Inside Bitcoin

1(use-modules ((gnu packages bash) #:select (bash-minimal))
2             ((gnu packages compression) #:select (gzip zip))
3             ((gnu packages crypto) #:select (osslsigncode))
4             ((gnu packages nss) #:select (nss-certs))
5             ((gnu packages python-build) #:select (python-poetry-core))
6             ((gnu packages python-crypto) #:select (python-asn1crypto python-oscrypto))
7             ((gnu packages tls) #:select (openssl))
8             ((gnu packages version-control) #:select (git-minimal))
9             (guix build-system python)
10             (guix build-system pyproject)
11             (guix git-download)
12             ((guix licenses) #:prefix license:)
13             (guix packages))
14
15(define-public python-elfesteem
16  (let ((commit "2eb1e5384ff7a220fd1afacd4a0170acff54fe56"))
17    (package
18      (name "python-elfesteem")
19      (version (git-version "0.1" "1" commit))
20      (source
21       (origin
22         (method git-fetch)
23         (uri (git-reference
24               (url "https://github.com/LRGH/elfesteem")
25               (commit commit)))
26         (file-name (git-file-name name commit))
27         (sha256
28          (base32
29           "07x6p8clh11z8s1n2kdxrqwqm2almgc5qpkcr9ckb6y5ivjdr5r6"))))
30      (build-system python-build-system)
31      ;; There are no tests, but attempting to run python setup.py test leads to
32      ;; PYTHONPATH problems, just disable the test
33      (arguments '(#:tests? #f))
34      (home-page "https://github.com/LRGH/elfesteem")
35      (synopsis "ELF/PE/Mach-O parsing library")
36      (description "elfesteem parses ELF, PE and Mach-O files.")
37      (license license:lgpl2.1))))
38
39(define-public python-oscryptotests
40  (package (inherit python-oscrypto)
41    (name "python-oscryptotests")
42    (propagated-inputs
43      (list python-oscrypto))
44    (arguments
45     `(#:tests? #f
46       #:phases
47       (modify-phases %standard-phases
48         (add-after 'unpack 'hard-code-path-to-libscrypt
49           (lambda* (#:key inputs #:allow-other-keys)
50             (chdir "tests")
51             #t)))))))
52
53(define-public python-certvalidator
54  (let ((commit "a145bf25eb75a9f014b3e7678826132efbba6213"))
55    (package
56      (name "python-certvalidator")
57      (version (git-version "0.1" "1" commit))
58      (source
59       (origin
60         (method git-fetch)
61         (uri (git-reference
62               (url "https://github.com/achow101/certvalidator")
63               (commit commit)))
64         (file-name (git-file-name name commit))
65         (sha256
66          (base32
67           "1qw2k7xis53179lpqdqyylbcmp76lj7sagp883wmxg5i7chhc96k"))))
68      (build-system python-build-system)
69      (propagated-inputs
70        (list openssl
71              python-asn1crypto
72              python-oscrypto
73              python-oscryptotests)) ;; certvalidator tests import oscryptotests
74      (arguments
75       `(#:phases
76         (modify-phases %standard-phases
77           (add-after 'unpack 'disable-broken-tests
78             (lambda _
79               (substitute* "tests/test_certificate_validator.py"
80                 (("^(.*)class CertificateValidatorTests" line indent)
81                  (string-append indent
82                                 "@unittest.skip(\"Disabled by Guix\")\n"
83                                 line)))
84               (substitute* "tests/test_crl_client.py"
85                 (("^(.*)def test_fetch_crl" line indent)
86                  (string-append indent
87                                 "@unittest.skip(\"Disabled by Guix\")\n"
88                                 line)))
89               (substitute* "tests/test_ocsp_client.py"
90                 (("^(.*)def test_fetch_ocsp" line indent)
91                  (string-append indent
92                                 "@unittest.skip(\"Disabled by Guix\")\n"
93                                 line)))
94               (substitute* "tests/test_registry.py"
95                 (("^(.*)def test_build_paths" line indent)
96                  (string-append indent
97                                 "@unittest.skip(\"Disabled by Guix\")\n"
98                                 line)))
99               (substitute* "tests/test_validate.py"
100                 (("^(.*)def test_revocation_mode_hard" line indent)
101                  (string-append indent
102                                 "@unittest.skip(\"Disabled by Guix\")\n"
103                                 line)))
104               (substitute* "tests/test_validate.py"
105                 (("^(.*)def test_revocation_mode_soft" line indent)
106                  (string-append indent
107                                 "@unittest.skip(\"Disabled by Guix\")\n"
108                                 line)))
109               #t))
110           (replace 'check
111             (lambda _
112               (invoke "python" "run.py" "tests")
113               #t)))))
114      (home-page "https://github.com/wbond/certvalidator")
115      (synopsis "Python library for validating X.509 certificates and paths")
116      (description "certvalidator is a Python library for validating X.509
117certificates or paths. Supports various options, including: validation at a
118specific moment in time, whitelisting and revocation checks.")
