talexander/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Releases Activity

edk2: re-vendor OpenSSL

Browse Source 
This sucks, but 3.0 is too old, 3.5 is too new, and we're not
shipping 3.4 just for this.
This commit is contained in:
K900 2025-07-13 11:52:34 +03:00
parent 90ada24a99
commit ea5785e8c4
1 changed files with 3 additions and 24 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
pkgs/by-name/ed/edk2/package.nix
View File

@ -61,31 +61,10 @@ stdenv.mkDerivation (finalAttrs: {
})
];
# FIXME: unvendor OpenSSL again once upstream updates
# to a compatible version.
# Upstream PR: https://github.com/tianocore/edk2/pull/10946
postPatch = ''
# de-vendor OpenSSL
rm -r CryptoPkg/Library/OpensslLib/openssl
mkdir -p CryptoPkg/Library/OpensslLib/openssl
(
cd CryptoPkg/Library/OpensslLib/openssl
tar --strip-components=1 -xf ${buildPackages.openssl_3.src}
# Apply OpenSSL patches.
${lib.pipe buildPackages.openssl_3.patches [
(builtins.filter (
patch:
!builtins.elem (baseNameOf patch) [
# Exclude patches not required in this context.
"nix-ssl-cert-file.patch"
"openssl-disable-kernel-detection.patch"
"use-etc-ssl-certs-darwin.patch"
"use-etc-ssl-certs.patch"
]
))
(map (patch: "patch -p1 < ${patch}\n"))
lib.concatStrings
]}
)
# enable compilation using Clang
# https://bugzilla.tianocore.org/show_bug.cgi?id=4620
substituteInPlace BaseTools/Conf/tools_def.template --replace-fail \