forked from mirrors/nixpkgs
4630fcf686
In botan 2.11.0 the upstream switched to tar.xz archives. To continue supporting botan1 the source package extension can now be overriden from within the specialized package. Addresses two advisories, neither of which received a CVE: - 2020-07-05: Failure to enforce name constraints on alternative names - 2020-03-24: Side channel during CBC padding
54 lines
1.5 KiB
Nix
54 lines
1.5 KiB
Nix
{ stdenv, fetchurl, python, bzip2, zlib, gmp, openssl, boost
|
|
# Passed by version specific builders
|
|
, baseVersion, revision, sha256
|
|
, sourceExtension ? "tar.xz"
|
|
, extraConfigureFlags ? ""
|
|
, postPatch ? null
|
|
, darwin
|
|
, ...
|
|
}:
|
|
|
|
stdenv.mkDerivation rec {
|
|
pname = "botan";
|
|
version = "${baseVersion}.${revision}";
|
|
|
|
src = fetchurl {
|
|
name = "Botan-${version}.${sourceExtension}";
|
|
urls = [
|
|
"http://files.randombit.net/botan/v${baseVersion}/Botan-${version}.${sourceExtension}"
|
|
"http://botan.randombit.net/releases/Botan-${version}.${sourceExtension}"
|
|
];
|
|
inherit sha256;
|
|
};
|
|
inherit postPatch;
|
|
|
|
buildInputs = [ python bzip2 zlib gmp openssl boost ]
|
|
++ stdenv.lib.optional stdenv.isDarwin darwin.apple_sdk.frameworks.Security;
|
|
|
|
configurePhase = ''
|
|
python configure.py --prefix=$out --with-bzip2 --with-zlib ${if openssl != null then "--with-openssl" else ""} ${extraConfigureFlags}${if stdenv.cc.isClang then " --cc=clang" else "" }
|
|
'';
|
|
|
|
enableParallelBuilding = true;
|
|
|
|
preInstall = ''
|
|
if [ -d src/scripts ]; then
|
|
patchShebangs src/scripts
|
|
fi
|
|
'';
|
|
|
|
postInstall = ''
|
|
cd "$out"/lib/pkgconfig
|
|
ln -s botan-*.pc botan.pc || true
|
|
'';
|
|
|
|
meta = with stdenv.lib; {
|
|
inherit version;
|
|
description = "Cryptographic algorithms library";
|
|
maintainers = with maintainers; [ raskin ];
|
|
platforms = ["x86_64-linux" "i686-linux" "x86_64-darwin"];
|
|
license = licenses.bsd2;
|
|
};
|
|
passthru.updateInfo.downloadPage = "http://files.randombit.net/botan/";
|
|
}
|