branch master updated: gnu: openssl: Update to 1.1.1j [security fixes].

[guix-commits]

This is an automated email from the git hooks/post-receive script.

lle_bout pushed a commit to branch master
in repository guix.

The following commit(s) were added to refs/heads/master by this push:
     new 4a8b529  gnu: openssl: Update to 1.1.1j [security fixes].
4a8b529 is described below

commit 4a8b529ce15ddc69a9dd701e450fc85a0ed65910
Author: Léo Le Bouter <lle-bout@zaclys.net>
AuthorDate: Thu Mar 11 05:38:57 2021 +0100

    gnu: openssl: Update to 1.1.1j [security fixes].
    
    * gnu/packages/tls.scm (openssl/fixed): New variable.
    (openssl)[replacement]: Graft.
---
 gnu/packages/tls.scm | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/gnu/packages/tls.scm b/gnu/packages/tls.scm
index c6228f7..acabca5 100644
--- a/gnu/packages/tls.scm
+++ b/gnu/packages/tls.scm
@@ -301,6 +301,7 @@ required structures.")
              (sha256
               (base32
                "0hjj1phcwkz69lx1lrvr9grhpl4y529mwqycqc1hdla1zqsnmgp8"))))
+   (replacement openssl/fixed)
    (build-system gnu-build-system)
    (outputs '("out"
               "doc"         ;6.8 MiB of man3 pages and full HTML documentation
@@ -419,6 +420,24 @@ required structures.")
    (license license:openssl)
    (home-page "https://www.openssl.org/";)))
 
+(define-public openssl/fixed
+  (package
+   (inherit openssl)
+   (version "1.1.1j")
+   (source (origin
+             (method url-fetch)
+             (uri (list (string-append 
"https://www.openssl.org/source/openssl-";
+                                       version ".tar.gz")
+                        (string-append "ftp://ftp.openssl.org/source/";
+                                       "openssl-" version ".tar.gz")
+                        (string-append "ftp://ftp.openssl.org/source/old/";
+                                       (string-trim-right version 
char-set:letter)
+                                       "/openssl-" version ".tar.gz")))
+             (patches (search-patches "openssl-1.1-c-rehash-in.patch"))
+             (sha256
+              (base32
+               "1gw17520vh13izy1xf5q0a2fqgcayymjjj5bk0dlkxndfnszrwma"))))))
+
 (define-public openssl-1.0
   (package
     (inherit openssl)