about summary refs log tree commit diff
path: root/pkgs/tools
diff options
context:
space:
mode:
authorAneesh Agrawal <aneeshusa@gmail.com>2016-03-06 16:36:55 -0500
committerAneesh Agrawal <aneeshusa@gmail.com>2016-03-06 16:36:55 -0500
commit14201da332494161be2241b9caa0aad2cde203bb (patch)
treea9cb9e1d4304b3f73260daabc8bedf7387297d63 /pkgs/tools
parent0bf8a1a86df67649893726d50761567121330006 (diff)
downloadnixlib-14201da332494161be2241b9caa0aad2cde203bb.tar
nixlib-14201da332494161be2241b9caa0aad2cde203bb.tar.gz
nixlib-14201da332494161be2241b9caa0aad2cde203bb.tar.bz2
nixlib-14201da332494161be2241b9caa0aad2cde203bb.tar.lz
nixlib-14201da332494161be2241b9caa0aad2cde203bb.tar.xz
nixlib-14201da332494161be2241b9caa0aad2cde203bb.tar.zst
nixlib-14201da332494161be2241b9caa0aad2cde203bb.zip
openssh: allow building without linking openssl
http://undeadly.org/cgi?action=article&sid=20140430045723 has the
original announcement of this option. Note, openssl headers are still
required at build time, see this comment:
http://www.gossamer-threads.com/lists/openssh/dev/61125#61125
Diffstat (limited to 'pkgs/tools')
-rw-r--r--pkgs/tools/networking/openssh/default.nix4
1 files changed, 3 insertions, 1 deletions
diff --git a/pkgs/tools/networking/openssh/default.nix b/pkgs/tools/networking/openssh/default.nix
index 4d3ffb1257f9..494c7dfb69e1 100644
--- a/pkgs/tools/networking/openssh/default.nix
+++ b/pkgs/tools/networking/openssh/default.nix
@@ -4,6 +4,7 @@
 , withKerberos ? false
 , withGssapiPatches ? withKerberos
 , kerberos
+, linkOpenssl? true
 }:
 
 assert withKerberos -> kerberos != null;
@@ -54,7 +55,8 @@ stdenv.mkDerivation rec {
     (if pam != null then "--with-pam" else "--without-pam")
   ] ++ optional (etcDir != null) "--sysconfdir=${etcDir}"
     ++ optional withKerberos "--with-kerberos5=${kerberos}"
-    ++ optional stdenv.isDarwin "--disable-libutil";
+    ++ optional stdenv.isDarwin "--disable-libutil"
+    ++ optional (!linkOpenssl) "--without-openssl";
 
   preConfigure = ''
     configureFlagsArray+=("--with-privsep-path=$out/empty")