ports/openssl-sarcasm.nix

λcallPackage, fetchurl

callPackage./openssl.nix withSafeAssembly = true;.overrideAttrs

λold

3pname=

"openssl-sarcasm"

4version=

"3.6.5"

5src=

6url=

"https://github.com/openssl/openssl/releases/download/openssl-3.6.5/openssl-3.6.5.tar.gz"

7hash=

"sha256-ohV8KDDv3sN4iTmwDJsGODBtPwu7dtxIMu5QO7OX35g="

Keep openssl.nix's NIX_SSL_CERT_FILE patch; Nixpkgs uses it for 3.6 too.

10patches=

The upstream perlasm generators emit Fil-C annotations with this enabled. clang's default assembler is SaRCAsm; never use -yolo-assembler here.

16SARCASM=

"1"

17configureFlags=

old.configureFlags ++ "no-padlockeng"

18doCheck=

true

19preCheck=

"patchShebangs util test"

20checkPhase=

runHook preCheck

HARNESS_JOBS=$NIX_BUILD_CORES make test

runHook postCheck

25meta=

old.meta // description = "OpenSSL with memory-safe assembly through Fil-C and SaRCAsm";