From b06090553736cda99455c586ddf9e4f4a19cbbfb Mon Sep 17 00:00:00 2001
From: sternenseemann <sternenseemann@systemli.org>
Date: Sun, 8 Feb 2026 11:02:56 +0100
Subject: [PATCH] haskellPackages.x509-ocsp: pin to < 0.4.1 to match
 crypton-x509

---
 .../configuration-hackage2nix/main.yaml       |  2 +
 .../haskell-modules/hackage-packages.nix      | 43 +++++++++++++++++++
 2 files changed, 45 insertions(+)

diff --git a/pkgs/development/haskell-modules/configuration-hackage2nix/main.yaml b/pkgs/development/haskell-modules/configuration-hackage2nix/main.yaml
index 07fa5c117ed5..1d1d63abd4b6 100644
--- a/pkgs/development/haskell-modules/configuration-hackage2nix/main.yaml
+++ b/pkgs/development/haskell-modules/configuration-hackage2nix/main.yaml
@@ -51,6 +51,8 @@ default-package-overrides:
   - pandoc-crossref == 0.3.21
   # 2025-12-19: Needs to match Stackage version of rhine
   - rhine-bayes < 1.6
+  # 2026-02-08: compatibility with crypton-x509* in Stackage LTS 24
+  - x509-ocsp < 0.4.1.0
 # keep-sorted end
 
 # keep-sorted start skip_lines=1 case=no numeric=yes
diff --git a/pkgs/development/haskell-modules/hackage-packages.nix b/pkgs/development/haskell-modules/hackage-packages.nix
index 1d1b1166d26b..07e7977f7175 100644
--- a/pkgs/development/haskell-modules/hackage-packages.nix
+++ b/pkgs/development/haskell-modules/hackage-packages.nix
@@ -747849,6 +747849,48 @@ self: {
   ) { };
 
   x509-ocsp = callPackage (
+    {
+      mkDerivation,
+      asn1-encoding,
+      asn1-types,
+      base,
+      bytestring,
+      cryptohash-sha1,
+      crypton-x509,
+      crypton-x509-validation,
+      HUnit,
+      pem,
+    }:
+    mkDerivation {
+      pname = "x509-ocsp";
+      version = "0.4.0.1";
+      sha256 = "0pq1xxa5wl5gprkxjc31112mi9s8q4i5anr698hssziaglh4h13r";
+      enableSeparateDataOutput = true;
+      libraryHaskellDepends = [
+        asn1-encoding
+        asn1-types
+        base
+        bytestring
+        cryptohash-sha1
+        crypton-x509
+        crypton-x509-validation
+      ];
+      testHaskellDepends = [
+        asn1-encoding
+        asn1-types
+        base
+        bytestring
+        crypton-x509
+        crypton-x509-validation
+        HUnit
+        pem
+      ];
+      description = "Basic X509 OCSP implementation";
+      license = lib.licensesSpdx."BSD-3-Clause";
+    }
+  ) { };
+
+  x509-ocsp_0_4_1_0 = callPackage (
     {
       mkDerivation,
       base,
@@ -747887,6 +747929,7 @@ self: {
       ];
       description = "Basic X509 OCSP implementation";
       license = lib.licensesSpdx."BSD-3-Clause";
+      hydraPlatforms = lib.platforms.none;
     }
   ) { };