[bug#62878] [PATCH core-updates] gnu: openhsm: Fix test failure with openssl-3.

[Timotej Lazar]

Hi, thanks for the fast review!

Andreas Enge <andreas@enge.fr> [2023-04-17 11:18:16+0200]:
> That the package itself has a wrong homepage (maybe we could
> switch to https://www.opendnssec.org/softhsm/ at the same occasion?)

Not exactly sure what you mean, the package already uses that URL for
the homepage. The www.softhsm.org domain is just a CNAME for
www.opendnssec.org.

> last commit on https://github.com/opendnssec/SoftHSMv2 about a year
> ago, last release three years ago

That is true, and apparently there are no immediate plans for a new
release¹. On the other hand, most major distros have it packaged, and
looking at the issues/PRs the project still appears somewhat active.

¹ https://github.com/opendnssec/SoftHSMv2/issues/575#issuecomment-1101183308

> But as I understand it, it is more of educational use than to provide
> actual security?

I think the only use of this package in Guix proper is allowing some
tests for sssd to run. I use sssd, but would be OK with dropping softhsm
and skipping some of those tests.

> Could you add a pointer to the source of the patch (at the top of the file,
> for instance)? I did not find it in the Debian package.

I took the patch off a mailing list. It turns out that the final version
used by the Debian package is slightly different. I updated my patch to
use that version and added a link to the source:

https://sources.debian.org/patches/softhsm2/2.6.1-2.1/0003-fix-ftbfs-with-opensslv3.patch/

> And maybe add a copyright line for yourself.

Done.