Disable build flag for openssl102 nix aarch64-linux (#4045)

aws · Jun 21, 2023 · 6592bba · 6592bba
1 parent b96117f
commit 6592bba
Showing 1 changed file with 22 additions and 3 deletions.
diff --git a/nix/openssl_1_0_2.nix b/nix/openssl_1_0_2.nix
@@ -11,9 +11,28 @@ pkgs.stdenv.mkDerivation rec {
 
   buildInputs = [ pkgs.gnumake pkgs.perl534 ];
 
-  configurePhase = ''
-    ./config -d shared -g3 -fPIC no-libunbound no-gmp no-jpake no-krb5 no-md2 no-rc5 no-rfc3779 no-sctp no-ssl-trace no-store no-zlib no-hw no-mdc2 no-seed no-idea enable-ec_nistp_64_gcc_128 no-camellia no-bf no-ripemd no-dsa no-ssl2 no-capieng -DSSL_FORBID_ENULL -DOPENSSL_NO_DTLS1 -DOPENSSL_NO_HEARTBEATS --prefix=$out
-  '';
+  configurePhase = let
+    default_options =
+      "shared -g3 -fPIC no-libunbound no-gmp no-jpake no-krb5 no-md2 no-rc5 no-rfc3779 no-sctp no-ssl-trace no-store no-zlib no-hw no-mdc2 no-seed no-idea enable-ec_nistp_64_gcc_128 no-camellia no-bf no-ripemd no-dsa no-ssl2 no-capieng -DSSL_FORBID_ENULL -DOPENSSL_NO_DTLS1 -DOPENSSL_NO_HEARTBEATS --prefix=$out";
+  in {
+    x86_64-linux = ''
+      ./config -d ${default_options}
+    '';
+    # The Openssl102 Configure script appears to have a bug and won't recognize
+    # aarch64 as a supported platform when passed the '-d' flag.
+    # See the PR for more detail: https://github.com/aws/s2n-tls/pull/4045 
+    aarch64-linux = ''
+      ./config ${default_options}
+    '';
+    x86_64-darwin = ''
+      # TODO: validation in future PR - nix checks fail without a definition.
+      ./config -d ${default_options}
+    '';
+    aarch64-darwin = ''
+      # TODO: validation in future PR - nix checks fail without a definition.
+      ./config ${default_options}
+    '';
+  }.${pkgs.stdenv.hostPlatform.system};
 
   buildPhase = ''
     make depend -j $(nproc)