxst3iAhKAnjlfSU2fySU0 +-WXTsuwYc58Byr+iuL+FBVIcUqEqy6HyC5ltqtdyzdc6LBtCGI79G1Y4PPwT01xyS +-fvalY8L1X44uT6EYGQIrMgqCZH0Wk9GjQjBAMB0GA1UdDgQWBBR8XQKEE9TMipuB +-zhccLikenEhjQjAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAKBggq +-hkjOPQQDAwNpADBmAjEAvvNhzwIQHWSVB7gYboiFBS+DCBeQyh+KTOgNG3qxrdWB +-CUfvO6wIBHxcmbHtRwfSAjEAnbpV/KlK6O3t5nYBQnvI+GDZjVGLVTv7jHvrZQnD +-+JbNR6iC8hZVdyR+EhCVBCyj +------END CERTIFICATE----- +- +-# Issuer: CN=emSign Root CA - C1 O=eMudhra Inc OU=emSign PKI +-# Subject: CN=emSign Root CA - C1 O=eMudhra Inc OU=emSign PKI +-# Label: "emSign Root CA - C1" +-# Serial: 825510296613316004955058 +-# MD5 Fingerprint: d8:e3:5d:01:21:fa:78:5a:b0:df:ba:d2:ee:2a:5f:68 +-# SHA1 Fingerprint: e7:2e:f1:df:fc:b2:09:28:cf:5d:d4:d5:67:37:b1:51:cb:86:4f:01 +-# SHA256 Fingerprint: 12:56:09:aa:30:1d:a0:a2:49:b9:7a:82:39:cb:6a:34:21:6f:44:dc:ac:9f:39:54:b1:42:92:f2:e8:c8:60:8f +------BEGIN CERTIFICATE----- +-MIIDczCCAlugAwIBAgILAK7PALrEzzL4Q7IwDQYJKoZIhvcNAQELBQAwVjELMAkG +-A1UEBhMCVVMxEzARBgNVBAsTCmVtU2lnbiBQS0kxFDASBgNVBAoTC2VNdWRocmEg +-SW5jMRwwGgYDVQQDExNlbVNpZ24gUm9vdCBDQSAtIEMxMB4XDTE4MDIxODE4MzAw +-MFoXDTQzMDIxODE4MzAwMFowVjELMAkGA1UEBhMCVVMxEzARBgNVBAsTCmVtU2ln +-biBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMRwwGgYDVQQDExNlbVNpZ24gUm9v +-dCBDQSAtIEMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+upufGZ +-BczYKCFK83M0UYRWEPWgTywS4/oTmifQz/l5GnRfHXk5/Fv4cI7gklL35CX5VIPZ +-HdPIWoU/Xse2B+4+wM6ar6xWQio5JXDWv7V7Nq2s9nPczdcdioOl+yuQFTdrHCZH +-3DspVpNqs8FqOp099cGXOFgFixwR4+S0uF2FHYP+eF8LRWgYSKVGczQ7/g/IdrvH +-GPMF0Ybzhe3nudkyrVWIzqa2kbBPrH4VI5b2P/AgNBbeCsbEBEV5f6f9vtKppa+c +-xSMq9zwhbL2vj07FOrLzNBL834AaSaTUqZX3noleoomslMuoaJuvimUnzYnu3Yy1 +-aylwQ6BpC+S5DwIDAQABo0IwQDAdBgNVHQ4EFgQU/qHgcB4qAzlSWkK+XJGFehiq +-TbUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEL +-BQADggEBAMJKVvoVIXsoounlHfv4LcQ5lkFMOycsxGwYFYDGrK9HWS8mC+M2sO87 +-/kOXSTKZEhVb3xEp/6tT+LvBeA+snFOvV71ojD1pM/CjoCNjO2RnIkSt1XHLVip4 +-kqNPEjE2NuLe/gDEo2APJ62gsIq1NnpSob0n9CAnYuhNlCQT5AoE6TyrLshDCUrG +-YQTlSTR+08TI9Q/Aqum6VF7zYytPT1DU/rl7mYw9wC68AivTxEDkigcxHpvOJpkT +-+xHqmiIMERnHXhuBUDDIlhJu58tBf5E7oke3VIAb3ADMmpDqw8NQBmIMMMAVSKeo +-WXzhriKi4gp6D/piq1JM4fHfyr6DDUI= +------END CERTIFICATE----- +- +-# Issuer: CN=emSign ECC Root CA - C3 O=eMudhra Inc OU=emSign PKI +-# Subject: CN=emSign ECC Root CA - C3 O=eMudhra Inc OU=emSign PKI +-# Label: "emSign ECC Root CA - C3" +-# Serial: 582948710642506000014504 +-# MD5 Fingerprint: 3e:53:b3:a3:81:ee:d7:10:f8:d3:b0:1d:17:92:f5:d5 +-# SHA1 Fingerprint: b6:af:43:c2:9b:81:53:7d:f6:ef:6b:c3:1f:1f:60:15:0c:ee:48:66 +-# SHA256 Fingerprint: bc:4d:80:9b:15:18:9d:78:db:3e:1d:8c:f4:f9:72:6a:79:5d:a1:64:3c:a5:f1:35:8e:1d:db:0e:dc:0d:7e:b3 +------BEGIN CERTIFICATE----- +-MIICKzCCAbGgAwIBAgIKe3G2gla4EnycqDAKBggqhkjOPQQDAzBaMQswCQYDVQQG +-EwJVUzETMBEGA1UECxMKZW1TaWduIFBLSTEUMBIGA1UEChMLZU11ZGhyYSBJbmMx +-IDAeBgNVBAMTF2VtU2lnbiBFQ0MgUm9vdCBDQSAtIEMzMB4XDTE4MDIxODE4MzAw +-MFoXDTQzMDIxODE4MzAwMFowWjELMAkGA1UEBhMCVVMxEzARBgNVBAsTCmVtU2ln +-biBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMSAwHgYDVQQDExdlbVNpZ24gRUND +-IFJvb3QgQ0EgLSBDMzB2MBAGByqGSM49AgEGBSuBBAAiA2IABP2lYa57JhAd6bci +-MK4G9IGzsUJxlTm801Ljr6/58pc1kjZGDoeVjbk5Wum739D+yAdBPLtVb4Ojavti +-sIGJAnB9SMVK4+kiVCJNk7tCDK93nCOmfddhEc5lx/h//vXyqaNCMEAwHQYDVR0O +-BBYEFPtaSNCAIEDyqOkAB2kZd6fmw/TPMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMB +-Af8EBTADAQH/MAoGCCqGSM49BAMDA2gAMGUCMQC02C8Cif22TGK6Q04ThHK1rt0c +-3ta13FaPWEBaLd4gTCKDypOofu4SQMfWh0/434UCMBwUZOR8loMRnLDRWmFLpg9J +-0wD8ofzkpf9/rdcw0Md3f76BB1UwUCAU9Vc4CqgxUQ== +------END CERTIFICATE----- +- + # Issuer: CN=Hongkong Post Root CA 3 O=Hongkong Post + # Subject: CN=Hongkong Post Root CA 3 O=Hongkong Post + # Label: "Hongkong Post Root CA 3" +-- +2.53.0 + diff --git a/meta/recipes-devtools/python/python3-pip/0002-Restore-unaffected-emSign-roots-439-440.patch b/meta/recipes-devtools/python/python3-pip/0002-Restore-unaffected-emSign-roots-439-440.patch new file mode 100644 index 00000000000..f129adc4bbc --- /dev/null +++ b/meta/recipes-devtools/python/python3-pip/0002-Restore-unaffected-emSign-roots-439-440.patch @@ -0,0 +1,108 @@ +From e82ee82a34e70a4fbf5003ba6cf2fcd62a24d764 Mon Sep 17 00:00:00 2001 +From: Nathan Neulinger +Date: Mon, 19 Oct 2026 21:10:51 -0500 +Subject: [PATCH 2/2] Restore unaffected emSign roots (#439) (#440) + +(cherry