anchor.diff: -{ lib, stdenv, fetchFromGitHub, cmake, openssl }:
  +{ lib, stdenv
  +, fetchFromGitHub
  +, fetchpatch
  +, cmake
  +, openssl
  +}:
   
   stdenv.mkDerivation rec {
     pname = "s2n-tls";
  
positive.code:   propagatedBuildInputs = [ openssl ]; # s2n-config has find_dependency(LibCrypto).
  
    postInstall = ''
      substituteInPlace $out/lib/s2n/cmake/shared/s2n-targets.cmake \
        --replace 'INTERFACE_INCLUDE_DIRECTORIES "''${_IMPORT_PREFIX}/include"' 'INTERFACE_INCLUDE_DIRECTORIES ""'
    '';
  
    meta = with lib; {
  
negative.code:     rev = "v${version}";
      sha256 = "sha256-6XqBpNURU8fzGkTt4jsijgMiOkzMebmLmPAq8yQsTg4=";
    };
  
    patches = [
      # Fix FindLibCrypto paths (https://github.com/aws/s2n-tls/pull/3067)
      (fetchpatch {
        url = "https://github.com/aws/s2n-tls/commit/bda649524402be4018c44bff07f6c64502a351ec.patch";
        sha256 = "02jmxsrd506vhjzlrgh1p2z1f1sn4v8klks25zisiykyqkyaczkv";
      })
    ];
  
    nativeBuildInputs = [ cmake ];
  
  