anchor.diff:  # This will cause c_rehash to refer to perl via the environment, but otherwise
   # will produce a perfectly functional openssl binary and library.
   , withPerl ? stdenv.hostPlatform == stdenv.buildPlatform
  +, removeReferencesTo
   }:
   
   stdenv.mkDerivation rec {
  
positive.code:     !(stdenv.hostPlatform.useLLVM or false) &&
      stdenv.cc.isGNU;
  
    nativeBuildInputs = [ perl ];
    buildInputs = lib.optional withCryptodev cryptodev
      # perl is included to allow the interpreter path fixup hook to set the
      # correct interpreter in c_rehash.
  
negative.code:     # OpenSSL needs a specific `no-shared` configure flag.
      # See https://wiki.openssl.org/index.php/Compilation_and_Installation#Configure_Options
      # for a comprehensive list of configuration options.
      ++ lib.optional static "no-shared"
      # This introduces a reference to the CTLOG_FILE which is undesired when
      # trying to build binaries statically.
      ++ lib.optional static "no-ct"
      ;
  
    makeFlags = [
      "MANDIR=$(man)/share/man"
  