certigo: patch tests and enable checks on Darwin

Worked with the upstream project to get the test updated for modern
macOS and emulated/virtualized hardware.

Bring in unit test fixes in two patches from upstream trunk and
re-enable tests on Darwin.
This commit is contained in:
Berk D. Demir 2022-06-06 16:58:27 -07:00
parent 9a8ae4d72e
commit 5970407d19

View file

@ -1,4 +1,4 @@
{ lib, stdenv, buildGoModule, fetchFromGitHub }:
{ lib, stdenv, buildGoModule, fetchFromGitHub, fetchpatch }:
buildGoModule rec {
pname = "certigo";
@ -11,12 +11,21 @@ buildGoModule rec {
sha256 = "sha256-XGR6xIXdFLnJTFd+mJneRb/WkLmi0Jscta9Bj3paM1M=";
};
vendorSha256 = "sha256-qS/tIi6umSuQcl43SI4LyL0k5eWfRWs7kVybRPGKcbs=";
patches = [
(fetchpatch {
name = "backport_TestConnect-Apple-Fixes.patch";
url = "https://github.com/square/certigo/commit/5332ac7ca20bdea63657cc8319e8b8fda4326938.patch";
sha256 = "sha256-mSNuiui2dxkXnCrXJ/asIzC8F1mtPecOVOIu6mE5jq4=";
})
# Go running under Hydra Darwin x86_64 picks CHAPOLY instead of AES-GCM as
# the default TLS ciphersuite, and breaks the arguably flakey `TestConnect`
# test.
doCheck = !(stdenv.isDarwin && stdenv.isx86_64);
(fetchpatch {
name = "backport_TestConnect-Expected-CipherSuite-Fixes.patch";
url = "https://github.com/square/certigo/commit/7ef0417bde4aafc69cbb72f0dd6d3577a56054a1.patch";
sha256 = "sha256-TUQ8B23HKheaPUjj4NkvjmZBAAhDNTyo2c8jf4qukds=";
})
];
vendorSha256 = "sha256-qS/tIi6umSuQcl43SI4LyL0k5eWfRWs7kVybRPGKcbs=";
meta = with lib; {
description = "A utility to examine and validate certificates in a variety of formats";