Address the cert issue in piptool as a PAR.

mattmoor · mattmoor · commit 0583d2702f40 · 2017-09-10T18:03:30.000Z
With this change I am able to build/test my PR on my macbook without pip installed.  The only additional change I have locally is to switch from running piptool.py as a simple .py file to downloading/using a PAR built from this change.

I believe we still have the problem that the .par picks the host's version of pip instead of our embedded copy, but I haven't reverified that issue still exists (this just does nothing to address that issue).
diff --git a/python/piptool.py b/python/piptool.py
@@ -32,14 +32,14 @@
   # Fallback on using it as a CLI.
   from pip._vendor import requests
 
-  from pip import main as pip_main
-  # def pip_main(argv):
-  #   # Extract the certificates from the PAR following the example of get-pip.py
-  #   # https://github.com/pypa/get-pip/blob/430ba37776ae2ad89/template.py#L164-L168
-  #   cert_path = os.path.join(tempfile.mkdtemp(), "cacert.pem")
-  #   with open(cert_path, "wb") as cert:
-  #     cert.write(pkgutil.get_data("pip._vendor.requests", "cacert.pem"))
-  #   return _pip_main(argv + ["--cert", os.path.basename(cert_path)])
+  from pip import main as _pip_main
+  def pip_main(argv):
+    # Extract the certificates from the PAR following the example of get-pip.py
+    # https://github.com/pypa/get-pip/blob/430ba37776ae2ad89/template.py#L164-L168
+    cert_path = os.path.join(tempfile.mkdtemp(), "cacert.pem")
+    with open(cert_path, "wb") as cert:
+      cert.write(pkgutil.get_data("pip._vendor.requests", "cacert.pem"))
+    return _pip_main(argv + ["--cert", cert_path])
 
 except:
   import subprocess
