From 9e9dd22825f2c5058ed52889488563f3615bf49f Mon Sep 17 00:00:00 2001
From: "Braian A. Diez" <bdiez19@gmail.com>
Date: Tue, 14 Oct 2025 15:05:56 -0300
Subject: [PATCH] evil-winrm: add support for ssl legacy provider

---
 pkgs/by-name/ev/evil-winrm/package.nix | 22 ++++++++++++++++++++++
 1 file changed, 22 insertions(+)

diff --git a/pkgs/by-name/ev/evil-winrm/package.nix b/pkgs/by-name/ev/evil-winrm/package.nix
index 681f38d8bae7..aa0c97c89253 100644
--- a/pkgs/by-name/ev/evil-winrm/package.nix
+++ b/pkgs/by-name/ev/evil-winrm/package.nix
@@ -5,6 +5,8 @@
   makeWrapper,
   bundlerEnv,
   bundlerUpdateScript,
+  writeText,
+  sslLegacyProvider ? false,
 }:
 let
   rubyEnv = bundlerEnv {
@@ -13,6 +15,22 @@ let
     lockfile = ./Gemfile.lock;
     gemset = ./gemset.nix;
   };
+  openssl_conf = writeText "openssl.conf" ''
+    openssl_conf = openssl_init
+
+    [openssl_init]
+    providers = provider_sect
+
+    [provider_sect]
+    default = default_sect
+    legacy = legacy_sect
+
+    [default_sect]
+    activate = 1
+
+    [legacy_sect]
+    activate = 1
+  '';
 in
 stdenv.mkDerivation rec {
   pname = "evil-winrm";
@@ -38,6 +56,10 @@ stdenv.mkDerivation rec {
     cp evil-winrm.rb $out/bin/evil-winrm
   '';
 
+  postFixup = lib.optionalString sslLegacyProvider ''
+    wrapProgram $out/bin/evil-winrm --prefix OPENSSL_CONF : "${openssl_conf}"
+  '';
+
   passthru.updateScript = bundlerUpdateScript "evil-winrm";
 
   meta = {