summary refs log tree commit diff
path: root/gnu/packages/tls.scm
diff options
context:
space:
mode:
authorEfraim Flashner <efraim@flashner.co.il>2022-01-26 11:46:31 +0200
committerEfraim Flashner <efraim@flashner.co.il>2022-01-26 11:49:27 +0200
commit1402c6abe150ced4cbb4fa0721fe7c8796fe2c38 (patch)
tree9e936c0051722fa79f0569f1eb8d4d27a6be5283 /gnu/packages/tls.scm
parentf15ca337bec89f238b9b9ced08c2e02c35629a33 (diff)
downloadguix-1402c6abe150ced4cbb4fa0721fe7c8796fe2c38.tar.gz
gnu: openssl: Update to 1.1.1m [security fixes].
* gnu/packages/tls.scm (openssl/fixed): New variable.
(openssl)[replacement]: New field.
Diffstat (limited to 'gnu/packages/tls.scm')
-rw-r--r--gnu/packages/tls.scm20
1 files changed, 20 insertions, 0 deletions
diff --git a/gnu/packages/tls.scm b/gnu/packages/tls.scm
index b0950ec2e5..d5b42c58a0 100644
--- a/gnu/packages/tls.scm
+++ b/gnu/packages/tls.scm
@@ -383,6 +383,7 @@ OpenSSL for TARGET."
   (package
     (name "openssl")
     (version "1.1.1l")
+    (replacement openssl/fixed)
     (source (origin
               (method url-fetch)
               (uri (list (string-append "https://www.openssl.org/source/openssl-"
@@ -508,6 +509,25 @@ OpenSSL for TARGET."
     (license license:openssl)
     (home-page "https://www.openssl.org/")))
 
+(define openssl/fixed
+  (package
+    (inherit openssl)
+    (name "openssl")
+    (version "1.1.1m")
+    (source (origin
+              (method url-fetch)
+              (uri (list (string-append "https://www.openssl.org/source/openssl-"
+                                        version ".tar.gz")
+                         (string-append "ftp://ftp.openssl.org/source/"
+                                        "openssl-" version ".tar.gz")
+                         (string-append "ftp://ftp.openssl.org/source/old/"
+                                        (string-trim-right version char-set:letter)
+                                        "/openssl-" version ".tar.gz")))
+              (patches (search-patches "openssl-1.1-c-rehash-in.patch"))
+              (sha256
+               (base32
+                "15kcvdi69jka67sk1l3a50c26cb7xv9xiwdrgky4bji3ifz9k4gq"))))))
+
 ;; We will not add any new uses of this package. If you add new code that uses
 ;; this package, your change will be reverted!
 ;;