PYTHON-5040 Use uv run with PEP 723 inline metadata in gen-certs.py

Author: blink1073

test/certificates/README.md

@@ -7,10 +7,10 @@ These certificates are used by the PyMongo test suite for TLS/SSL integration te
 Run the generation script from this directory:
 
 ```bash
-bash gen-certs.sh
+uv run gen-certs.py
 ```
 
-**Prerequisites:** Python 3 with the `cryptography` package (`pip install cryptography`).
+**Prerequisites:** Python 3 and [uv](https://docs.astral.sh/uv/). The script declares its own dependency on `cryptography` via PEP 723 inline metadata, so `uv` installs it automatically.
 
 ## Certificate details
 

test/certificates/gen-certs.py

@@ -1,4 +1,7 @@
-#!/usr/bin/env python3
+# /// script
+# requires-python = ">=3.8"
+# dependencies = ["cryptography"]
+# ///
 """Generate TLS test certificates for the PyMongo test suite.
 
 Two classes of leaf cert are generated:
@@ -27,8 +30,7 @@
 (CSSMERR_TP_CERT_SUSPENDED) because the CA is not in the system keychain.
 
 Usage:
-    pip install cryptography
-    python gen-certs.py    # run from test/certificates/
+    uv run gen-certs.py    # run from test/certificates/
 
 Password for password_protected.pem: qwerty
 """
@@ -39,19 +41,16 @@
 import sys
 from pathlib import Path
 
-try:
-    from cryptography import x509
-    from cryptography.hazmat.primitives import hashes, serialization
-    from cryptography.hazmat.primitives.asymmetric import rsa
-    from cryptography.hazmat.primitives.serialization import (
-        BestAvailableEncryption,
-        Encoding,
-        NoEncryption,
-        PrivateFormat,
-    )
-    from cryptography.x509.oid import ExtendedKeyUsageOID, NameOID
-except ImportError:
-    sys.exit("cryptography package is required: pip install cryptography")
+from cryptography import x509
+from cryptography.hazmat.primitives import hashes, serialization
+from cryptography.hazmat.primitives.asymmetric import rsa
+from cryptography.hazmat.primitives.serialization import (
+    BestAvailableEncryption,
+    Encoding,
+    NoEncryption,
+    PrivateFormat,
+)
+from cryptography.x509.oid import ExtendedKeyUsageOID, NameOID
 
 SCRIPT_DIR = Path(__file__).parent.resolve()
 DAYS = 7300  # ~20 years

test/certificates/gen-certs.sh

@@ -3,8 +3,8 @@
 # See gen-certs.py for full documentation on the cert design.
 #
 # Usage: bash gen-certs.sh  (run from test/certificates/)
-# Requires: pip install cryptography
+# Requires: uv
 
 set -euo pipefail
 cd "$(dirname "${BASH_SOURCE[0]}")"
-python3 gen-certs.py
+uv run gen-certs.py