From 364f112fdc593a962e003d53aad08c037ee964b4 Mon Sep 17 00:00:00 2001
From: Leona Maroni <dev@leona.is>
Date: Sun, 27 Sep 2026 14:24:16 +0200
Subject: [PATCH] nginxMainline: use openssl_4 to support ECH

ECH is only supported in OpenSSL >=4.0,
https://openssl-library.org/post/2026-03-11-ech/index.html

We already use openssl_4 for nginxStable

(cherry picked from commit 8564b7572ed6c824eb53d086198eefe626be8f14)
---
 pkgs/top-level/all-packages.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index b322bf029b99..c42f7a5fe3a4 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -7840,6 +7840,7 @@ with pkgs;
   };
 
   nginxMainline = callPackage ../servers/http/nginx/mainline.nix {
+    openssl = openssl_4_0;
     zlib-ng = zlib-ng.override { withZlibCompat = true; };
     withKTLS = true;
     withPerl = false;