blob: e87a133eb2a1003e8bc8d713407a9817fca7e1d1 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
|
{ lib
, stdenv
, version
, hash
, patches ? []
, fetchFromGitHub
, cmake
, ninja
, perl # Project uses Perl for scripting and testing
, python3
, enableThreading ? true # Threading can be disabled to increase security https://tls.mbed.org/kb/development/thread-safety-and-multi-threading
}:
stdenv.mkDerivation rec {
pname = "mbedtls";
inherit version;
src = fetchFromGitHub {
owner = "Mbed-TLS";
repo = "mbedtls";
rev = "${pname}-${version}";
inherit hash;
# mbedtls >= 3.6.0 uses git submodules
fetchSubmodules = true;
};
inherit patches;
nativeBuildInputs = [ cmake ninja perl python3 ];
strictDeps = true;
postConfigure = lib.optionalString enableThreading ''
perl scripts/config.pl set MBEDTLS_THREADING_C # Threading abstraction layer
perl scripts/config.pl set MBEDTLS_THREADING_PTHREAD # POSIX thread wrapper layer for the threading layer.
'';
cmakeFlags = [
"-DUSE_SHARED_MBEDTLS_LIBRARY=${if stdenv.hostPlatform.isStatic then "off" else "on"}"
# Avoid a dependency on jsonschema and jinja2 by not generating source code
# using python. In releases, these generated files are already present in
# the repository and do not need to be regenerated. See:
# https://github.com/Mbed-TLS/mbedtls/releases/tag/v3.3.0 below "Requirement changes".
"-DGEN_FILES=off"
];
doCheck = true;
# Parallel checking causes test failures
# https://github.com/Mbed-TLS/mbedtls/issues/4980
enableParallelChecking = false;
meta = with lib; {
homepage = "https://www.trustedfirmware.org/projects/mbed-tls/";
changelog = "https://github.com/Mbed-TLS/mbedtls/blob/${pname}-${version}/ChangeLog";
description = "Portable cryptographic and TLS library, formerly known as PolarSSL";
license = [ licenses.asl20 /* or */ licenses.gpl2Plus ];
platforms = platforms.all;
maintainers = with maintainers; [ raphaelr ];
};
}
|