wolfssl: add enableJni option (#504831)

This commit is contained in:
Jonas Heinrich 2026-04-05 14:11:06 +02:00 committed by GitHub
commit 45bfe32ffb
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 13 additions and 13 deletions

View file

@ -65,19 +65,7 @@ stdenv.mkDerivation (finalAttrs: {
libpng
lz4
openssl
(wolfssl.overrideAttrs (oldAttrs: {
configureFlags = oldAttrs.configureFlags ++ [
"--enable-jni"
];
# Disable failing tests when jni enabled
postPatch = oldAttrs.postPatch or "" + ''
sed -i '/TEST_DECL(test_wolfSSL_Tls13_ECH)/d;
/TEST_DECL(test_wolfSSL_Tls13_ECH_HRR)/d;
/TEST_DECL(test_TLSX_CA_NAMES_bad_extension)/d' tests/api.c
sed -i '/quic/d' tests/include.am
sed -i '300,305d' tests/unit.c
'';
}))
(wolfssl.override { enableJni = true; })
xz
zlib
];

View file

@ -10,6 +10,7 @@
# requiring to build a special variant for that software. Example: 'haproxy'
variant ? "all",
extraConfigureFlags ? [ ],
enableJni ? false,
enableARMCryptoExtensions ?
stdenv.hostPlatform.isAarch64
&& ((builtins.match "^.*\\+crypto.*$" stdenv.hostPlatform.gcc.arch) != null),
@ -31,6 +32,14 @@ stdenv.mkDerivation (finalAttrs: {
# ensure test detects musl-based systems too
substituteInPlace scripts/ocsp-stapling2.test \
--replace '"linux-gnu"' '"linux-"'
''
+ lib.optionalString enableJni ''
# Some tests fail when JNI is enabled
sed -i '/TEST_DECL(test_wolfSSL_Tls13_ECH)/d;
/TEST_DECL(test_wolfSSL_Tls13_ECH_HRR)/d;
/TEST_DECL(test_TLSX_CA_NAMES_bad_extension)/d' tests/api.c
sed -i '/quic/d' tests/include.am
sed -i '/WOLFSSL_QUIC/,/#endif/d' tests/unit.c
'';
configureFlags = [
@ -65,6 +74,9 @@ stdenv.mkDerivation (finalAttrs: {
# No runtime detection under ARM and no platform function checks like for X86.
(if enableARMCryptoExtensions then "--enable-armasm=inline" else "--disable-armasm")
]
++ lib.optionals enableJni [
"--enable-jni"
]
++ extraConfigureFlags;
# Breaks tls13 tests on aarch64-darwin.