diff options
author | Dirk-Willem van Gulik <dirkx@webweaving.org> | 2019-12-24 17:01:04 +0100 |
---|---|---|
committer | Dirk-Willem van Gulik <dirkx@webweaving.org> | 2019-12-24 17:01:04 +0100 |
commit | f85ec2d8960a1a9708c0a261871c83f0abcc4f79 (patch) | |
tree | 5ba45e548b4ea294087f19c06d82b06b793959a9 /pkgs/servers/http/apache-modules/mod_csr/default.nix | |
parent | 826d61e5d9602969092fb129c7e0944a2a91249a (diff) | |
download | nixpkgs-f85ec2d8960a1a9708c0a261871c83f0abcc4f79.tar nixpkgs-f85ec2d8960a1a9708c0a261871c83f0abcc4f79.tar.gz nixpkgs-f85ec2d8960a1a9708c0a261871c83f0abcc4f79.tar.bz2 nixpkgs-f85ec2d8960a1a9708c0a261871c83f0abcc4f79.tar.lz nixpkgs-f85ec2d8960a1a9708c0a261871c83f0abcc4f79.tar.xz nixpkgs-f85ec2d8960a1a9708c0a261871c83f0abcc4f79.tar.zst nixpkgs-f85ec2d8960a1a9708c0a261871c83f0abcc4f79.zip |
Additional redwax modules - including comments from review on #75620.
Diffstat (limited to 'pkgs/servers/http/apache-modules/mod_csr/default.nix')
-rw-r--r-- | pkgs/servers/http/apache-modules/mod_csr/default.nix | 41 |
1 files changed, 41 insertions, 0 deletions
diff --git a/pkgs/servers/http/apache-modules/mod_csr/default.nix b/pkgs/servers/http/apache-modules/mod_csr/default.nix new file mode 100644 index 00000000000..60f97d2f361 --- /dev/null +++ b/pkgs/servers/http/apache-modules/mod_csr/default.nix @@ -0,0 +1,41 @@ +{ stdenv, fetchurl, pkgconfig, mod_ca, apr, aprutil }: + +stdenv.mkDerivation rec { + pname = "mod_csr"; + version = "0.2.1"; + + src = fetchurl { + url = "https://redwax.eu/dist/rs/${pname}-${version}.tar.gz"; + sha256 = "01sdvv07kchdd6ssrmd2cbhj50qh2ibp5g5h6jy1jqbzp0b3j9ja"; + }; + + nativeBuildInputs = [ pkgconfig ]; + buildInputs = [ mod_ca apr aprutil ]; + inherit (mod_ca) configureFlags installFlags; + + # After openssl-1.0.2t, starting in openssl-1.1.0l + # parts of the OpenSSL struct API was replaced by + # getters - but some setters where forgotten. + # + # It is expected that these are back/retrofitted in version + # openssl-1.1.1d -- but while fixing this it was found + # that there were quite a few other setters missing and + # that some of the memory management needed was at odds + # with the principles used sofar. + # + # See https://github.com/openssl/openssl/pull/10563 + # + # So as a stopgap - use a minimalist compat. layer + # https://source.redwax.eu/projects/RS/repos/mod_csr/browse/openssl_setter_compat.h + # + preBuild = "cp ${./openssl_setter_compat.h} openssl_setter_compat.h"; + + meta = with stdenv.lib; { + description = "RedWax CA service module to handle Certificate Signing Requests"; + + homepage = "https://redwax.eu"; + license = licenses.asl20; + platforms = platforms.unix; + maintainers = with maintainers; [ dirkx ]; + }; +} |