nixpkgs/pkgs/tools/networking/openntpd/default.nix
Ricardo M. Correia f7616c4f5e openntpd: fix constraints feature on NixOS
The OpenNTPD constraints feature requires a valid chain of SSL
certificates, but the default path in openntpd didn't match the one in
NixOS.

Unfortunately the configured certificate path becomes hardcoded into the
binary, so this feature will likely still fail on other
distributions/operating systems, unless the path coincides with the
NixOS path or the user sets up a symlink.
2017-10-30 18:42:02 +01:00

38 lines
886 B
Nix

{ stdenv, fetchurl, libressl
, privsepPath ? "/var/empty"
, privsepUser ? "ntp"
}:
stdenv.mkDerivation rec {
name = "openntpd-${version}";
version = "6.2p1";
src = fetchurl {
url = "mirror://openbsd/OpenNTPD/${name}.tar.gz";
sha256 = "1g6hi03ylhv47sbar3xxgsrar8schqfwn4glckh6m6lni67ndq85";
};
configureFlags = [
"--with-privsep-path=${privsepPath}"
"--with-privsep-user=${privsepUser}"
"--sysconfdir=/etc"
"--localstatedir=/var"
"--with-cacert=/etc/ssl/certs/ca-certificates.crt"
];
buildInputs = [ libressl ];
installFlags = [
"sysconfdir=\${out}/etc"
"localstatedir=\${TMPDIR}"
];
meta = with stdenv.lib; {
homepage = http://www.openntpd.org/;
license = licenses.bsd3;
description = "OpenBSD NTP daemon (Debian port)";
platforms = platforms.all;
maintainers = with maintainers; [ wkennington ];
};
}