From 1691b9e047c61f725377168894abe3af20a7fdc9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Wed, 10 Jun 2026 12:45:56 -0700
Subject: [PATCH 1/3] python3Packages.httpx: only unset $SSL_CERT_FILE if path
 doesn't exist

---
 pkgs/development/python-modules/httpx/setup-hook.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/pkgs/development/python-modules/httpx/setup-hook.sh b/pkgs/development/python-modules/httpx/setup-hook.sh
index 7e9ced07b69c..fe567877ef1a 100644
--- a/pkgs/development/python-modules/httpx/setup-hook.sh
+++ b/pkgs/development/python-modules/httpx/setup-hook.sh
@@ -1,5 +1,7 @@
 httpxSslCertFileUnset() {
+  if [ ! -e "${SSL_CERT_FILE-}" ]; then
     unset SSL_CERT_FILE
+  fi
 }
 
 postHooks+=(httpxSslCertFileUnset)

From 4071736d8c5b8fe22079531ee0339710fb975fa6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Wed, 10 Jun 2026 12:53:16 -0700
Subject: [PATCH 2/3] python3Packages.pyreqwest: remove httpx workaround

---
 pkgs/development/python-modules/pyreqwest/default.nix | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/pkgs/development/python-modules/pyreqwest/default.nix b/pkgs/development/python-modules/pyreqwest/default.nix
index 10b189757108..3d6fe0e9c825 100644
--- a/pkgs/development/python-modules/pyreqwest/default.nix
+++ b/pkgs/development/python-modules/pyreqwest/default.nix
@@ -43,6 +43,7 @@ buildPythonPackage (finalAttrs: {
   pythonImportsCheck = [ "pyreqwest" ];
 
   nativeCheckInputs = [
+    cacert
     dirty-equals
     docker
     granian
@@ -57,12 +58,6 @@ buildPythonPackage (finalAttrs: {
     yarl
   ];
 
-  preCheck = ''
-    # Without this tests fails with
-    #     unexpected error: No CA certificates were loaded from the system
-    export SSL_CERT_FILE="${cacert}/etc/ssl/certs/ca-bundle.crt"
-  '';
-
   disabledTestPaths = [
     # requires a running Docker daemon
     "tests/test_examples.py"

From 902d6dd64bd7361ff57530c3fb4bb8db1f30b2be Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Robert=20Sch=C3=BCtz?= <nix@dotlambda.de>
Date: Wed, 10 Jun 2026 13:18:41 -0700
Subject: [PATCH 3/3] python3Packages.prowlpy: remove httpx workaround

---
 pkgs/development/python-modules/prowlpy/default.nix | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/pkgs/development/python-modules/prowlpy/default.nix b/pkgs/development/python-modules/prowlpy/default.nix
index f69da1bc04c0..a6368e345efe 100644
--- a/pkgs/development/python-modules/prowlpy/default.nix
+++ b/pkgs/development/python-modules/prowlpy/default.nix
@@ -43,6 +43,7 @@ buildPythonPackage (finalAttrs: {
   pythonImportsCheck = [ "prowlpy" ];
 
   nativeCheckInputs = [
+    cacert
     pytest-asyncio
     pytest-cov-stub
     pytestCheckHook
@@ -50,12 +51,6 @@ buildPythonPackage (finalAttrs: {
   ]
   ++ lib.concatAttrValues finalAttrs.passthru.optional-dependencies;
 
-  preCheck = ''
-    # Without this pyreqwest fails with
-    #     unexpected error: No CA certificates were loaded from the system
-    export SSL_CERT_FILE="${cacert}/etc/ssl/certs/ca-bundle.crt"
-  '';
-
   # tests fail without this
   pytestFlags = [ "-v" ];