picked from commit 662df63d7906df66f1f07c0751a3dfe9da14d914) +Upstream-Status: Backport [https://github.com/certifi/python-certifi/commit/662df63d7906df66f1f07c0751a3dfe9da14d914] +Signed-off-by: Jeroen Hofstee + +--- + certifi/cacert.pem | 81 ++++++++++++++++++++++++++++++++++++++++++++++ + 1 file changed, 81 insertions(+) + +diff --git a/certifi/cacert.pem b/certifi/cacert.pem +index d4e81a7..4c74ecd 100644 +--- a/certifi/cacert.pem ++++ b/certifi/cacert.pem +@@ -2954,6 +2954,87 @@ jWZSaX5LaAzHHjcng6WMxwLkFM1JAbBzs/3GkDpv0mztO+7skb6iQ12LAEpmJURw + 3kAP+HwV96LOPNdeE4yBFxgX0b3xdxA61GU5wSesVywlVP+i2k+KYTlerj1KjL0= + -----END CERTIFICATE----- + ++# Issuer: CN=emSign Root CA - G1 O=eMudhra Technologies Limited OU=emSign PKI ++# Subject: CN=emSign Root CA - G1 O=eMudhra Technologies Limited OU=emSign PKI ++# Label: "emSign Root CA - G1" ++# Serial: 235931866688319308814040 ++# MD5 Fingerprint: 9c:42:84:57:dd:cb:0b:a7:2e:95:ad:b6:f3:da:bc:ac ++# SHA1 Fingerprint: 8a:c7:ad:8f:73:ac:4e:c1:b5:75:4d:a5:40:f4:fc:cf:7c:b5:8e:8c ++# SHA256 Fingerprint: 40:f6:af:03:46:a9:9a:a1:cd:1d:55:5a:4e:9c:ce:62:c7:f9:63:46:03:ee:40:66:15:83:3d:c8:c8:d0:03:67 ++-----BEGIN CERTIFICATE----- ++MIIDlDCCAnygAwIBAgIKMfXkYgxsWO3W2DANBgkqhkiG9w0BAQsFADBnMQswCQYD ++VQQGEwJJTjETMBEGA1UECxMKZW1TaWduIFBLSTElMCMGA1UEChMcZU11ZGhyYSBU ++ZWNobm9sb2dpZXMgTGltaXRlZDEcMBoGA1UEAxMTZW1TaWduIFJvb3QgQ0EgLSBH ++MTAeFw0xODAyMTgxODMwMDBaFw00MzAyMTgxODMwMDBaMGcxCzAJBgNVBAYTAklO ++MRMwEQYDVQQLEwplbVNpZ24gUEtJMSUwIwYDVQQKExxlTXVkaHJhIFRlY2hub2xv ++Z2llcyBMaW1pdGVkMRwwGgYDVQQDExNlbVNpZ24gUm9vdCBDQSAtIEcxMIIBIjAN ++BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0u76WaK7p1b1TST0Bsew+eeuGQz ++f2N4aLTNLnF115sgxk0pvLZoYIr3IZpWNVrzdr3YzZr/k1ZLpVkGoZM0Kd0WNHVO ++8oG0x5ZOrRkVUkr+PHB1cM2vK6sVmjM8qrOLqs1D/fXqcP/tzxE7lM5OMhbTI0Aq ++d7OvPAEsbO2ZLIvZTmmYsvePQbAyeGHWDV/D+qJAkh1cF+ZwPjXnorfCYuKrpDhM ++tTk1b+oDafo6VGiFbdbyL0NVHpENDtjVaqSW0RM8LHhQ6DqS0hdW5TUaQBw+jSzt ++Od9C4INBdN+jzcKGYEho42kLVACL5HZpIQ15TjQIXhTCzLG3rdd8cIrHhQIDAQAB ++o0IwQDAdBgNVHQ4EFgQU++8Nhp6w492pufEhF38+/PB3KxowDgYDVR0PAQH/BAQD ++AgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQELBQADggEBAFn/8oz1h31x ++PaOfG1vR2vjTnGs2vZupYeveFix0PZ7mddrXuqe8QhfnPZHr5X3dPpzxz5KsbEjM ++wiI/aTvFthUvozXGaCocV685743QNcMYDHsAVhzNixl03r4PEuDQqqE/AjSxcM6d ++GNYIAwlG7mDgfrbESQRRfXBgvKqy/3lyeqYdPV8q+Mri/Tm3R7nrft8EI6/6nAYH ++6ftjk4BAtcZsCjEozgyfz7MjNYBBjWzEN3uBL4ChQEKF6dk4jeihU80Bv2noWgby ++RQuQ+q7hv53yrlc8pa6yVvSLZUDp/TGBLPQ5Cdjua6e0ph0VpZj3AYHYhX3zUVxx ++iN66zB+Afko= ++-----END CERTIFICATE----- ++ ++# Issuer: CN=emSign Root CA - C1 O=eMudhra Inc OU=emSign PKI ++# Subject: CN=emSign Root CA - C1 O=eMudhra Inc OU=emSign PKI ++# Label: "emSign Root CA - C1" ++# Serial: 825510296613316004955058 ++# MD5 Fingerprint: d8:e3:5d:01:21:fa:78:5a:b0:df:ba:d2:ee:2a:5f:68 ++# SHA1 Fingerprint: e7:2e:f1:df:fc:b2:09:28:cf:5d:d4:d5:67:37:b1:51:cb:86:4f:01 ++# SHA256 Fingerprint: 12:56:09:aa:30:1d:a0:a2:49:b9:7a:82:39:cb:6a:34:21:6f:44:dc:ac:9f:39:54:b1:42:92:f2:e8:c8:60:8f ++-----BEGIN CERTIFICATE----- ++MIIDczCCAlugAwIBAgILAK7PALrEzzL4Q7IwDQYJKoZIhvcNAQELBQAwVjELMAkG ++A1UEBhMCVVMxEzARBgNVBAsTCmVtU2lnbiBQS0kxFDASBgNVBAoTC2VNdWRocmEg ++SW5jMRwwGgYDVQQDExNlbVNpZ24gUm9vdCBDQSAtIEMxMB4XDTE4MDIxODE4MzAw ++MFoXDTQzMDIxODE4MzAwMFowVjELMAkGA1UEBhMCVVMxEzARBgNVBAsTCmVtU2ln ++biBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMRwwGgYDVQQDExNlbVNpZ24gUm9v ++dCBDQSAtIEMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+upufGZ ++BczYKCFK83M0UYRWEPWgTywS4/oTmifQz/l5GnRfHXk5/Fv4cI7gklL35CX5VIPZ ++HdPIWoU/Xse2B+4+wM6ar6xWQio5JXDWv7V7Nq2s9nPczdcdioOl+yuQFTdrHCZH ++3DspVpNqs8FqOp099cGXOFgFixwR4+S0uF2FHYP+eF8LRWgYSKVGczQ7/g/IdrvH ++GPMF0Ybzhe3nudkyrVWIzqa2kbBPrH4VI5b2P/AgNBbeCsbEBEV5f6f9vtKppa+c ++xSMq9zwhbL2vj07FOrLzNBL834AaSaTUqZX3noleoomslMuoaJuvimUnzYnu3Yy1 ++aylwQ6BpC+S5DwIDAQABo0IwQDAdBgNVHQ4EFgQU/qHgcB4qAzlSWkK+XJGFehiq ++TbUwDgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wDQYJKoZIhvcNAQEL ++BQADggEBAMJKVvoVIXsoounlHfv4LcQ5lkFMOycsxGwYFYDGrK9HWS8mC+M2sO87 ++/kOXSTKZEhVb3xEp/6tT+LvBeA+snFOvV71ojD1pM/CjoCNjO2RnIkSt1XHLVip4 ++kqNPEjE2NuLe/gDEo2APJ62gsIq1NnpSob0n9CAnYuhNlCQT5AoE6TyrLshDCUrG ++YQTlSTR+08TI9Q/Aqum6VF7zYytPT1DU/rl7mYw9wC68AivTxEDkigcxHpvOJpkT +++xHqmiIMERnHXhuBUDDIlhJu58tBf5E7oke3VIAb3ADMmpDqw8NQBmIMMMAVSKeo ++WXzhriKi4gp6D/piq1JM4fHfyr6DDUI= ++-----END CERTIFICATE----- ++ ++# Issuer: CN=emSign ECC Root CA - C3 O=eMudhra Inc OU=emSign PKI ++# Subject: CN=emSign ECC Root CA - C3 O=eMudhra Inc OU=emSign PKI ++# Label: "emSign ECC Root CA - C3" ++# Serial: 582948710642506000014504 ++# MD5 Fingerprint: 3e:53:b3:a3:81:ee:d7:10:f8:d3:b0:1d:17:92:f5:d5 ++# SHA1 Fingerprint: b6:af:43:c2:9b:81:53:7d:f6:ef:6b:c3:1f:1f:60:15:0c:ee:48:66 ++# SHA256 Fingerprint: bc:4d:80:9b:15:18:9d:78:db:3e:1d:8c:f4:f9:72:6a:79:5d:a1:64:3c:a5:f1:35:8e:1d:db:0e:dc:0d:7e:b3 ++-----BEGIN CERTIFICATE----- ++MIICKzCCAbGgAwIBAgIKe3G2gla4EnycqDAKBggqhkjOPQQDAzBaMQswCQYDVQQG ++EwJVUzETMBEGA1UECxMKZW1TaWduIFBLSTEUMBIGA1UEChMLZU11ZGhyYSBJbmMx ++IDAeBgNVBAMTF2VtU2lnbiBFQ0MgUm9vdCBDQSAtIEMzMB4XDTE4MDIxODE4MzAw ++MFoXDTQzMDIxODE4MzAwMFowWjELMAkGA1UEBhMCVVMxEzARBgNVBAsTCmVtU2ln ++biBQS0kxFDASBgNVBAoTC2VNdWRocmEgSW5jMSAwHgYDVQQDExdlbVNpZ24gRUND ++IFJvb3QgQ0EgLSBDMzB2MBAGByqGSM49AgEGBSuBBAAiA2IABP2lYa57JhAd6bci ++MK4G9IGzsUJxlTm801Ljr6/58pc1kjZGDoeVjbk5Wum739D+yAdBPLtVb4Ojavti ++sIGJAnB9SMVK4+kiVCJNk7tCDK93nCOmfddhEc5lx/h//vXyqaNCMEAwHQYDVR0O ++BBYEFPtaSNCAIEDyqOkAB2kZd6fmw/TPMA4GA1UdDwEB/wQEAwIBBjAPBgNVHRMB ++Af8EBTADAQH/MAoGCCqGSM49BAMDA2gAMGUCMQC02C8Cif22TGK6Q04ThHK1rt0c ++3ta13FaPWEBaLd4gTCKDypOofu4SQMfWh0/434UCMBwUZOR8loMRnLDRWmFLpg9J ++0wD8ofzkpf9/rdcw0Md3f76BB1UwUCAU9Vc4CqgxUQ== ++-----END CERTIFICATE----- ++ + # Issuer: CN=Hongkong Post Root CA 3 O=Hongkong Post + # Subject: CN=Hongkong Post Root CA 3 O=Hongkong Post + # Label: "Hongkong Post Root CA 3" +-- +2.53.0 + diff --git a/meta/recipes-devtools/python/python3-pip_26.0.1.bb b/meta/recipes-devtools/python/python3-pip_26.0.1.bb index b6581575580..378fcd823ee 100644 --- a/meta/recipes-devtools/python/python3-pip_26.0.1.bb +++ b/meta/recipes-devtools/python/python3-pip_26.0.1.bb @@ -29,6 +29,8 @@ SRC_URI += "file://no_shebang_mangling.patch \ file://CVE-2026-8643.patch \ file://CVE-2026-8643-regression_p1.patch \ file://CVE-2026-8643-regression_p2.patch \ + file://0001-Remove-emsign-437.patch;patchdir=src/pip/_vendor \ + file://0002-Restore-unaffected-emSign-roots-439-440.patch;patchdir=src/pip/_vendor \ " SRC_URI[sha256sum] = "c4037d8a277c89b320abe636d59f91e6d0922d08a05b60e85e53b296613346d8"