From e90dcee515484449d2f6b85a61c2568cd41cd888 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Sat, 22 Feb 2025 19:32:12 -0800
Subject: [PATCH] simp_le: pin josepy to version 1.15.0

---
 pkgs/by-name/si/simp_le/package.nix | 28 +++++++++++++++++++++++++---
 1 file changed, 25 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/si/simp_le/package.nix b/pkgs/by-name/si/simp_le/package.nix
index 9b6cd8fe5c9c..e058637aea72 100644
--- a/pkgs/by-name/si/simp_le/package.nix
+++ b/pkgs/by-name/si/simp_le/package.nix
@@ -1,11 +1,33 @@
 {
   lib,
-  python3Packages,
+  python3,
+  fetchFromGitHub,
   fetchPypi,
   bash,
 }:
 
-python3Packages.buildPythonApplication rec {
+let
+  python = python3.override {
+    self = python;
+    packageOverrides = self: super: {
+      # acme doesn't support josepy v2
+      josepy = super.josepy.overridePythonAttrs (old: rec {
+        version = "1.15.0";
+        src = fetchFromGitHub {
+          owner = "certbot";
+          repo = "josepy";
+          tag = "v${version}";
+          hash = "sha256-fK4JHDP9eKZf2WO+CqRdEjGwJg/WNLvoxiVrb5xQxRc=";
+        };
+        dependencies = with self; [
+          pyopenssl
+          cryptography
+        ];
+      });
+    };
+  };
+in
+python.pkgs.buildPythonApplication rec {
   pname = "simp_le-client";
   version = "0.20.0";
   pyproject = true;
@@ -23,7 +45,7 @@ python3Packages.buildPythonApplication rec {
   '';
 
   # both setuptools-scm and mock are runtime dependencies
-  dependencies = with python3Packages; [
+  dependencies = with python.pkgs; [
     acme
     cryptography
     setuptools-scm