pyrox.dev
lol
1{ lib, stdenv, fetchFromGitHub
2, cmake, pkg-config, arpa2cm
3, openldap, p11-kit, unbound, libtasn1, db, openssl, quickder, libkrb5, ldns, gnutls-kdh
4, softhsm
5}:
6
7let
8 pname = "tlspool";
9 version = "20180227";
10in
11
12stdenv.mkDerivation {
13 name = "${pname}-${version}";
14 src = fetchFromGitHub {
15 owner = "arpa2";
16 repo = "tlspool";
17 rev = "b4459637d71c7602e94d455e23c74f3973b9cf30";
18 sha256 = "0x78f2bdsiglwicwn3injm5ysfjlfa0yzdpnc0r3iw4z0n89rj2r";
19 };
20
21 nativeBuildInputs = [
22 cmake pkg-config arpa2cm
23 ];
24
25 buildInputs = [
26 openldap p11-kit unbound libtasn1 db openssl quickder libkrb5 ldns gnutls-kdh
27 ];
28
29 postPatch = ''
30 # CMake is probably confused because the current version isn't 1.2.6, but 1.2-6
31 substituteInPlace CMakeLists.txt \
32 --replace "Quick-DER 1.2.4" "Quick-DER 1.2"
33 substituteInPlace etc/tlspool.conf \
34 --replace "dnssec_rootkey ../etc/root.key" "dnssec_rootkey $out/etc/root.key" \
35 --replace "pkcs11_path /usr/local/lib/softhsm/libsofthsm2.so" "pkcs11_path ${softhsm}/lib/softhsm/libsofthsm2.so"
36 '';
37
38 postInstall = ''
39 mkdir -p $out/include/${pname}/pulleyback $out/etc/tlspool
40 cp -R $src/etc/* $out/etc/tlspool/
41 cp $src/include/tlspool/*.h $out/include/${pname}
42 cp $src/pulleyback/*.h $out/include/${pname}/pulleyback/
43 cp $src/src/*.h $out/include/${pname}
44 '';
45
46 meta = with lib; {
47 description = "A supercharged TLS daemon that allows for easy, strong and consistent deployment";
48 license = licenses.gpl3;
49 homepage = "http://www.tlspool.org";
50 maintainers = with maintainers; [ leenaars qknight ];
51 };
52}