anchor.diff:      src = pkgs.fetchFromGitHub {
         name = "${name}-src";
         inherit rev owner repo;
  -      sha256 = "170m5cjngbrm36wi7wschqw8jzs7kxpcyzmshq3pcrmcpigrhna1";
  +      sha256 = "09kszswrifm9rc6idfaq0p1mz5w21as2qbc8gd5pphrq9cf9pn55";
       };
   
       postPatch = ''
  
positive.code:   boulder = let
      owner = "letsencrypt";
      repo = "boulder";
      rev = "9866abab8962a591f06db457a4b84c518cc88243";
      version = "20170510";
  
    in pkgs.buildGoPackage rec {
      name = "${repo}-${version}";
  
negative.code:       cat "${snakeOilCa}/ca.key" > test/test-ca.key
        cat "${snakeOilCa}/ca.pem" > test/test-ca.pem
      '';
  
      # Until vendored pkcs11 is go 1.9 compatible
      preBuild = ''
        rm -r go/src/github.com/letsencrypt/boulder/vendor/github.com/miekg/pkcs11
      '';
  
      extraSrcs = map mkGoDep [
        { goPackagePath = "github.com/miekg/pkcs11";
          rev           = "6dbd569b952ec150d1425722dbbe80f2c6193f83";
          sha256        = "1m8g6fx7df6hf6q6zsbyw1icjmm52dmsx28rgb0h930wagvngfwb";
        }
      ];
  
      goPackagePath = "github.com/${owner}/${repo}";
      buildInputs = [ pkgs.libtool ];
  