summary refs log tree commit diff
path: root/pkgs/tools/networking/openssh/default.nix
diff options
context:
space:
mode:
authoredef <edef@edef.eu>2019-06-20 17:15:33 +0000
committeredef <edef@edef.eu>2019-10-19 12:13:36 +0000
commit9bfec806dfcc0f0ae43f17ab5a139c5a45aaf5e0 (patch)
tree10be2363d75bb15b4138ef0080a4786fb2a54c59 /pkgs/tools/networking/openssh/default.nix
parente6d641d957c8bc63c470d08ca43f111377a8693e (diff)
openssh: don't let configure override SSH_KEYSIGN
While 9fe10288f01984963faf47e21bf1bae4d7d37962 ensured that the
ssh-keysign path is searched for in PATH if not absolute,
it doesn't prevent the configure script from defaulting to an
absolute path in $out/libexec, making the whole effort rather
pointless.
Diffstat (limited to 'pkgs/tools/networking/openssh/default.nix')
-rw-r--r--pkgs/tools/networking/openssh/default.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/pkgs/tools/networking/openssh/default.nix b/pkgs/tools/networking/openssh/default.nix
index d592d6da8f2be..2a1122029c12c 100644
--- a/pkgs/tools/networking/openssh/default.nix
+++ b/pkgs/tools/networking/openssh/default.nix
@@ -88,6 +88,8 @@ stdenv.mkDerivation rec {
     ++ optional stdenv.isDarwin "--disable-libutil"
     ++ optional (!linkOpenssl) "--without-openssl";
 
+  buildFlags = [ "SSH_KEYSIGN=ssh-keysign" ];
+
   enableParallelBuilding = true;
 
   hardeningEnable = [ "pie" ];