www-apps/syncserver: new package (and deps) for Firefox Sync Server

dev-python/certifi/Manifest

@@ -0,0 +1,3 @@
+AUX certifi-2019.3.9-use-system-cacerts.patch 275 BLAKE2B 79fa560ceff6030cf0585ed89bc781532980fde0f84a6d97ba9c7e908633afc1bbe56651073e5eb0602ab297cf07fa81cb04c1db662f3d1b18d161b94b61656b SHA512 88279adc9a00700fd622fbfc015fe71dca5d2eef664c4e3f0dd82894e9916af7fd40517e2b8c129face9b36c791527b3af794607bf21f5cdd079ca21a6a1b327
+DIST certifi-2019.3.9.tar.gz 158179 BLAKE2B fa32135b502ae970c70d0932942577e0a4dc892e5c4e9637a1bef097a17b837501dd96d4e7a614311a81f6577f498a9c3561b8758b943451878061ef27fc81b5 SHA512 d86559b0d384f8114245b169391c73d5e6df02ba411cf9706c9d4e5958eeef610b6550bcb5eb519856b8fa25f3f5eb1cea02c0df1f6df72e16da8201732b0dd9
+EBUILD certifi-2019.3.9.ebuild 1428 BLAKE2B dc374caecf848d961de490b6f5e47a13631a5d7cfdc052c56c01e5a76c18a6265076d8ad606a7605d493eac14d16dc33c59a53ab4ecd5f6e345fff1720409ebf SHA512 6f1d35861d5314b4cb9c051bf4735fe08a319856dfbc274e93ede20389e2be4000afeb90e170a8addab28c268eaf54fdba044903ab41fb1770451c0578094660

dev-python/certifi/certifi-2019.3.9.ebuild

@@ -0,0 +1,43 @@
+# Copyright 1999-2019 Gentoo Authors
+# Distributed under the terms of the GNU General Public License v2
+
+EAPI=6
+
+PYTHON_COMPAT=( python2_7 python3_{5,6,7} pypy pypy3 )
+
+inherit distutils-r1 prefix readme.gentoo-r1 versionator
+
+DESCRIPTION="Python package for providing Mozilla's CA Bundle"
+HOMEPAGE="http://certifi.io/ https://pypi.org/project/certifi"
+SRC_URI="mirror://pypi/${PN:0:1}/${PN}/${P}.tar.gz"
+
+LICENSE="MPL-2.0"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86 ~ppc-aix ~x64-cygwin ~amd64-fbsd ~x86-fbsd ~amd64-linux ~x86-linux ~ppc-macos ~x64-macos ~x86-macos ~m68k-mint ~sparc-solaris ~sparc64-solaris ~x64-solaris ~x86-solaris"
+IUSE=""
+
+RDEPEND="app-misc/ca-certificates"
+DEPEND="dev-python/setuptools[${PYTHON_USEDEP}]"
+
+# Do not drop this patch -- this will affect system's security
+PATCHES=( "${FILESDIR}"/certifi-2019.3.9-use-system-cacerts.patch )
+
+python_prepare_all() {
+	distutils-r1_python_prepare_all
+
+	eprefixify certifi/core.py
+}
+
+python_install_all() {
+	distutils-r1_python_install_all
+
+	local DOC_CONTENTS="
+		In Gentoo, we don't use certifi's bundled CA certificates.
+		Instead we remove bundled cacert.pem and patch certifi
+		to return system's CA certificates.
+	"
+	readme.gentoo_create_doc
+
+	# Precaution -- nothing should use bundled CA certificates
+	find "${D}" -name 'cacert.pem' -delete || die "Failed to delete bundled CA certificates"
+}

dev-python/certifi/files/certifi-2019.3.9-use-system-cacerts.patch

@@ -0,0 +1,12 @@
+Use system's CA certificate store
+
+--- a/certifi/core.py
++++ b/certifi/core.py
+@@ -10,6 +10,4 @@ import os
+
+
+ def where():
+-    f = os.path.dirname(__file__)
+-
+-    return os.path.join(f, 'cacert.pem')
++    return "@GENTOO_PORTAGE_EPREFIX@/etc/ssl/certs/ca-certificates.crt"