From c110df0ccebea65a1e2715ec8974fa0511f25684 Mon Sep 17 00:00:00 2001
From: Rohit Singh <Rohit1.Singh@deshaw.com>
Date: Fri, 13 Feb 2026 08:38:35 -0500
Subject: [PATCH] python3Packages.botocore: replace vendored certs

---
 pkgs/development/python-modules/botocore/default.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/pkgs/development/python-modules/botocore/default.nix b/pkgs/development/python-modules/botocore/default.nix
index 9164bcd76bb9..810b95dfb660 100644
--- a/pkgs/development/python-modules/botocore/default.nix
+++ b/pkgs/development/python-modules/botocore/default.nix
@@ -1,6 +1,7 @@
 {
   lib,
   awscrt,
+  cacert,
   buildPythonPackage,
   fetchFromGitHub,
 
@@ -29,6 +30,10 @@ buildPythonPackage rec {
     hash = "sha256-avuv1uXKMeSr3SL+BI9XW8tDCQM/dlXFn590di3S03k=";
   };
 
+  postPatch = ''
+    ln -sf ${cacert}/etc/ssl/certs/ca-bundle.crt botocore/cacert.pem
+  '';
+
   build-system = [
     setuptools
   ];