Could you pull in the patches from networkupstools/nut#504 instead?

@globin i can do that, yes. that would require using autoreconfHook which we don't currently use as this derivation uses a release tarball as src

Sure, that's fine obviously!

@globin sorry it's taking so long to get back to this, i just pushed a change that uses the patch to work with openssl 1.1

oops, it appears i was too slow and @aanderse took it upon themself to fix it by using nss instead of openssl. which approach do we want to take?

I've never used nut and know nothing about it. If you know anything about nut then you're in a much better position to determine which approach is better. Please feel free to replace my commit if yours is superior! 😄

would love to get an opinion from @nbp if possible

Upstream configure.ac states:

Check for with-ssl, and --with-nss or --with-openssl
Only one can be enabled at a time, with a preference for OpenSSL
if both are available