119      (license license:expat))))
120
121(define-public python-signapple
122  (let ((commit "3fab3bb57f227f0dd31007b417683035f5204838"))
123    (package
124      (name "python-signapple")
125      (version (git-version "0.2.0" "1" commit))
126      (source
127       (origin
128         (method git-fetch)
129         (uri (git-reference
130               (url "https://github.com/achow101/signapple")
131               (commit commit)))
132         (file-name (git-file-name name commit))
133         (sha256
134          (base32
135           "0qpr78bs50rw79dbihr9ifjq19y6819ih5pn9jd2rbjyifimzf7p"))))
136      (build-system pyproject-build-system)
137      (propagated-inputs
138        (list python-asn1crypto
139              python-oscrypto
140              python-certvalidator
141              python-elfesteem))
142      (native-inputs (list python-poetry-core))
143      (arguments
144       ;; There are no tests, but attempting to run python setup.py test leads to
145       ;; problems, just disable the test
146       (list #:tests? #f
147             #:phases
148             #~(modify-phases %standard-phases
149                 ;; Add a phase to inject OpenSSL paths for oscrypto.
150                 (add-after 'wrap 'wrap-openssl-paths
151                   (lambda* (#:key inputs #:allow-other-keys)
152                     (let ((openssl (assoc-ref inputs "openssl")))
153                       (wrap-program (string-append #$output "/bin/signapple")
154                         `("SIGNAPPLE_OSCRYPTO_SSL_PATHS" =
155                           (,(string-append openssl "/lib/libcrypto.so" "," openssl "/lib/libssl.so"))))))))))
156      (home-page "https://github.com/achow101/signapple")
157      (synopsis "Mach-O binary signature tool")
158      (description "signapple is a Python tool for creating, verifying, and
159inspecting signatures in Mach-O binaries.")
160      (license license:expat))))
161
162(define-public osslsigncode-2.14
163  (package
164    (inherit osslsigncode)
165    (version "2.14")
166    (source
167     (origin
168       (method git-fetch)
169       (uri (git-reference
170             (url "https://github.com/mtrojnar/osslsigncode")
171             (commit version)))
172       (file-name (git-file-name (package-name osslsigncode) version))
173       (sha256
174        (base32 "06ybcp9r8w0algxvvv0mz4h1cjw764b33s9b26n1dhvpl1dqc24c"))))))
175
176(packages->manifest
177 (append
178  (list ;; The Basics
179        bash-minimal
180        coreutils-minimal
181        ;; File(system) inspection
182        findutils
183        ;; Compression and archiving
184        tar
185        gzip
186        zip
187        ;; Git
188        git-minimal)
189  (let ((target (getenv "HOST")))
190    (cond ((string-suffix? "-mingw32" target)
191           (list osslsigncode-2.14 nss-certs))
192          ((string-contains target "darwin")
193           (list python-signapple))
194          (else '())))))
195