anchor.diff:  # cgit) that are needed here should be included directly in Nixpkgs as
   # files.
   
  -with lib;
  -
   let
     common = { version, sha256, patches ? [], withDocs ? false, extraMeta ? {} }:
      stdenv.mkDerivation rec {
  
positive.code: 
      postPatch = ''
        patchShebangs Configure
      '' + optionalString (versionOlder version "1.1.0") ''
        patchShebangs test/*
        for a in test/t* ; do
          substituteInPlace "$a" \
  
negative.code:       "-DUSE_CRYPTODEV_DIGESTS"
      ] ++ lib.optional enableSSL2 "enable-ssl2"
        ++ lib.optional enableSSL3 "enable-ssl3"
        ++ lib.optional (lib.versionAtLeast version "3.0.0") "enable-ktls"
        ++ lib.optional (lib.versionAtLeast version "1.1.0" && stdenv.hostPlatform.isAarch64) "no-afalgeng"
        # OpenSSL needs a specific `no-shared` configure flag.
        # See https://wiki.openssl.org/index.php/Compilation_and_Installation#Configure_Options
        # for a comprehensive list of configuration options.
        ++ lib.optional (lib.versionAtLeast version "1.1.0" && static) "no-shared";
  
      makeFlags = [
        "MANDIR=$(man)/share/man"
  