diff options
author | William A. Kennington III <william@wkennington.com> | 2015-05-18 13:04:16 -0700 |
---|---|---|
committer | William A. Kennington III <william@wkennington.com> | 2015-05-18 13:12:27 -0700 |
commit | fd588f939cf456f3932619b4a8587731669cc0a7 (patch) | |
tree | 8a1a5216f5ebc863325eaa26fa75d9d09bec503d /pkgs/os-specific | |
parent | b0972a00061e41db8fe35b20176b8d380f84975f (diff) | |
download | nixlib-fd588f939cf456f3932619b4a8587731669cc0a7.tar nixlib-fd588f939cf456f3932619b4a8587731669cc0a7.tar.gz nixlib-fd588f939cf456f3932619b4a8587731669cc0a7.tar.bz2 nixlib-fd588f939cf456f3932619b4a8587731669cc0a7.tar.lz nixlib-fd588f939cf456f3932619b4a8587731669cc0a7.tar.xz nixlib-fd588f939cf456f3932619b4a8587731669cc0a7.tar.zst nixlib-fd588f939cf456f3932619b4a8587731669cc0a7.zip |
cryptsetup: Use openssl instead of libgcrypt
When libgcrypt added support for libcap, it started dropping capabilities of the cryptsetup process. This meant that cryptsetup was unable to communicate with device mapper. This patch fixes that issue by removing the dependency on libgcrypt and instead uses openssl for the implementation of low-level cryptographic functions. Fixes #7859.
Diffstat (limited to 'pkgs/os-specific')
-rw-r--r-- | pkgs/os-specific/linux/cryptsetup/default.nix | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/pkgs/os-specific/linux/cryptsetup/default.nix b/pkgs/os-specific/linux/cryptsetup/default.nix index 50ea3f6a0675..4e3ede284b45 100644 --- a/pkgs/os-specific/linux/cryptsetup/default.nix +++ b/pkgs/os-specific/linux/cryptsetup/default.nix @@ -1,4 +1,4 @@ -{ stdenv, fetchurl, devicemapper, libgcrypt, libuuid, pkgconfig, popt +{ stdenv, fetchurl, devicemapper, openssl, libuuid, pkgconfig, popt , enablePython ? false, python ? null }: @@ -12,10 +12,10 @@ stdenv.mkDerivation rec { sha256 = "0878vwblazms1dac2ds7vyz8pgi1aac8870ccnl2s0v2sv428g62"; }; - configureFlags = [ "--enable-cryptsetup-reencrypt" ] + configureFlags = [ "--enable-cryptsetup-reencrypt" "--with-crypto_backend=openssl" ] ++ stdenv.lib.optional enablePython "--enable-python"; - buildInputs = [ devicemapper libgcrypt libuuid pkgconfig popt ] + buildInputs = [ devicemapper openssl libuuid pkgconfig popt ] ++ stdenv.lib.optional enablePython python; meta = { |