nomicon/pkgs/tools/networking/acme-client/default.nix

{ lib, stdenv
, fetchurl
, libbsd
, libressl
, pkg-config
}:

with lib;

stdenv.mkDerivation rec {
  pname = "acme-client";
  version = "1.2.0";

  src = fetchurl {
    url = "https://data.wolfsden.cz/sources/acme-client-${version}.tar.xz";
    sha256 = "sha256-fRSYwQmyV0WapjUJNG0UGO/tUDNTGUraj/BWq/a1QTo=";
  };

  nativeBuildInputs = [ pkg-config ];
  buildInputs = [ libbsd libressl ];

  makeFlags = [ "PREFIX=${placeholder "out"}" ];

  meta = {
    homepage = "https://sr.ht/~graywolf/acme-client-portable/";
    description = "Secure ACME/Let's Encrypt client";
    platforms = platforms.unix;
    license = licenses.isc;
    maintainers = with maintainers; [ pmahoney ];
  };
}
pkgs/tools: stdenv.lib -> lib 4 years ago			`{ lib, stdenv`
acme-client: use source tarball to avoid autoreconf This was suggested by the upstream maintainer [1], and it is a nice simplification. Also change the url to sr.ht as the project has moved there. [1]: https://github.com/NixOS/nixpkgs/pull/88201#issuecomment-633260151 4 years ago			`, fetchurl`
acme-client: init at 0.1.6 7 years ago			`, libbsd`
			`, libressl`
pkgs/tools: pkgconfig -> pkg-config 3 years ago			`, pkg-config`
acme-client: init at 0.1.6 7 years ago			`}:`

pkgs/tools: stdenv.lib -> lib 4 years ago			`with lib;`
acme-client: init at 0.1.6 7 years ago
			`stdenv.mkDerivation rec {`
treewide: name -> pname (easy cases) (#66585) treewide replacement of stdenv.mkDerivation rec { name = "-${version}"; version = ""; to pname 5 years ago			`pname = "acme-client";`
acme-client: 1.1.0 -> 1.2.0 3 years ago			`version = "1.2.0";`
acme-client: init at 0.1.6 7 years ago
acme-client: use source tarball to avoid autoreconf This was suggested by the upstream maintainer [1], and it is a nice simplification. Also change the url to sr.ht as the project has moved there. [1]: https://github.com/NixOS/nixpkgs/pull/88201#issuecomment-633260151 4 years ago			`src = fetchurl {`
			`url = "https://data.wolfsden.cz/sources/acme-client-${version}.tar.xz";`
acme-client: 1.1.0 -> 1.2.0 3 years ago			`sha256 = "sha256-fRSYwQmyV0WapjUJNG0UGO/tUDNTGUraj/BWq/a1QTo=";`
acme-client: init at 0.1.6 7 years ago			`};`

pkgs/tools: pkgconfig -> pkg-config 3 years ago			`nativeBuildInputs = [ pkg-config ];`
fix tarball job evaluation for aarch64-darwin 3 years ago			`buildInputs = [ libbsd libressl ];`
acme-client: init at 0.1.6 7 years ago
acme-client: 0.1.16 -> 0.2.4 * acme-client: 0.1.16 -> 0.2.3 (#71853) The upstream acme-client that used to be at [1] has now been integrated into OpenBSD, and the portable version that it links to at [2] is marked as unmaintained. However, letsencrypt.org links to [3] for a portable version, and indeed, that repository contains a version that has recent activity, so I switched over to that. It is hard to tell what the difference is between the OpenBSD version and what is on Github, and even if that would be easy, there are a lot of Linux-specific changes. This program is dealing with certificates, so I feel it is important to at least check that thare are no obviously unintended differences between the previous version and the new, but I don't know of a good way of doing that at this point. I will continue to investigate before I open a pull request. [1]: https://kristaps.bsd.lv/acme-client/ [2]: https://github.com/kristapsdz/acme-client-portable [3]: https://github.com/graywolf/acme-client-portable * acme-client: fix Linux build of new upstream The new source does not include a configure script in the repository, but we can generate it with automake. Also, the new acme-client-portable has an OpenSSL compatibility layer, but that actually breaks building against LibreSSL. Avoid this issue by patching the compatibility layer to be less eager to define things when linking against LibreSSL. I will also submit a pull request for that upstream. I don't expect this to work on Darwin, and the current package suggests it does, but if the upstream (portable) version is no longer maintained, for Darwin, perhaps we should just drop support for it. But maybe it will just work, CI or somebody with a Darwin system will have to try. * acme-client: 0.2.3 -> 0.2.4 My LibreSSL compatibility patch has been merged upstream into acme-client-portable, and version 0.2.4 that includes it has been released, so we can remove the patch here. * acme-client: address review feedback * Replace the manual autoreconf invocation with autoreconfHook. * Remove DEFAULT_CA_FILE, which no longer affects the build. 5 years ago			`makeFlags = [ "PREFIX=${placeholder "out"}" ];`
acme-client: init at 0.1.6 7 years ago
			`meta = {`
acme-client: use source tarball to avoid autoreconf This was suggested by the upstream maintainer [1], and it is a nice simplification. Also change the url to sr.ht as the project has moved there. [1]: https://github.com/NixOS/nixpkgs/pull/88201#issuecomment-633260151 4 years ago			`homepage = "https://sr.ht/~graywolf/acme-client-portable/";`
acme-client: init at 0.1.6 7 years ago			`description = "Secure ACME/Let's Encrypt client";`
			`platforms = platforms.unix;`
			`license = licenses.isc;`
			`maintainers = with maintainers; [ pmahoney ];`
			`};`
			`}`