From e9515111323194e9c83f21d856fa8a3d647c0450 Mon Sep 17 00:00:00 2001
From: Michael <35783820+mib1185@users.noreply.github.com>
Date: Sun, 15 Dec 2024 19:26:46 +0100
Subject: [PATCH] Allow load_verify_locations with only cadata passed (#133299)

---
 homeassistant/block_async_io.py | 8 +++++++-
 tests/test_block_async_io.py    | 6 ++++++
 2 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/homeassistant/block_async_io.py b/homeassistant/block_async_io.py
index 7a68b2515e9..767716dbe27 100644
--- a/homeassistant/block_async_io.py
+++ b/homeassistant/block_async_io.py
@@ -50,6 +50,12 @@ def _check_sleep_call_allowed(mapped_args: dict[str, Any]) -> bool:
     return False
 
 
+def _check_load_verify_locations_call_allowed(mapped_args: dict[str, Any]) -> bool:
+    # If only cadata is passed, we can ignore it
+    kwargs = mapped_args.get("kwargs")
+    return bool(kwargs and len(kwargs) == 1 and "cadata" in kwargs)
+
+
 @dataclass(slots=True, frozen=True)
 class BlockingCall:
     """Class to hold information about a blocking call."""
@@ -158,7 +164,7 @@ _BLOCKING_CALLS: tuple[BlockingCall, ...] = (
         original_func=SSLContext.load_verify_locations,
         object=SSLContext,
         function="load_verify_locations",
-        check_allowed=None,
+        check_allowed=_check_load_verify_locations_call_allowed,
         strict=False,
         strict_core=False,
         skip_for_tests=True,
diff --git a/tests/test_block_async_io.py b/tests/test_block_async_io.py
index dc2b096f595..dd23d4e9709 100644
--- a/tests/test_block_async_io.py
+++ b/tests/test_block_async_io.py
@@ -429,6 +429,12 @@ async def test_protect_loop_load_verify_locations(
         context.load_verify_locations("/dev/null")
     assert "Detected blocking call to load_verify_locations" in caplog.text
 
+    # ignore with only cadata
+    caplog.clear()
+    with pytest.raises(ssl.SSLError):
+        context.load_verify_locations(cadata="xxx")
+    assert "Detected blocking call to load_verify_locations" not in caplog.text
+
 
 async def test_protect_loop_load_cert_chain(
     hass: HomeAssistant, caplog: pytest.LogCaptureFixture