From eec0050c5319142bfd9f115b4786f5ab64e5bd8c Mon Sep 17 00:00:00 2001
From: Alexandru Ardelean <alex@shruggie.ro>
Date: Sun, 9 Aug 2026 12:32:19 +0300
Subject: [PATCH] python-pyopenssl: bump to 26.4.0

Refresh sha256 from the PyPI sdist.

26.4.0 drops OpenSSL.crypto.X509Req and dump_certificate_request, so
test.sh can no longer import them; remove them and the CSR block. CSR
handling now lives in cryptography.x509, which is not this package.

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
---
 lang/python/python-pyopenssl/Makefile |  4 ++--
 lang/python/python-pyopenssl/test.sh  | 13 +------------
 2 files changed, 3 insertions(+), 14 deletions(-)

diff --git a/lang/python/python-pyopenssl/Makefile b/lang/python/python-pyopenssl/Makefile
index 2412d417db..dcb5d3a640 100644
--- a/lang/python/python-pyopenssl/Makefile
+++ b/lang/python/python-pyopenssl/Makefile
@@ -8,12 +8,12 @@
 include $(TOPDIR)/rules.mk
 
 PKG_NAME:=python-pyopenssl
-PKG_VERSION:=26.2.0
+PKG_VERSION:=26.4.0
 PKG_RELEASE:=1
 
 PYPI_NAME:=pyOpenSSL
 PYPI_SOURCE_NAME:=pyopenssl
-PKG_HASH:=8c6fcecd1183a7fc897548dfe388b0cdb7f37e018200d8409cf33959dbe35387
+PKG_HASH:=28dfcce0162b9211413e26dfbfdf1d24317fbeba18fc93c12400a1856b2a0bc7
 
 PKG_LICENSE:=Apache-2.0
 PKG_LICENSE_FILES:=LICENSE
diff --git a/lang/python/python-pyopenssl/test.sh b/lang/python/python-pyopenssl/test.sh
index 2eebc6ab9a..3668e777cb 100755
--- a/lang/python/python-pyopenssl/test.sh
+++ b/lang/python/python-pyopenssl/test.sh
@@ -17,9 +17,8 @@ if version != "$2":
 from OpenSSL import SSL, crypto
 from OpenSSL.crypto import (
     PKey, TYPE_RSA,
-    X509, X509Req, X509Store, X509StoreContext,
+    X509, X509Store, X509StoreContext,
     dump_certificate, dump_privatekey, load_certificate, load_privatekey,
-    dump_certificate_request,
     FILETYPE_PEM,
 )
 
@@ -63,16 +62,6 @@ assert key_pem.startswith(b"-----BEGIN")
 key2 = load_privatekey(FILETYPE_PEM, key_pem)
 assert key2.bits() == 2048
 
-# --- Certificate signing request ---
-
-req = X509Req()
-req.get_subject().CN = "csr.example.com"
-req.set_pubkey(rsa_key)
-req.sign(rsa_key, "sha256")
-assert req.verify(rsa_key)
-csr_pem = dump_certificate_request(FILETYPE_PEM, req)
-assert csr_pem.startswith(b"-----BEGIN CERTIFICATE REQUEST-----")
-
 # --- X509Store verification ---
 
 store = X509Store()