branch master updated: gnu: openssl: Update to 1.1.1m [security fixes].

[guix-commits]

This is an automated email from the git hooks/post-receive script.

efraim pushed a commit to branch master
in repository guix.

The following commit(s) were added to refs/heads/master by this push:
     new 1402c6abe1 gnu: openssl: Update to 1.1.1m [security fixes].
1402c6abe1 is described below

commit 1402c6abe150ced4cbb4fa0721fe7c8796fe2c38
Author: Efraim Flashner <efraim@flashner.co.il>
AuthorDate: Wed Jan 26 11:46:31 2022 +0200

    gnu: openssl: Update to 1.1.1m [security fixes].
    
    * gnu/packages/tls.scm (openssl/fixed): New variable.
    (openssl)[replacement]: New field.
---
 gnu/packages/tls.scm | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/gnu/packages/tls.scm b/gnu/packages/tls.scm
index b0950ec2e5..d5b42c58a0 100644
--- a/gnu/packages/tls.scm
+++ b/gnu/packages/tls.scm
@@ -383,6 +383,7 @@ OpenSSL for TARGET."
   (package
     (name "openssl")
     (version "1.1.1l")
+    (replacement openssl/fixed)
     (source (origin
               (method url-fetch)
               (uri (list (string-append 
"https://www.openssl.org/source/openssl-";
@@ -508,6 +509,25 @@ OpenSSL for TARGET."
     (license license:openssl)
     (home-page "https://www.openssl.org/";)))
 
+(define openssl/fixed
+  (package
+    (inherit openssl)
+    (name "openssl")
+    (version "1.1.1m")
+    (source (origin
+              (method url-fetch)
+              (uri (list (string-append 
"https://www.openssl.org/source/openssl-";
+                                        version ".tar.gz")
+                         (string-append "ftp://ftp.openssl.org/source/";
+                                        "openssl-" version ".tar.gz")
+                         (string-append "ftp://ftp.openssl.org/source/old/";
+                                        (string-trim-right version 
char-set:letter)
+                                        "/openssl-" version ".tar.gz")))
+              (patches (search-patches "openssl-1.1-c-rehash-in.patch"))
+              (sha256
+               (base32
+                "15kcvdi69jka67sk1l3a50c26cb7xv9xiwdrgky4bji3ifz9k4gq"))))))
+
 ;; We will not add any new uses of this package. If you add new code that uses
 ;; this package, your change will be reverted!
 ;;