From 0714665a367c4ef1f855d6c47cb81afd9babd925 Mon Sep 17 00:00:00 2001 From: "git@71rd.net" Date: Wed, 24 Sep 2025 20:14:46 +0000 Subject: [PATCH] softhsm: switch backend to openssl Switching softhsm to use OpenSSL instead of botan2 for cryptography. Botan2 has been end-of-life since January 2025 and can not be built with gcc-15, and softhsm does not support botan3. --- pkgs/by-name/so/softhsm/package.nix | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/pkgs/by-name/so/softhsm/package.nix b/pkgs/by-name/so/softhsm/package.nix index 9a7d3746d7cf..77a2e6a56f07 100644 --- a/pkgs/by-name/so/softhsm/package.nix +++ b/pkgs/by-name/so/softhsm/package.nix @@ -2,7 +2,7 @@ lib, stdenv, fetchFromGitHub, - botan2, + openssl, sqlite, autoreconfHook, }: @@ -24,8 +24,8 @@ stdenv.mkDerivation rec { ]; configureFlags = [ - "--with-crypto-backend=botan" - "--with-botan=${lib.getDev botan2}" + "--with-crypto-backend=openssl" + "--with-openssl=${lib.getDev openssl}" "--with-objectstore-backend-db" "--sysconfdir=$out/etc" "--localstatedir=$out/var" @@ -35,7 +35,7 @@ stdenv.mkDerivation rec { ]; buildInputs = [ - botan2 + openssl sqlite ];