From c56ce7aba5b9ccf9513c4f858e7f0b89762e8a2e Mon Sep 17 00:00:00 2001
From: Gaetan Lepage <gaetan@glepage.com>
Date: Thu, 21 May 2026 09:15:37 +0000
Subject: [PATCH] python3Packages.sigstore: relax cryptography

---
 pkgs/development/python-modules/sigstore/default.nix | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/pkgs/development/python-modules/sigstore/default.nix b/pkgs/development/python-modules/sigstore/default.nix
index 2447cc0450f5..06eca68ae060 100644
--- a/pkgs/development/python-modules/sigstore/default.nix
+++ b/pkgs/development/python-modules/sigstore/default.nix
@@ -51,6 +51,7 @@ buildPythonPackage (finalAttrs: {
   build-system = [ flit-core ];
 
   pythonRelaxDeps = [
+    "cryptography"
     "sigstore-models"
   ];
 
@@ -83,6 +84,15 @@ buildPythonPackage (finalAttrs: {
 
   pythonImportsCheck = [ "sigstore" ];
 
+  disabledTestPaths = [
+    # AttributeError: module 'cryptography.hazmat.primitives.asymmetric.ec' has no attribute 'SECT163K1'
+    #
+    # Uses ec.SECT163K1 which cryptography 48 removed entirely.
+    # Upstream considers this over-testing (sigstore itself never uses this curve at runtime):
+    # https://github.com/sigstore/sigstore-python/issues/1603
+    "test/unit/internal/test_key_details.py"
+  ];
+
   disabledTests = [
     # Tests require network access
     "test_fail_init_url"