From 14201da332494161be2241b9caa0aad2cde203bb Mon Sep 17 00:00:00 2001 From: Aneesh Agrawal Date: Sun, 6 Mar 2016 16:36:55 -0500 Subject: [PATCH] openssh: allow building without linking openssl http://undeadly.org/cgi?action=article&sid=20140430045723 has the original announcement of this option. Note, openssl headers are still required at build time, see this comment: http://www.gossamer-threads.com/lists/openssh/dev/61125#61125 --- pkgs/tools/networking/openssh/default.nix | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/pkgs/tools/networking/openssh/default.nix b/pkgs/tools/networking/openssh/default.nix index 4d3ffb1257f9..494c7dfb69e1 100644 --- a/pkgs/tools/networking/openssh/default.nix +++ b/pkgs/tools/networking/openssh/default.nix @@ -4,6 +4,7 @@ , withKerberos ? false , withGssapiPatches ? withKerberos , kerberos +, linkOpenssl? true }: assert withKerberos -> kerberos != null; @@ -54,7 +55,8 @@ stdenv.mkDerivation rec { (if pam != null then "--with-pam" else "--without-pam") ] ++ optional (etcDir != null) "--sysconfdir=${etcDir}" ++ optional withKerberos "--with-kerberos5=${kerberos}" - ++ optional stdenv.isDarwin "--disable-libutil"; + ++ optional stdenv.isDarwin "--disable-libutil" + ++ optional (!linkOpenssl) "--without-openssl"; preConfigure = '' configureFlagsArray+=("--with-privsep-path=$out/empty")