mirror of
https://github.com/NixOS/nixpkgs.git
synced 2026-08-27 02:34:53 +00:00
configure.ac probes for the openssl CLI:
AC_CHECK_PROG([OPENSSL_CLITOOL], [openssl], [yes], [no])
AS_IF([test "$OPENSSL_CLITOOL" != "yes"],
[AC_MSG_ERROR("Could not find openssl tool. Is openssl installed?")])
swtpm gained this check when it switched its local CA from the gnutls
certtool to the openssl CLI in 0.10.1-unstable-2026-05-21.
openssl is currently only in buildInputs, for the library. Natively that
happens to satisfy the probe as well, since build == host means the
buildInputs bin dirs land on PATH anyway, but when cross-compiling they go
to HOST_PATH instead and configure aborts:
configure: error: "Could not find openssl tool. Is openssl installed?"
Add openssl to nativeBuildInputs so the build-platform CLI is on PATH. The
probe is only a presence test -- the path baked into swtpm_localca is
already substituted to the host openssl via lib.getExe -- so this does not
change what the built package runs.
Tested with `nix build -f . pkgsCross.aarch64-multiplatform.swtpm`, which
fails on master and succeeds with this change.
Signed-off-by: Brian McGillion <bmg.avoin@gmail.com>