about summary refs log tree commit diff
diff options
context:
space:
mode:
authorworldofpeace <worldofpeace@protonmail.ch>2020-02-27 20:12:09 +0000
committerGitHub <noreply@github.com>2020-02-27 20:12:09 +0000
commitb1ec189c9faa017e7a8dc3aa3b8243da3d61b8c7 (patch)
tree2e5fbf996f4df90d60e616856cbe0341c045dac1
parent76f4f6b95db4c63206532f11833b480e10677747 (diff)
parent7cda2823be93e412b9c167f92ae87e65ebc05ea5 (diff)
downloadnixlib-b1ec189c9faa017e7a8dc3aa3b8243da3d61b8c7.tar
nixlib-b1ec189c9faa017e7a8dc3aa3b8243da3d61b8c7.tar.gz
nixlib-b1ec189c9faa017e7a8dc3aa3b8243da3d61b8c7.tar.bz2
nixlib-b1ec189c9faa017e7a8dc3aa3b8243da3d61b8c7.tar.lz
nixlib-b1ec189c9faa017e7a8dc3aa3b8243da3d61b8c7.tar.xz
nixlib-b1ec189c9faa017e7a8dc3aa3b8243da3d61b8c7.tar.zst
nixlib-b1ec189c9faa017e7a8dc3aa3b8243da3d61b8c7.zip
Merge pull request #80746 from vcunat/p/openssl-eol
openssl_1_0_2: mark as insecure; fixes #77503 (kinda)
-rw-r--r--pkgs/development/libraries/openssl/default.nix6
1 files changed, 4 insertions, 2 deletions
diff --git a/pkgs/development/libraries/openssl/default.nix b/pkgs/development/libraries/openssl/default.nix
index 63657cfc5e6e..d9028ddfbb5b 100644
--- a/pkgs/development/libraries/openssl/default.nix
+++ b/pkgs/development/libraries/openssl/default.nix
@@ -7,7 +7,8 @@
 with stdenv.lib;
 
 let
-  common = { version, sha256, patches ? [], withDocs ? false }: stdenv.mkDerivation rec {
+  common = { version, sha256, patches ? [], withDocs ? false, extraMeta ? {} }:
+   stdenv.mkDerivation rec {
     pname = "openssl";
     inherit version;
 
@@ -130,7 +131,7 @@ let
       license = licenses.openssl;
       platforms = platforms.all;
       maintainers = [ maintainers.peti ];
-    };
+    } // extraMeta;
   };
 
 in {
@@ -145,6 +146,7 @@ in {
        then ./1.0.2/use-etc-ssl-certs-darwin.patch
        else ./1.0.2/use-etc-ssl-certs.patch)
     ];
+    extraMeta.knownVulnerabilities = [ "Support for OpenSSL 1.0.2 ended with 2019." ];
   };
 
   openssl_1_1 = common {