anchor.diff: -{ stdenv, fetchurl, lib, cmake, cacert }:
  +{ stdenv, fetchurl, lib, cmake, cacert, fetchpatch }:
   
   let
   
  -  generic = { version, sha256 }: stdenv.mkDerivation rec {
  +  generic = { version, sha256, patches ? [] }: stdenv.mkDerivation rec {
       pname = "libressl";
       inherit version;
   
  
positive.code:     preConfigure = ''
        rm configure
      '';
  
      # Since 2.9.x the default location can't be configured from the build using
      # DEFAULT_CA_FILE anymore, instead we have to patch the default value.
  
negative.code:   libressl_2_9 = generic {
      version = "2.9.2";
      sha256 = "1m6mz515dcbrbnyz8hrpdfjzdmj1c15vbgnqxdxb89g3z9kq3iy4";
      patches = stdenv.lib.optional stdenv.hostPlatform.isMusl [
        (fetchpatch {
          url = "https://github.com/libressl-portable/portable/pull/529/commits/a747aacc23607c993cc481378782b2c7dd5bc53b.patch";
          sha256 = "0wbrcscdkjpk4mhh7f3saghi4smia4lhf7fl6la3ahhgx1krn5zm";
        })
      ];
    };
  
    libressl_3_0 = generic {
  