- update to 2.10.1:
* SOCKS Proxy Support! (requires PySocks; $ pip install requests[socks])
* Updated bundled urllib3 to 1.15.1.
* Change built-in CaseInsensitiveDict (used for headers) to use OrderedDict
as its underlying datastore.
* Don't use redirect_cache if allow_redirects=False
* When passed objects that throw exceptions from ``tell()``, send them via
chunked transfer encoding instead of failing.
* Raise a ProxyError for proxy related connection issues.

- update no-default-cacert.patch to simply pass empty CA path
- urllib3-ssl-default-context.patch: patch bundled urllib3 to behave
correctly with regard to empty CA path passed
- change urllib3 fallback requirements to Recommends
- use ca-certificates in SLE as well
- recommend ca-certificates-mozilla to have a basic certificate set

- Update to 2.9.1 (changes since 2.8.1):
* The verify keyword argument now supports being passed a path to
a directory of CA certificates, not just a single-file bundle.
* Warnings are now emitted when sending files opened in text mode.
* Added the 511 Network Authentication Required status code to the
status code registry.
* For file-like objects that are not seeked to the very beginning,
we now send the content length for the number of bytes we will
actually read, rather than the total size of the file, allowing
partial file uploads.
* When uploading file-like objects, if they are empty or have no
obvious content length we set Transfer-Encoding: chunked rather
than Content-Length: 0.