cafkafk/nixpkgs
cafkafk/nixpkgs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 2

Merge pull request #114340 from mcmtroffaes/feature/wolfssl-reproducible-build

Browse source 
wolfssl: use --enable-reproducible-build in favour of configure.ac hack
This commit is contained in:
Sandro 2021-02-26 09:11:48 +01:00 committed by GitHub
commit 5d5d968679
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
pkgs/development/libraries/wolfssl/default.nix
View file

@ -11,24 +11,13 @@ stdenv.mkDerivation rec {
sha256 = "1aa51j0xnhi49izc8djya68l70jkjv25559pgybfb9sa4fa4gz97";
};
# almost same as Debian but for now using --enable-all instead of --enable-distro to ensure options.h gets installed
configureFlags = [ "--enable-all" "--enable-pkcs11" "--enable-tls13" "--enable-base64encode" ];
# almost same as Debian but for now using --enable-all --enable-reproducible-build instead of --enable-distro to ensure options.h gets installed
configureFlags = [ "--enable-all" "--enable-reproducible-build" "--enable-pkcs11" "--enable-tls13" "--enable-base64encode" ];
outputs = [ "out" "dev" "doc" "lib" ];
nativeBuildInputs = [ autoreconfHook ];
postPatch = ''
# fix recursive cycle:
# build flags (including location of header files) are exposed in the
# public API of wolfssl, causing lib to depend on dev
substituteInPlace configure.ac \
--replace '#define LIBWOLFSSL_CONFIGURE_ARGS \"$ac_configure_args\"' ' '
substituteInPlace configure.ac \
--replace '#define LIBWOLFSSL_GLOBAL_CFLAGS \"$CPPFLAGS $AM_CPPFLAGS $CFLAGS $AM_CFLAGS\"' ' '
'';
postInstall = ''
# fix recursive cycle:
# wolfssl-config points to dev, dev propagates bin