All the things#

Tue, 08 Dec 2020 23:08:44 +0000

I was going to write about how I patched openssl on all my machines with a five line fix and the minimum of fuss, but it turns out that I spent all evening fighting letsencrypt instead. I think it is mostly correct now.

I have to add: I had not fully realised when i set out on this that my simple overlay

    patchesOverlay = self: super: {
      openssl = super.openssl.overrideAttrs(o: {
        patches = o.patches ++ [ (builtins.fetchurl "https://github.com/openssl/openssl/commit/f960d81215ebf3f65e03d4d5d857fb9b666d6920.patch") ];
      });
    };

would necessitate rebuilding ... probably the entire distro. Maybe I'll just wait for https://github.com/NixOS/nixpkgs/pull/106362 to land instead.

https://news.ycombinator.com/item?id=25346133 has more info on the severity