diff options
Diffstat (limited to 'nixpkgs/pkgs/development/libraries/mbedtls/generic.nix')
-rw-r--r-- | nixpkgs/pkgs/development/libraries/mbedtls/generic.nix | 53 |
1 files changed, 53 insertions, 0 deletions
diff --git a/nixpkgs/pkgs/development/libraries/mbedtls/generic.nix b/nixpkgs/pkgs/development/libraries/mbedtls/generic.nix new file mode 100644 index 000000000000..adc46adb75fb --- /dev/null +++ b/nixpkgs/pkgs/development/libraries/mbedtls/generic.nix @@ -0,0 +1,53 @@ +{ lib +, stdenv +, version +, hash +, fetchFromGitHub + +, cmake +, ninja +, perl # Project uses Perl for scripting and testing +, python3 + +, enableThreading ? true # Threading can be disabled to increase security https://tls.mbed.org/kb/development/thread-safety-and-multi-threading +}: + +stdenv.mkDerivation rec { + pname = "mbedtls"; + inherit version; + + src = fetchFromGitHub { + owner = "Mbed-TLS"; + repo = "mbedtls"; + rev = "${pname}-${version}"; + inherit hash; + }; + + nativeBuildInputs = [ cmake ninja perl python3 ]; + + strictDeps = true; + + postConfigure = lib.optionalString enableThreading '' + perl scripts/config.pl set MBEDTLS_THREADING_C # Threading abstraction layer + perl scripts/config.pl set MBEDTLS_THREADING_PTHREAD # POSIX thread wrapper layer for the threading layer. + ''; + + cmakeFlags = [ + "-DUSE_SHARED_MBEDTLS_LIBRARY=${if stdenv.hostPlatform.isStatic then "off" else "on"}" + + # Avoid a dependency on jsonschema and jinja2 by not generating source code + # using python. In releases, these generated files are already present in + # the repository and do not need to be regenerated. See: + # https://github.com/Mbed-TLS/mbedtls/releases/tag/v3.3.0 below "Requirement changes". + "-DGEN_FILES=off" + ]; + + meta = with lib; { + homepage = "https://www.trustedfirmware.org/projects/mbed-tls/"; + changelog = "https://github.com/Mbed-TLS/mbedtls/blob/${pname}-${version}/ChangeLog"; + description = "Portable cryptographic and TLS library, formerly known as PolarSSL"; + license = licenses.asl20; + platforms = platforms.all; + maintainers = with maintainers; [ raphaelr ]; + }; +} |