ports/openssl-sarcasm.nix

λcallPackage, fetchurl

callPackage./openssl.nix withSafeAssembly = true;.overrideAttrs

λold

3pname=

"openssl-sarcasm"

4version=

"3.6.4"

5src=

6url=

"https://www.openssl.org/source/openssl-3.6.4.tar.gz"

7hash=

"sha256-m/+qGtHgezVMIb0zJOwC+hVXn0Wn0ElLPnS8RJtzM+8="

Keep openssl.nix's NIX_SSL_CERT_FILE patch; Nixpkgs uses it for 3.6 too.

10patches=

The upstream perlasm generators emit Fil-C annotations with this enabled. clang's default assembler is SaRCAsm; never use -yolo-assembler here.

13SARCASM=

"1"

14configureFlags=

old.configureFlags ++ "no-padlockeng"

15doCheck=

true

16preCheck=

"patchShebangs util test"

17checkPhase=

runHook preCheck

HARNESS_JOBS=$NIX_BUILD_CORES make test

runHook postCheck

22meta=

old.meta // description = "OpenSSL with memory-safe assembly through Fil-C and SaRCAsm";