wolfssl: 5.4.0 -> 5.5.0

https://github.com/wolfSSL/wolfssl/releases/tag/v5.5.0-stable
Fixes CVE-2022-38152 and CVE-2022-38153.
This commit is contained in:
Thomas Gerbet 2022-09-17 00:10:03 +02:00
parent 9921c621ed
commit 736ad733a8

View File

@ -7,19 +7,22 @@
stdenv.mkDerivation rec {
pname = "wolfssl";
version = "5.4.0";
version = "5.5.0";
src = fetchFromGitHub {
owner = "wolfSSL";
repo = "wolfssl";
rev = "v${version}-stable";
sha256 = "sha256-5a83Mi+S+mASdZ6O2+0I+qulsF6yNUe80a3qZvWmXHw=";
sha256 = "sha256-PqxwWPK5eBcS5d6e0CL4uZHybDye1K8pxniKU99YSAE=";
};
postPatch = ''
patchShebangs ./scripts
# ocsp tests require network access
sed -i -e '/ocsp\.test/d' -e '/ocsp-stapling\.test/d' scripts/include.am
# ensure test detects musl-based systems too
substituteInPlace scripts/ocsp-stapling2.test \
--replace '"linux-gnu"' '"linux-"'
'';
# Almost same as Debian but for now using --enable-all --enable-reproducible-build instead of --enable-distro to ensure options.h gets installed