I am fine with the changes to support EPEL7 but Fedora uses the ca-certificates from Mozilla (0) and you remove the path to point to ca-certificates in Fedora, for epel packaging this is fine but can be a issue with Fedora packaging guidelines.

Said that this package exist for pythton-livereload -> mkdocs, maybe a better solution is fix livereload in epel7 to not requires certify.

0: https://fedoraproject.org/wiki/CA-Certificates

What do you mean? I'm not changing or removing any paths with these changes.

Are you talking about removing the %patch1 -p1 line? The patch is still applied via the %autosetup macro, that was just a clean up step.

My bad, I just mean than the patch for fedora can not work in epel, i have verify and epe7 and fedora have diferent path for the .pem file, there a are proper patch now

I don't think that's accurate. I checked EL6, EL7, F25, F26, F27, and F28, and the ca-certificates package contains /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem on all of them. /etc/pki/tls/certs/ca-bundle.crt is a symbolic link to the same file, except on EL6 where it is it's own file (no idea why), but it exists regardless. I don't actually care about EL6 compatibility, but I would like to merge these changes back to the epel7 branch to push an EL7 package.

It also appears that the new path in the Fedora patch doesn't exist at all, so the 2016.9.26-5 release is broken (please don't push it).

old:

# rpm -q python3-certifi
python3-certifi-2016.9.26-3.fc27.noarch
# ls -l $(python3 -c 'import certifi; print(certifi.core.where())')
lrwxrwxrwx. 1 root root 49 Aug 15 08:49 /etc/pki/tls/certs/ca-bundle.crt -> /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem

new:

# rpm -q python3-certifi
python3-certifi-2016.9.26-5.fc28.noarch
# ls -l $(python3 -c 'import certifi; print(certifi.core.where())')
ls: cannot access '/etc/pki/ca-trust/pem/tls-ca-bundle.pem': No such file or directory

Thanks for the check

BuildRequires: /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem

in 2016.9.26-5 should ensure than the correct .pem file exits, at lest in build time, and the same patch work in epel7 and fedora, so python3-certifi -> python3-livereload -> mkdocs should be easy to backport to epel7 now.

Of course, thanks for the merge and follow up.

Would you mind merging these fixes to the epel7 branch and doing a bodhi update for it? If you don't have the time, I'm happy to co-maintain and do it myself if you give me commit permissions on the repo.