anchor.diff:  
       postPatch = ''
         patchShebangs Configure
  -    '' + lib.optionalString (lib.versionOlder version "1.1.0") ''
  +    '' + lib.optionalString (lib.versionOlder version "1.1.1") ''
         patchShebangs test/*
         for a in test/t* ; do
           substituteInPlace "$a" \
  
positive.code:     # config is a configure script which is not installed.
      + lib.optionalString (lib.versionAtLeast version "1.1.1") ''
        substituteInPlace config --replace '/usr/bin/env' '${buildPackages.coreutils}/bin/env'
      '' + lib.optionalString (lib.versionAtLeast version "1.1.0" && stdenv.hostPlatform.isMusl) ''
        substituteInPlace crypto/async/arch/async_posix.h \
          --replace '!defined(__ANDROID__) && !defined(__OpenBSD__)' \
                    '!defined(__ANDROID__) && !defined(__OpenBSD__) && 0'
  
negative.code:     ] ++ lib.optional enableSSL2 "enable-ssl2"
        ++ lib.optional enableSSL3 "enable-ssl3"
        ++ lib.optional (lib.versionAtLeast version "3.0.0") "enable-ktls"
        ++ lib.optional (lib.versionAtLeast version "1.1.1" && stdenv.hostPlatform.isAarch64) "no-afalgeng"
        # OpenSSL needs a specific `no-shared` configure flag.
        # See https://wiki.openssl.org/index.php/Compilation_and_Installation#Configure_Options
        # for a comprehensive list of configuration options.
        ++ lib.optional (lib.versionAtLeast version "1.1.1" && static) "no-shared"
        ++ lib.optional (lib.versionAtLeast version "3.0.0" && static) "no-module"
        # This introduces a reference to the CTLOG_FILE which is undesired when
        # trying to build binaries statically.
  