diff options
| author | William A. Kennington III <william@wkennington.com> | 2015-05-18 13:04:16 -0700 |
|---|---|---|
| committer | William A. Kennington III <william@wkennington.com> | 2015-05-18 13:12:27 -0700 |
| commit | fd588f939cf456f3932619b4a8587731669cc0a7 (patch) | |
| tree | 8a1a5216f5ebc863325eaa26fa75d9d09bec503d /pkgs/os-specific/linux/cryptsetup | |
| parent | b0972a00061e41db8fe35b20176b8d380f84975f (diff) | |
| download | nixpkgs-fd588f939cf456f3932619b4a8587731669cc0a7.tar nixpkgs-fd588f939cf456f3932619b4a8587731669cc0a7.tar.gz nixpkgs-fd588f939cf456f3932619b4a8587731669cc0a7.tar.bz2 nixpkgs-fd588f939cf456f3932619b4a8587731669cc0a7.tar.lz nixpkgs-fd588f939cf456f3932619b4a8587731669cc0a7.tar.xz nixpkgs-fd588f939cf456f3932619b4a8587731669cc0a7.tar.zst nixpkgs-fd588f939cf456f3932619b4a8587731669cc0a7.zip | |
cryptsetup: Use openssl instead of libgcrypt
When libgcrypt added support for libcap, it started dropping capabilities of the cryptsetup process. This meant that cryptsetup was unable to communicate with device mapper. This patch fixes that issue by removing the dependency on libgcrypt and instead uses openssl for the implementation of low-level cryptographic functions. Fixes #7859.
Diffstat (limited to 'pkgs/os-specific/linux/cryptsetup')
| -rw-r--r-- | pkgs/os-specific/linux/cryptsetup/default.nix | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/pkgs/os-specific/linux/cryptsetup/default.nix b/pkgs/os-specific/linux/cryptsetup/default.nix index 50ea3f6a067..4e3ede284b4 100644 --- a/pkgs/os-specific/linux/cryptsetup/default.nix +++ b/pkgs/os-specific/linux/cryptsetup/default.nix @@ -1,4 +1,4 @@ -{ stdenv, fetchurl, devicemapper, libgcrypt, libuuid, pkgconfig, popt +{ stdenv, fetchurl, devicemapper, openssl, libuuid, pkgconfig, popt , enablePython ? false, python ? null }: @@ -12,10 +12,10 @@ stdenv.mkDerivation rec { sha256 = "0878vwblazms1dac2ds7vyz8pgi1aac8870ccnl2s0v2sv428g62"; }; - configureFlags = [ "--enable-cryptsetup-reencrypt" ] + configureFlags = [ "--enable-cryptsetup-reencrypt" "--with-crypto_backend=openssl" ] ++ stdenv.lib.optional enablePython "--enable-python"; - buildInputs = [ devicemapper libgcrypt libuuid pkgconfig popt ] + buildInputs = [ devicemapper openssl libuuid pkgconfig popt ] ++ stdenv.lib.optional enablePython python; meta = { |